-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 23 Oct 2026 10:13:41 -0300 Source: brotli Architecture: source Version: 1.0.9-2+deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: Tomasz Buchert <tomasz@debian.org> Changed-By: Santiago Ruano Rincón <santiagorr@riseup.net> Changes: brotli (1.0.9-2+deb12u1) bookworm-security; urgency=medium . * Non-maintainer upload by the LTS Team. * Fix CVE-2026-111497: out-of-bounds write issue which permits remote code execution. Detect and report invalid stream earlier Checksums-Sha1: e03ffdac024dfbb61a5e3d3e7d97fea76b52ca01 1741 brotli_1.0.9-2+deb12u1.dsc ddfefdf2593b3f03eec221a7f4ceaa710e5a2e6b 486984 brotli_1.0.9.orig.tar.gz 2a9cee95dc9b2ee586c79c912083216644cd4436 7828 brotli_1.0.9-2+deb12u1.debian.tar.xz d4ef22d4dbea8ab97dfe384cdb79f0f89aef9d6f 7341 brotli_1.0.9-2+deb12u1_source.buildinfo Checksums-Sha256: 942ab3bccf28fa76d2c98a4e4a3a13390ee4484a2250d95a9ca46e6fbe0d6240 1741 brotli_1.0.9-2+deb12u1.dsc f9e8d81d0405ba66d181529af42a3354f838c939095ff99930da6aa9cdf6fe46 486984 brotli_1.0.9.orig.tar.gz 110534b0960a4d013942f48c5dcdee34d39501fcb40cd24106e160ad233cc8be 7828 brotli_1.0.9-2+deb12u1.debian.tar.xz 411ca601e042248fdbfaf8424be2de434849ef94db881a848993d612ff01203f 7341 brotli_1.0.9-2+deb12u1_source.buildinfo Files: 6764d47d9903536d19fbbc81914b949e 1741 python optional brotli_1.0.9-2+deb12u1.dsc c2274f0c7af8470ad514637c35bcee7d 486984 python optional brotli_1.0.9.orig.tar.gz dd18d98a9e7814c82efd2bef655664f5 7828 python optional brotli_1.0.9-2+deb12u1.debian.tar.xz f5a5cbf110a2b23c090b747586df86d3 7341 python optional brotli_1.0.9-2+deb12u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iIwEARYKADQWIQR+lHTq7mkJOyB6t2Un3j1FEEiG7wUCatu6RxYcc2FudGlhZ29y ckByaXNldXAubmV0AAoJECfePUUQSIbvF38BANWAuxX4cKYbuXUyk8ollbYf6m4R nEQWF7NYyuzrY/LvAQD/bF6PAyPkILSFlVrnUl3YHoP6QLNivD02m+bujW/9AQ== =eOfw -----END PGP SIGNATURE-----
