[CLSA-2026:1792827285] brotli: Fix of CVE-2026-111497
Type:
security
Severity:
Critical
Release date:
2026-10-24 07:34:56 UTC
Description:
- CVE-2026-111497: reject invalid block switch commands in the decoder instead of silently ignoring them
CVEs fixed:
Updated packages:
  • brotli-1.0.6-3.el8.tuxcare.els1.i686.rpm
    sha:c28317a75e9425a0e98fffd4debf77e78bde29a7993c747d3aa7cc06184eb9ea
  • brotli-1.0.6-3.el8.tuxcare.els1.x86_64.rpm
    sha:26703cae16e5ca77e815b2d273fd30d5a0a5992093fae6fe1d5180add930da9d
  • brotli-devel-1.0.6-3.el8.tuxcare.els1.i686.rpm
    sha:2c7c9ef84bcc9b678ad8868db3384047ee541437598a07d87a71c50e25fa36fd
  • brotli-devel-1.0.6-3.el8.tuxcare.els1.x86_64.rpm
    sha:21c8ceb96f94ac9ecae94368c49fdf7eaceac96b7af1798c24d2d831fdfdf9ec
  • python3-brotli-1.0.6-3.el8.tuxcare.els1.i686.rpm
    sha:826867c08e92bf611313d1165dac29ed81cec7adcc1d9370626845765034a42e
  • python3-brotli-1.0.6-3.el8.tuxcare.els1.x86_64.rpm
    sha:4146f0acc608793599ebb01bd205d6d7017e2f4e1b4d5c8dd5340760449d2faa
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.