CLSA-2026-1792824700

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1792824700.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1792824700
Upstream
Published
2026-10-24T06:51:51Z
Modified
2026-10-26T09:32:06Z
Summary
Fix CVE(s): CVE-2026-111497
Details
  • SECURITY UPDATE: Out-of-bounds write via invalid block switch in decoder
    • debian/patches/CVE-2026-111497.patch: abort decoding with BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH in c/dec/decode.c
    • CVE-2026-111497
References

Affected packages

TuxCare:Ubuntu:20.04 / brotli

Package

Name
brotli
Purl
pkg:deb/tuxcare/brotli?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.0.7-6ubuntu0.1+tuxcare.els1

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1792824700.json"

TuxCare:Ubuntu:20.04 / libbrotli-dev

Package

Name
libbrotli-dev
Purl
pkg:deb/tuxcare/libbrotli-dev?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.0.7-6ubuntu0.1+tuxcare.els1

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1792824700.json"

TuxCare:Ubuntu:20.04 / libbrotli1

Package

Name
libbrotli1
Purl
pkg:deb/tuxcare/libbrotli1?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.0.7-6ubuntu0.1+tuxcare.els1

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1792824700.json"

TuxCare:Ubuntu:20.04 / python3-brotli

Package

Name
python3-brotli
Purl
pkg:deb/tuxcare/python3-brotli?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.0.7-6ubuntu0.1+tuxcare.els1

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1792824700.json"