Red Hat Security AdvisoryRHSA-2026:2229
brotli security update
Released 2026-02-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v.9.6) brotli-1.0.9-7.el9_6.1, brotli-devel-1.0.9-7.el9_6.1, python3-brotli-1.0.9-7.el9_6.1
- Red Hat Enterprise Linux BaseOS EUS (v.9.6) brotli-1.0.9-7.el9_6.1, libbrotli-1.0.9-7.el9_6.1
Fixes 1 record
Priority HIGH 72
Scrapy versions up to 2.13.2 are vulnerable to a denial of service (DoS) attack due to a flaw in its brotli decompression implementation.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.00533 · Published 2025-10-31 · Partial fix · 1.2.0, 2.13.4 CWE-400
