SUSE-SU-2026:4945-1

Опубликовано: 29 окт. 2026

Источник: suse-cvrf

Описание

Security update for brotli

This update for brotli fixes the following issue:

CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778).

Список пакетов

Container bci/spack:latest

libbrotli-devel-1.0.7-150200.3.8.1

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

libbrotlienc1-1.0.7-150200.3.8.1

Container private-registry/1.2/harbor-portal:latest

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

Container private-registry/1.2/harbor-trivy-adapter:latest

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

Container private-registry/harbor-portal:latest

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

Container private-registry/harbor-trivy-adapter:latest

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

Container suse/kea:2.6

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

Container suse/kiosk/xorg:latest

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

Container suse/ltss/sle15.4/sle15:latest

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

Container suse/ltss/sle15.5/sle15:latest

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

Container suse/ltss/sle15.6/sle15:latest

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

Container suse/postgres:16

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

Container suse/postgres:16.15

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

Container suse/postgres:17

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

Container suse/postgres:17.11

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

Container suse/postgres:latest

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

Container suse/rmt-server:latest

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

Container suse/sle-micro-rancher/5.3:latest

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

Container suse/sle-micro-rancher/5.4:latest

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

Container suse/sle-micro/5.3/toolbox:latest

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

Container suse/sle-micro/5.4/toolbox:latest

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

Container suse/sle-micro/5.5/toolbox:latest

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

Container suse/sle-micro/5.5:latest

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

Container suse/sle-micro/base-5.5:latest

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

Container suse/sle-micro/kvm-5.5:latest

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

Container suse/sle-micro/rt-5.5:latest

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

libbrotli-devel-1.0.7-150200.3.8.1

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlicommon1-32bit-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

libbrotlidec1-32bit-1.0.7-150200.3.8.1

libbrotlienc1-1.0.7-150200.3.8.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

libbrotli-devel-1.0.7-150200.3.8.1

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlicommon1-32bit-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

libbrotlidec1-32bit-1.0.7-150200.3.8.1

libbrotlienc1-1.0.7-150200.3.8.1

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

libbrotli-devel-1.0.7-150200.3.8.1

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlicommon1-32bit-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

libbrotlidec1-32bit-1.0.7-150200.3.8.1

libbrotlienc1-1.0.7-150200.3.8.1

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

libbrotli-devel-1.0.7-150200.3.8.1

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlicommon1-32bit-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

libbrotlidec1-32bit-1.0.7-150200.3.8.1

libbrotlienc1-1.0.7-150200.3.8.1

SUSE Linux Enterprise Micro 5.4

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

SUSE Linux Enterprise Micro 5.5

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

SUSE Linux Enterprise Module for Basesystem 15 SP7

libbrotli-devel-1.0.7-150200.3.8.1

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlicommon1-32bit-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

libbrotlidec1-32bit-1.0.7-150200.3.8.1

libbrotlienc1-1.0.7-150200.3.8.1

SUSE Linux Enterprise Server 15 SP4-LTSS

libbrotli-devel-1.0.7-150200.3.8.1

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlicommon1-32bit-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

libbrotlidec1-32bit-1.0.7-150200.3.8.1

libbrotlienc1-1.0.7-150200.3.8.1

SUSE Linux Enterprise Server 15 SP5-LTSS

libbrotli-devel-1.0.7-150200.3.8.1

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlicommon1-32bit-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

libbrotlidec1-32bit-1.0.7-150200.3.8.1

libbrotlienc1-1.0.7-150200.3.8.1

SUSE Linux Enterprise Server 15 SP6-LTSS

libbrotli-devel-1.0.7-150200.3.8.1

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlicommon1-32bit-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

libbrotlidec1-32bit-1.0.7-150200.3.8.1

libbrotlienc1-1.0.7-150200.3.8.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

libbrotli-devel-1.0.7-150200.3.8.1

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlicommon1-32bit-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

libbrotlidec1-32bit-1.0.7-150200.3.8.1

libbrotlienc1-1.0.7-150200.3.8.1

SUSE Linux Enterprise Server for SAP Applications 15 SP5

libbrotli-devel-1.0.7-150200.3.8.1

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlicommon1-32bit-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

