Skip to content
OpenAdvisories
Medium RHSA-2021:1702 1 CVE

Red Hat Security Advisory: brotli security update

Published Sep 16, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 9

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream brotli-debuginfo 0:1.0.6-3.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream brotli-debugsource 0:1.0.6-3.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream brotli-devel 0:1.0.6-3.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-brotli 0:1.0.6-3.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-brotli-debuginfo 0:1.0.6-3.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos brotli 0:1.0.6-3.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos brotli-debuginfo 0:1.0.6-3.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos brotli-debugsource 0:1.0.6-3.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos python3-brotli-debuginfo 0:1.0.6-3.el8

Vulnerabilities 1

  • Medium 5.3
    CVE-2020-8927 Public exploit

    Buffer overflow in Brotli library

    A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It i…

    Google Brotli brotli brotli Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1879225
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1702.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-8927
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-8927
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-8927