{"id":"CLSA-2026-1792832424","summary":"Fix CVE(s): CVE-2026-111497","details":"   * SECURITY UPDATE: Out-of-bounds write via invalid block switch in the decoder\n     - debian/patches/CVE-2026-111497.patch: return\n       BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH from DecodeBlockTypeAndLength\n       and propagate it through the literal, command and distance block-switch\n       decoders in c/dec/decode.c, add the error code to\n       c/include/brotli/decode.h\n     - CVE-2026-111497","modified":"2026-10-26T09:31:53.680460040Z","published":"2026-10-24T09:03:08Z","upstream":["CVE-2026-111497"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1792832424.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111497"}],"affected":[{"package":{"name":"brotli","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/brotli?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-2+deb10u1+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792832424.json"}},{"package":{"name":"libbrotli-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libbrotli-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-2+deb10u1+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792832424.json"}},{"package":{"name":"libbrotli1","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libbrotli1?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-2+deb10u1+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792832424.json"}},{"package":{"name":"python-brotli","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/python-brotli?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-2+deb10u1+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792832424.json"}},{"package":{"name":"python3-brotli","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/python3-brotli?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-2+deb10u1+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792832424.json"}}],"schema_version":"1.9.0"}