Skip to content
OpenAdvisories
High 1 exploited CVE ELSA-2026-90501 1 CVE

Important: brotli security update (Oracle Linux 8)

Published Oct 27, 2026 · Updated Oct 27, 2026

Ecosystem: Oracle Linux

Summary

[1.0.6-5]
- Resolves: RHEL-290271
- CVE-2026-111497 brotli: Out-of-Bounds Write in Google Brotli Decoder

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 8 brotli 0:1.0.6-5.el8_10
Oracle Linux · 8 brotli-devel 0:1.0.6-5.el8_10
Oracle Linux · 8 python3-brotli 0:1.0.6-5.el8_10

Vulnerabilities 1

  • Critical 9.2
    CVE-2026-111497 Exploited Public exploit EPSS 83%

    Out-of-Bounds Write in Google Brotli Decoder

    A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause …

    Google Brotli firefox open-webui Debian Ubuntu Azure Linux Alpine Wolfi PyPI Go Hex
    KEV Oct 27, 2026