[CLSA-2026:1792754583] brotli: Fix of CVE-2026-111497
Type:
security
Severity:
Critical
Release date:
2026-10-23 11:23:13 UTC
Description:
- CVE-2026-111497: report an error on an invalid block switch in the decoder instead of silently ignoring it
CVEs fixed:
Updated packages:
  • brotli-1.0.9-7.el9_2.tuxcare.els2.aarch64.rpm
    sha:6b78ecf3f1886afdffa96791d97059b93da353ca153e0415b9b2f78ef53b61c0
  • brotli-1.0.9-7.el9_2.tuxcare.els2.i686.rpm
    sha:b4a7cee1e795cfb7da666f32222a1bef747f98014ab2d3a2a63aa88692945947
  • brotli-1.0.9-7.el9_2.tuxcare.els2.x86_64.rpm
    sha:44a05241569296252a0d7762c41dd8a327897b73e5725f2fe97479b0b2ddb4b2
  • brotli-devel-1.0.9-7.el9_2.tuxcare.els2.aarch64.rpm
    sha:b67a476cc7ee86a430ec2f90d4b7b5a91aed34f6700b92ab2b46cfb3938fb737
  • brotli-devel-1.0.9-7.el9_2.tuxcare.els2.i686.rpm
    sha:c5d7e19239da41bd2f996d27076cc3c9406774eb6aeae0cfe8ff924320bce251
  • brotli-devel-1.0.9-7.el9_2.tuxcare.els2.x86_64.rpm
    sha:cd11c34e3b663b11d1fea7bc4d2dd3abed7e75c7a14643480db6c790bcb28170
  • libbrotli-1.0.9-7.el9_2.tuxcare.els2.aarch64.rpm
    sha:bd11ce39659d919950a0860bbafa9dd045443dd861a3a02549b77138bec8ecd8
  • libbrotli-1.0.9-7.el9_2.tuxcare.els2.i686.rpm
    sha:33d1f23396095ea842658fbb584281d114b3e29f805a2bbf6fa324fe76074ad3
  • libbrotli-1.0.9-7.el9_2.tuxcare.els2.x86_64.rpm
    sha:c40eb0b528586f4fd8ea2736a34a1231b1812d0b60c45f5589acdc5d8a0f4362
  • python3-brotli-1.0.9-7.el9_2.tuxcare.els2.aarch64.rpm
    sha:db70fec6d43270c871bcff905d1e9dc167c0d28454bf9375ca0df2491f124b45
  • python3-brotli-1.0.9-7.el9_2.tuxcare.els2.i686.rpm
    sha:e1e36e5bcfed6c627eca8ed3fcb182badd47c54456ff6d7d9bcbee78b51b454e
  • python3-brotli-1.0.9-7.el9_2.tuxcare.els2.x86_64.rpm
    sha:a6bf891df6d7e7a937e53dec1346d7d6095b98892cf257d14af4623d27e0ad5e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.