[CLSA-2026:1792827522] brotli: Fix of CVE-2026-111497
Type:
security
Severity:
Critical
Release date:
2026-10-24 07:38:53 UTC
Description:
- CVE-2026-111497: reject invalid block switch commands in the decoder instead of silently ignoring them
CVEs fixed:
Updated packages:
  • brotli-1.0.6-3.el8.tuxcare.els1.i686.rpm
    sha:042eed7005f496943fb095fc9eaac782fe59574ad27b56511a95d8a924ae854d
  • brotli-1.0.6-3.el8.tuxcare.els1.x86_64.rpm
    sha:a3bf99127983dcbe6ee93a23a774ff6da1470a7fe19a9ae93bb3fac6efae42b6
  • brotli-devel-1.0.6-3.el8.tuxcare.els1.i686.rpm
    sha:fc2fbb0ab050f5d44c679adbb076bd22c77b85aabcc964d0a5710574c1f5cd77
  • brotli-devel-1.0.6-3.el8.tuxcare.els1.x86_64.rpm
    sha:7a1fa743dd0f6466b14c701127b46789080dd27629e933283b51f1b74aaebe9e
  • python3-brotli-1.0.6-3.el8.tuxcare.els1.i686.rpm
    sha:36142fbf6106f9547a40fdb4da4956255928a1b68ef1cc8fdfd850deb767c579
  • python3-brotli-1.0.6-3.el8.tuxcare.els1.x86_64.rpm
    sha:16c22e80017afce704fab723217bb7a9e4106769d9b81707862b7b47228632ee
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.