[CLSA-2026:1792867127] brotli: Fix of CVE-2026-111497
Type:
security
Severity:
Critical
Release date:
2026-10-26 00:50:27 UTC
Description:
- CVE-2026-111497: reject invalid block switch commands in the decoder instead of silently ignoring them - Build with the base cmake and gcc on EL7, EPEL and SCL are not available, force 64-bit mode on aarch64 where gcc 4.8 breaks the decoder
CVEs fixed:
Updated packages:
  • brotli-1.0.9-10.el7.tuxcare.els1.aarch64.rpm
    sha:ba9776ac1a80e089e59a8fd2351a0d91bcff65466efa278c192731ec7f91f556
  • brotli-1.0.9-10.el7.tuxcare.els1.i686.rpm
    sha:fe4f52046538b1f9f31ab83387fef80c5504fd2d0a1aae242cf73d6f8491ef31
  • brotli-1.0.9-10.el7.tuxcare.els1.x86_64.rpm
    sha:151b3332a38ebab3c2bdd75357881c318d88792ec7746fc080285dfa82c5b23e
  • brotli-devel-1.0.9-10.el7.tuxcare.els1.aarch64.rpm
    sha:07109e1bc1a5bcd4610e73e3f30a2940eb348394e0de68e3fa3a69a648f8269d
  • brotli-devel-1.0.9-10.el7.tuxcare.els1.i686.rpm
    sha:a3d70b8f3af54eacea05186d20d4df581801c7ffdfff5b35dda71f5eda8b54b0
  • brotli-devel-1.0.9-10.el7.tuxcare.els1.x86_64.rpm
    sha:0c8548210468921f02c82f1a378d2607434e6c6816b619dab68c10390136a84d
  • libbrotli-1.0.9-10.el7.tuxcare.els1.aarch64.rpm
    sha:de57b6fd1ed1a13d3c67b22cb48237e1f382e6b2bbf03d302fbcc7c2004717f1
  • libbrotli-1.0.9-10.el7.tuxcare.els1.i686.rpm
    sha:e693eaa521333addc318ab8ac3278c4768bc57b1459df644fa1f656e35fc210a
  • libbrotli-1.0.9-10.el7.tuxcare.els1.x86_64.rpm
    sha:56b30a58d6493a7fb7b56fc50e241a1f1570587c577f344fc0df4b50128c8445
  • python3-brotli-1.0.9-10.el7.tuxcare.els1.aarch64.rpm
    sha:25bb350d6ffde15cc674536bc2ac9c1e5429eb238fdcbfae687fc2deabede315
  • python3-brotli-1.0.9-10.el7.tuxcare.els1.i686.rpm
    sha:88da10b20adb1b8471b65c93386c27dfcbf90beca14e4fd29a6cd08669804176
  • python3-brotli-1.0.9-10.el7.tuxcare.els1.x86_64.rpm
    sha:8506bab64b2f87e4fda3aaf427e91af68ac8b52fae6ec4f84535c229942ddeb2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.