[CLSA-2026:1792755607] brotli: Fix of CVE-2026-111497
Type:
security
Severity:
Critical
Release date:
2026-10-23 11:40:17 UTC
Description:
- CVE-2026-111497: report an error on an invalid block switch in the decoder instead of silently ignoring it
CVEs fixed:
Updated packages:
  • brotli-1.0.9-7.el9_5.tuxcare.els2.aarch64.rpm
    sha:df4d854b9149e64bc9c89f7ee40535dd879f52a420c071cabfff8ce38bcc19d3
  • brotli-1.0.9-7.el9_5.tuxcare.els2.i686.rpm
    sha:8814a6fe89de242f97c870c9ae432f46d5270b99e8a38625c659d1d9b9c44e05
  • brotli-1.0.9-7.el9_5.tuxcare.els2.x86_64.rpm
    sha:9a96cd5bf152dc9cd74d7dea0f6e9142c4ef9e284e02b73a37a485ff8a3cccd9
  • brotli-devel-1.0.9-7.el9_5.tuxcare.els2.aarch64.rpm
    sha:5df813f8218efc9997317416cea5cd311f20d17e942715fb4ac67517d1215c47
  • brotli-devel-1.0.9-7.el9_5.tuxcare.els2.i686.rpm
    sha:7515c69c5735d523c2f055cb68c79e8a441ff2a02676439411d15510fe270078
  • brotli-devel-1.0.9-7.el9_5.tuxcare.els2.x86_64.rpm
    sha:6b02ab28e8fe19d598bef79248aa375ea16b5e700e70a09a65ccc319c4c0857d
  • libbrotli-1.0.9-7.el9_5.tuxcare.els2.aarch64.rpm
    sha:dd3380e658ba3a81cf0b68ec32d5ce26d6f00bd4d5a86387fc30c1a39b84e1f9
  • libbrotli-1.0.9-7.el9_5.tuxcare.els2.i686.rpm
    sha:aa39aebfc92a5bc59e4e08c46a35a5f78a1061ddf0d73fb2af16a325c820513b
  • libbrotli-1.0.9-7.el9_5.tuxcare.els2.x86_64.rpm
    sha:913a39ca5693c42fb3c26aaeb15018b7bf91c10660c9df186c413ea88986c099
  • python3-brotli-1.0.9-7.el9_5.tuxcare.els2.aarch64.rpm
    sha:732b4edb176cbc19aa460f9cabc2c2e44b5426f8b13db077e2c49b395f3e2d00
  • python3-brotli-1.0.9-7.el9_5.tuxcare.els2.i686.rpm
    sha:d47206aded3486d1ecdf7554fb1e8c026eb82021de22f8acebd1044fa9addf9b
  • python3-brotli-1.0.9-7.el9_5.tuxcare.els2.x86_64.rpm
    sha:208afb95999129f32077266d08c4947605763d03dbcbe00255d06a582296f1c4
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.