[CLSA-2026:1792832424] Fix CVE(s): CVE-2026-111497
Type:
security
Severity:
Critical
Release date:
2026-10-24 09:03:08 UTC
Description:
* SECURITY UPDATE: Out-of-bounds write via invalid block switch in the decoder - debian/patches/CVE-2026-111497.patch: return BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH from DecodeBlockTypeAndLength and propagate it through the literal, command and distance block-switch decoders in c/dec/decode.c, add the error code to c/include/brotli/decode.h - CVE-2026-111497
CVEs fixed:
Updated packages:
  • brotli_1.0.7-2+deb10u1+tuxcare.els1_amd64.deb
    sha:f39df2df8a98faa54789da27c0fbc77ac498e983
  • libbrotli-dev_1.0.7-2+deb10u1+tuxcare.els1_amd64.deb
    sha:b2bb2f1744c77a63c9f96e8320b2b2d28bed8d30
  • libbrotli1_1.0.7-2+deb10u1+tuxcare.els1_amd64.deb
    sha:cf69c7a239192fff2bee75f4b9402f36d47d29bc
  • python-brotli_1.0.7-2+deb10u1+tuxcare.els1_amd64.deb
    sha:acc8c581586be8d1d03a764412df97c67a93bf02
  • python3-brotli_1.0.7-2+deb10u1+tuxcare.els1_amd64.deb
    sha:e2081238b3d79193c9364c82393cf09c63f9afef
  • brotli_1.0.7-2+deb10u1+tuxcare.els1_arm64.deb
    sha:0f628fcff085a4a8b3a8cf8ab2815d6dc371d54b
  • libbrotli-dev_1.0.7-2+deb10u1+tuxcare.els1_arm64.deb
    sha:adf12b25f3498973cb5066a89dde691188516394
  • libbrotli1_1.0.7-2+deb10u1+tuxcare.els1_arm64.deb
    sha:5003a1b344f6912367128ea7bd6959d6e2218140
  • python-brotli_1.0.7-2+deb10u1+tuxcare.els1_arm64.deb
    sha:b9643f3affa45ae344afab88116288890520804a
  • python3-brotli_1.0.7-2+deb10u1+tuxcare.els1_arm64.deb
    sha:141b6c7a97da971b8a205dc3489517e9adcb6370
  • brotli_1.0.7-2+deb10u1+tuxcare.els1_armel.deb
    sha:6a71436b43dfac01b799fd135cfcc82b8d2e300e
  • libbrotli-dev_1.0.7-2+deb10u1+tuxcare.els1_armel.deb
    sha:7c005558aecba791bfda95e84313429eafbb804b
  • libbrotli1_1.0.7-2+deb10u1+tuxcare.els1_armel.deb
    sha:0469f2cd889c535adcea26ab3eb60f024f6893c2
  • python-brotli_1.0.7-2+deb10u1+tuxcare.els1_armel.deb
    sha:74ee75540eb667e8bf51f1d27ec0fb7fb0c3414c
  • python3-brotli_1.0.7-2+deb10u1+tuxcare.els1_armel.deb
    sha:f13e7a0c275000337ed3c921102bd8a82198e5a4
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.