[CLSA-2026:1792827041] brotli: Fix of CVE-2026-111497
Type:
security
Severity:
Critical
Release date:
2026-10-24 07:30:52 UTC
Description:
- CVE-2026-111497: reject invalid block switch commands in the decoder instead of silently ignoring them
CVEs fixed:
Updated packages:
  • brotli-1.0.6-3.el8.tuxcare.els1.i686.rpm
    sha:6ef2ae3b939e0f60ee57aa1e470fefd2d5157a9316d07e9ce9200bbc76ea097e
  • brotli-1.0.6-3.el8.tuxcare.els1.x86_64.rpm
    sha:313e10181627a8afe0522d1aa611836256cda6e164a11a521755da147fd798cd
  • brotli-devel-1.0.6-3.el8.tuxcare.els1.i686.rpm
    sha:6ef896a4565f87ba26d5d8d05863d56115fefe483acf27667cd39105e00c3166
  • brotli-devel-1.0.6-3.el8.tuxcare.els1.x86_64.rpm
    sha:9829fdb1be546a408999d9b13ec86991d6c093733da7f6c8a20bb79ec95d6ce8
  • python3-brotli-1.0.6-3.el8.tuxcare.els1.i686.rpm
    sha:4ecbb8a9f4f45e509bc43e4ba815fbd93cde4f58d73a923e473283a711c7b563
  • python3-brotli-1.0.6-3.el8.tuxcare.els1.x86_64.rpm
    sha:ae6cc4c1c892e78dcb95f3f430166bb1d0e65018f61bfafb8f21893aca43bb38
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.