[CLSA-2026:1792755938] brotli: Fix of CVE-2026-111497
Type:
security
Severity:
Critical
Release date:
2026-10-23 11:45:47 UTC
Description:
- CVE-2026-111497: reject invalid block switch commands in the decoder instead of silently ignoring them
CVEs fixed:
Updated packages:
  • brotli-1.0.9-10.el9_8.tuxcare.els1.aarch64.rpm
    sha:eaadf9bf662c34f7965abb2f3f38d49227a8dad4156cf928b16aec51f3bb6493
  • brotli-1.0.9-10.el9_8.tuxcare.els1.i686.rpm
    sha:3f04b06baa0663c658076d9aa8ce671908163fb7ab08821289b137ddd79df3a7
  • brotli-1.0.9-10.el9_8.tuxcare.els1.x86_64.rpm
    sha:a5ad6d285978d1c3c1079454104f3862238708c0017485abe61bfc3b0efecd0d
  • brotli-devel-1.0.9-10.el9_8.tuxcare.els1.aarch64.rpm
    sha:a687e2a469e8cb18324f45b45cc4d163ca9323f2e8bae93cbcbc455d4790b49b
  • brotli-devel-1.0.9-10.el9_8.tuxcare.els1.i686.rpm
    sha:1cc4137c6fb3bdccca18a2543dcced7756089a7156fbd186f8ad4f2cee1858ae
  • brotli-devel-1.0.9-10.el9_8.tuxcare.els1.x86_64.rpm
    sha:ffab93ae0b8c351ffe1f9865a813124c9a9c4cb87104afba20208bb79622f76c
  • libbrotli-1.0.9-10.el9_8.tuxcare.els1.aarch64.rpm
    sha:88efd77170b9400883608238d8d89425cfe3e19c34a635a2ed4e8d22294c4fd0
  • libbrotli-1.0.9-10.el9_8.tuxcare.els1.i686.rpm
    sha:002bfac0f05b1d52726aa58fa7d10fb7a7f3d21b796e2de1366f30ab6b247782
  • libbrotli-1.0.9-10.el9_8.tuxcare.els1.x86_64.rpm
    sha:101cc819ac313a4f4016114d518b1f326ac72856b52ac0abc47ea1744eb8585d
  • python3-brotli-1.0.9-10.el9_8.tuxcare.els1.aarch64.rpm
    sha:1af541b19cb4a0f8beeae8aff8eaba149a2b8545a266a995005337abe3c63695
  • python3-brotli-1.0.9-10.el9_8.tuxcare.els1.i686.rpm
    sha:716063d4c4e48f7f1b763da9e6b8a3744054a1b2d07794ee1e5ae53cca810a92
  • python3-brotli-1.0.9-10.el9_8.tuxcare.els1.x86_64.rpm
    sha:1ee55762797118fc23cd26c6a53e52315d4215be1803d624b6afaddf987d8ff7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.