p PatchFirst

RLSA-2026:90449

RLSA-2026:90449 · Important: brotli security update

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffman coding and 2nd order context modeling, with a compression ratio comparable to the best currently available general-purpose compression methods. It is similar in speed with deflate but offers more dense compression. Security Fix(es): * brotli: Out-of-Bounds Write in Google Brotli Decoder (CVE-2026-111497) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVSS 8.1 · High · Fix available

Published
Updated

Stack: system

Affected products and versions

  • brotli Rocky Linux:10

    Affected ranges
    • ECOSYSTEM: < 0:1.1.0-8.el10_2.1

    Update to 0:1.1.0-8.el10_2.1

Original sources

Check your server →