| Package | brotli |
|---|---|
| Version | 1.0.7-2+deb10u2 (buster), 1.0.9-2+deb11u1 (bullseye) |
| Related CVEs | CVE-2026-111497 |
A vulnerability was discovered in Brotli, a generic-purpose lossless compression suite, which could result in denial of service, or potentially the execution of arbitrary code.
For Debian 10 buster, these problems have been fixed in version 1.0.7-2+deb10u2.
For Debian 11 bullseye, these problems have been fixed in version 1.0.9-2+deb11u1.
We recommend that you upgrade your brotli packages.
Further information about Extended LTS security advisories can be found in the dedicated section of our website.