openSUSE-SU-2026:22183-1
openSUSE-SU-2026:22183-1 · Security update for python-Brotli
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
This update for python-Brotli fixes the following issues: - CVE-2025-6176: denial of service (DoS) due to a flaw in its brotli decompression (bsc#1252945). - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287779). Update to 1.2.1: - **decoder / encoder: added static initialization to reduce binary size** - python: allow limiting decoder output (see SECURITY section) - python: modernize extension / allow multi-phase module initialization - decoder / encoder: static tables use "small" model (allows 2GiB+ binaries)
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
python-brotli openSUSE:Leap 16.0
- Plages de versions concernées
- ECOSYSTEM: < 1.2.1-160000.1.1
Mettez à jour vers 1.2.1-160000.1.1