libbrotlidec1-32bit-1.0.7-150200.3.8.1

libbrotlienc1-1.0.7-150200.3.8.1

SUSE Linux Enterprise Server for SAP Applications 15 SP6

libbrotli-devel-1.0.7-150200.3.8.1

libbrotlicommon1-1.0.7-150200.3.8.1

libbrotlicommon1-32bit-1.0.7-150200.3.8.1

libbrotlidec1-1.0.7-150200.3.8.1

libbrotlidec1-32bit-1.0.7-150200.3.8.1

libbrotlienc1-1.0.7-150200.3.8.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20264945-1/
Link for SUSE-SU-2026:4945-1
https://www.suse.com/support/update/announcement/2026/suse-su-20264945-1/
E-Mail link for SUSE-SU-2026:4945-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1287778
SUSE Bug 1287778
https://www.suse.com/security/cve/CVE-2026-111497/
SUSE CVE CVE-2026-111497 page

Описание

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.

Затронутые продукты

Container bci/spack:latest:libbrotli-devel-1.0.7-150200.3.8.1

Container bci/spack:latest:libbrotlicommon1-1.0.7-150200.3.8.1

Container bci/spack:latest:libbrotlidec1-1.0.7-150200.3.8.1

Container bci/spack:latest:libbrotlienc1-1.0.7-150200.3.8.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-111497.html
CVE-2026-111497
https://bugzilla.suse.com/1286564
SUSE Bug 1286564
https://bugzilla.suse.com/1287784
SUSE Bug 1287784
https://bugzilla.suse.com/1288115
SUSE Bug 1288115
https://bugzilla.suse.com/1288116
SUSE Bug 1288116
https://bugzilla.suse.com/1288117
SUSE Bug 1288117
https://bugzilla.suse.com/1288238
SUSE Bug 1288238
https://bugzilla.suse.com/1288595
SUSE Bug 1288595
https://bugzilla.suse.com/1288660
SUSE Bug 1288660
https://bugzilla.suse.com/1288827
SUSE Bug 1288827

SUSE-SU-2026:4945-1

Описание

Список пакетов

Container bci/spack:latest

Container private-registry/1.2/harbor-portal:latest

Container private-registry/1.2/harbor-trivy-adapter:latest

Container private-registry/harbor-portal:latest

Container private-registry/harbor-trivy-adapter:latest

Container suse/kea:2.6

Container suse/kiosk/xorg:latest

Container suse/ltss/sle15.4/sle15:latest

Container suse/ltss/sle15.5/sle15:latest

Container suse/ltss/sle15.6/sle15:latest

Container suse/postgres:16

Container suse/postgres:16.15

Container suse/postgres:17

Container suse/postgres:17.11

Container suse/postgres:latest

Container suse/rmt-server:latest

Container suse/sle-micro-rancher/5.3:latest

Container suse/sle-micro-rancher/5.4:latest

Container suse/sle-micro/5.3/toolbox:latest

Container suse/sle-micro/5.4/toolbox:latest

Container suse/sle-micro/5.5/toolbox:latest

Container suse/sle-micro/5.5:latest

Container suse/sle-micro/base-5.5:latest

Container suse/sle-micro/kvm-5.5:latest

Container suse/sle-micro/rt-5.5:latest

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

SUSE Linux Enterprise Micro 5.4

SUSE Linux Enterprise Micro 5.5

SUSE Linux Enterprise Module for Basesystem 15 SP7

SUSE Linux Enterprise Server 15 SP4-LTSS

SUSE Linux Enterprise Server 15 SP5-LTSS

SUSE Linux Enterprise Server 15 SP6-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP4

SUSE Linux Enterprise Server for SAP Applications 15 SP5

SUSE Linux Enterprise Server for SAP Applications 15 SP6

Ссылки

Уязвимость: CVE-2026-111497

Описание

Затронутые продукты

Ссылки