Skip to content
OpenAdvisories
Medium ELSA-2021-1702 1 CVE

Moderate: brotli security update (Oracle Linux 8)

Published May 25, 2021 · Updated May 25, 2021

Ecosystem: Oracle Linux

Summary

[1.0.6-3]
- Resolves: CVE-2020-8927

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 8 brotli 0:1.0.6-3.el8
Oracle Linux · 8 brotli-devel 0:1.0.6-3.el8
Oracle Linux · 8 python3-brotli 0:1.0.6-3.el8

Vulnerabilities 1

  • Medium 5.3
    CVE-2020-8927 Public exploit

    Buffer overflow in Brotli library

    A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It i…

    Google Brotli brotli brotli Debian Ubuntu Azure Linux Alpine