[CLSA-2026:1792824700] Fix CVE(s): CVE-2026-111497
Type:
security
Severity:
Critical
Release date:
2026-10-24 06:51:51 UTC
Description:
* SECURITY UPDATE: Out-of-bounds write via invalid block switch in decoder - debian/patches/CVE-2026-111497.patch: abort decoding with BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH in c/dec/decode.c - CVE-2026-111497
CVEs fixed:
Updated packages:
  • brotli_1.0.7-6ubuntu0.1+tuxcare.els1_amd64.deb
    sha:81ce670b555da7319d4a36a2228551c379df3395
  • libbrotli-dev_1.0.7-6ubuntu0.1+tuxcare.els1_amd64.deb
    sha:3018fbc32d2c2fd07e33b3ceeb6e100fd279a957
  • libbrotli1_1.0.7-6ubuntu0.1+tuxcare.els1_amd64.deb
    sha:9b4e9243633eda1cb60bd05336c90da1d12b2257
  • python3-brotli_1.0.7-6ubuntu0.1+tuxcare.els1_amd64.deb
    sha:eda8391c37a87aed958d8712a3306d6e4d33625d
  • brotli_1.0.7-6ubuntu0.1+tuxcare.els1_arm64.deb
    sha:bf4e447a739ad4bd6028033e4d0d12193e87392b
  • libbrotli-dev_1.0.7-6ubuntu0.1+tuxcare.els1_arm64.deb
    sha:a1def316ab31e8688331126318a7ab875ac15b43
  • libbrotli1_1.0.7-6ubuntu0.1+tuxcare.els1_arm64.deb
    sha:ea7b8f54eacf9ced9c92505e9091a5413cbfc9f8
  • python3-brotli_1.0.7-6ubuntu0.1+tuxcare.els1_arm64.deb
    sha:84c033e01031b18c3b6c380f915258e5bd3e2647
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.