Ce mail provient de l'extérieur, restons vigilants

=====================================================================


                            CERT-Renater

                Note d'Information No. 2026/VULN1089
_____________________________________________________________________

DATE                : 27/10/2026

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Ubuntu versions prior to 26.10, 26.04 LTS,
                              24.04 LTS, 22.04 LTS.

====================================================================
https://ubuntu.com/security/notices/USN-8956-1
https://ubuntu.com/security/CVE-2026-111497
_____________________________________________________________________
 

USN-8956-1: Brotli vulnerability

Publication date

26 October 2026


Overview

Brotli could be made to crash or run programs if it received
specially crafted input.


Releases



Packages

    brotli - lossless compression algorithm and format (command
         line utility)


Details

It was discovered that Brotli incorrectly handled certain compressed
streams. A remote attacker could possibly use this issue to
cause a denial of service or execute arbitrary code.


Update instructions

In general, a standard system update will make all the necessary
changes.


Learn more about how to get the fixes.

The problem can be corrected by updating your system to the
following package versions:


Ubuntu Release             Package Version
26.10 stonking 	   brotli –  1.2.0-4ubuntu0.1
                   libbrotli1 –  1.2.0-4ubuntu0.1
                   python3-brotli –  1.2.0-4ubuntu0.1

26.04 LTS resolute 	brotli –  1.2.0-3ubuntu0.1
                        libbrotli1 –  1.2.0-3ubuntu0.1
                        python3-brotli –  1.2.0-3ubuntu0.1

24.04 LTS noble 	brotli –  1.1.0-2ubuntu0.1
                        libbrotli1 –  1.1.0-2ubuntu0.1
                        python3-brotli –  1.1.0-2ubuntu0.1

22.04 LTS jammy 	brotli –  1.0.9-2ubuntu0.1
                        libbrotli1 –  1.0.9-2ubuntu0.1
                        python3-brotli –  1.0.9-2ubuntu0.1


Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+
packages in Main and Universe repositories, and it is free
for up to five machines.


Get Ubuntu Pro

References

    CVE-2026-111497



=========================================================
+ CERT-RENATER        |    tel : 01-53-94-20-44         +
+ 23/25 Rue Daviel    |    fax : 01-53-94-20-41         +
+ 75013 Paris         |   email:cert@support.renater.fr +
=========================================================