[CLSA-2026:1792867484] brotli: Fix of CVE-2026-111497
Type:
security
Severity:
Critical
Release date:
2026-10-24 18:45:25 UTC
Description:
- CVE-2026-111497: reject invalid block switch commands in the decoder instead of silently ignoring them - Build with the base cmake and gcc on EL7, EPEL and SCL are not available, force 64-bit mode on aarch64 where gcc 4.8 breaks the decoder
CVEs fixed:
Updated packages:
  • brotli-1.0.9-10.el7.tuxcare.els1.i686.rpm
    sha:56acb115eddd53e2b4bd6208129aeb2461b9522f3ad955df6ed5cdb2f1a3d7e3
  • brotli-1.0.9-10.el7.tuxcare.els1.x86_64.rpm
    sha:0055628811e336396728403432890f845c66876bbb24e1783a3ee660448a0035
  • brotli-devel-1.0.9-10.el7.tuxcare.els1.i686.rpm
    sha:bf606f27d1debff0c7a4aca3299b2e0e47e0420d5c4c63b769b270c1f368280b
  • brotli-devel-1.0.9-10.el7.tuxcare.els1.x86_64.rpm
    sha:85901c55ded21b2a73a5d6511ef93b01422b747dfa52f933b6f6a16f57d9c545
  • libbrotli-1.0.9-10.el7.tuxcare.els1.i686.rpm
    sha:2f7cf18a74cea549ed8b61fd724feea815ab8a5d3cf26b31db1ba238c7deb21d
  • libbrotli-1.0.9-10.el7.tuxcare.els1.x86_64.rpm
    sha:c4a968a9cc3661d286112f7c4b7a1997ac6d84e4bcbcbcb720e788cb9cea7091
  • python3-brotli-1.0.9-10.el7.tuxcare.els1.i686.rpm
    sha:a1a67e285fe09c73f7f15b282d1f47aa8b686361fc04224fc77142e1df473352
  • python3-brotli-1.0.9-10.el7.tuxcare.els1.x86_64.rpm
    sha:6dade2900c77f5f1145c10234d6f933513a0f67c9cad093da41abf454424709b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.