| Release | Version |
|---|---|
| bookworm | 0.3.65-3+deb12u1 |
| trixie | 1.4.2-1 |
| forky | 1.6.8-1 |
| sid | 1.6.8-1 |
| Bug | bookworm | trixie | forky | sid | Description |
|---|---|---|---|---|---|
| CVE-2026-14330 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | vulnerable | vulnerable | Multiple unbounded alloca() calls in the PulseAudio protocol server. |
| CVE-2026-14324 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | RAOP module accepts unbounded Content-Length values and does not check ... |
| CVE-2026-5674 | vulnerable | vulnerable (no DSA) | vulnerable | vulnerable | A flaw was found in PipeWire, a multimedia server. This vulnerability ... |
| Bug | bookworm | trixie | forky | sid | Description |
|---|---|---|---|---|---|
| CVE-2022-4964 | vulnerable | fixed | fixed | fixed | Ubuntu's pipewire-pulse in snap grants microphone access even when the ... |