Red Hat Security AdvisoryRHSA-2021:1702
brotli security update
Released 2021-05-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) brotli-devel-1.0.6-3.el8, python3-brotli-1.0.6-3.el8
- Red Hat Enterprise Linux BaseOS (v. 8) brotli-1.0.6-3.el8
Fixes 1 record
Priority MEDIUM 41
A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over…
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.03217 · Published 2020-09-15 · Fixed in 1.0.9, 3.1.23 +3 CWE-130
