Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2026:22213-1

Опубликовано: 01 нояб. 2026
Источник: suse-cvrf

Описание

Security update for brotli

This update for brotli fixes the following issue:

  • CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778).

Список пакетов

openSUSE Leap 16.0
brotli-1.1.0-160000.3.1
libbrotli-devel-1.1.0-160000.3.1
libbrotlicommon1-1.1.0-160000.3.1
libbrotlicommon1-x86-64-v3-1.1.0-160000.3.1
libbrotlidec1-1.1.0-160000.3.1
libbrotlidec1-x86-64-v3-1.1.0-160000.3.1
libbrotlienc1-1.1.0-160000.3.1
libbrotlienc1-x86-64-v3-1.1.0-160000.3.1

Ссылки

Описание

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.

Затронутые продукты
openSUSE Leap 16.0:brotli-1.1.0-160000.3.1
openSUSE Leap 16.0:libbrotli-devel-1.1.0-160000.3.1
openSUSE Leap 16.0:libbrotlicommon1-1.1.0-160000.3.1
openSUSE Leap 16.0:libbrotlicommon1-x86-64-v3-1.1.0-160000.3.1
Ссылки