[CLSA-2026:1792865919] brotli: Fix of CVE-2026-111497
Type:
security
Severity:
Critical
Release date:
2026-10-24 18:19:12 UTC
Description:
- CVE-2026-111497: reject invalid block switch commands in the decoder instead of silently ignoring them - Build with the base cmake and gcc on EL7, EPEL and SCL are not available, force 64-bit mode on aarch64 where gcc 4.8 breaks the decoder
CVEs fixed:
Updated packages:
  • brotli-1.0.9-10.el7.tuxcare.els1.i686.rpm
    sha:dda0c0802cd4c3e998dd1dcf04ddc64cf190905ac7cb92b6d94ae5a9d271b503
  • brotli-1.0.9-10.el7.tuxcare.els1.x86_64.rpm
    sha:4e72a304a25159e7605a7113adc0a42126540787608721c1c6acbab441c5fe11
  • brotli-devel-1.0.9-10.el7.tuxcare.els1.i686.rpm
    sha:5234f0ebfe05e0dded2570fdfa25e969cb74b5ccac5678f50ea787efdeaa38e9
  • brotli-devel-1.0.9-10.el7.tuxcare.els1.x86_64.rpm
    sha:cb31d996418b15d3a94068e2debd9c15535fd542507eadc01d61649f1b05d254
  • libbrotli-1.0.9-10.el7.tuxcare.els1.i686.rpm
    sha:18ac354ea78803c500916d3ea5c1fbf99a47f6d036ebc86823dd584c0342a56a
  • libbrotli-1.0.9-10.el7.tuxcare.els1.x86_64.rpm
    sha:a6819033fc9cbd5abfb3374a5a0feca00eab6b930c5244f00c29f575eaa89546
  • python3-brotli-1.0.9-10.el7.tuxcare.els1.i686.rpm
    sha:a2edd53b1527f3a80c4283f91d803c9cec25b0d9ce3e9d445ed7dfe826c607ee
  • python3-brotli-1.0.9-10.el7.tuxcare.els1.x86_64.rpm
    sha:88e1405314c40b4f210ab08ad00d8f40b07f8134f082482c8f4827414e8468be
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.