Vulnerability feed
CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run
| Expand | Severity |
Score |
Advisory |
Title |
Source |
Flags |
Published |
|---|---|---|---|---|---|---|---|
| Unknown | n/a | DSA-6582-1 |
brotli security update
Debian, BrotliDebian Linux, Brotli, Debian brotli
|
Debian Security Advisories | |||
|
DSA-6582-1CVE-2026-111497brotli security update
Executive summaryDebian has released a security update for the brotli compression package, which is used in Debian's stable distribution (trixie). The advisory says the flaw could lead to denial of service or possibly arbitrary code execution, and Debian recommends upgrading brotli packages. Technical summaryThe advisory describes a vulnerability in Brotli, a general-purpose lossless compression suite, that could result in denial of service or potentially arbitrary code execution. It is tracked as CVE-2026-111497 with Debian bug 1151690. The vulnerability class, attack vector, and preconditions are not stated. For the stable distribution (trixie), the fixed version is 1.1.0-2+deb13u1. Workarounds are not stated, and no detection guidance is given beyond the recommendation to upgrade brotli packages and consult the Debian security tracker. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from lists.debian.org/debian-security-announce/2026/msg00498.html ScoreNo CVSS score published. Affects
Debian Security TeamPublished
Read the advisory
|
|||||||