Most recent entries from all

ALSA-2021:1702 — Moderate: brotli security update

Affected: AlmaLinux:8: brotli, AlmaLinux:8: brotli-devel, AlmaLinux:8: python3-brotli

Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffman coding and 2nd order context modeling, with a compression ratio comparable to the best currently available general-purpose compression methods. It is similar in speed with deflate but offers more dense compression.

Security Fix(es):

* brotli: buffer overflow when input chunk is larger than 2GiB (CVE-2020-8927)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2021-01775

Withdrawn: BELL-CVE-2020-8927 — CVE-2020-8927 does not affect BellSoft software

Withdrawn by the publisher.

BIT-brotli-2020-8927 — Buffer overflow in Brotli library

Affected: Bitnami: brotli

A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the "streaming" API as opposed to the "one-shot" API, and impose chunk size limits.

BREW-exiftool-CVE-2020-36846

Affected: Homebrew: exiftool

certfr-2021-avi-791 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2021-avi-791

CLEANSTART-2024-XN11840 — buffer overflow exists in the Brotli library versions prior to 1

Affected: CleanStart: brotli

Security vulnerability affects the brotli package. A buffer overflow exists in the Brotli library versions prior to 1.

EUVD-2026-323038

fkie_cve-2020-8927

GHSA-5v8v-66v8-mwm7 — Integer overflow in the bundled Brotli C library

Affected: crates.io: compu-brotli-sys, NuGet: Microsoft.NETCore.App.Runtime.linux-arm, NuGet: Microsoft.NETCore.App.Runtime.linux-arm64, NuGet: Microsoft.NETCore.App.Runtime.linux-musl-arm64, NuGet: Microsoft.NETCore.App.Runtime.linux-x64, NuGet: Microsoft.NETCore.App.Runtime.osx-x64, NuGet: Microsoft.NETCore.App.Runtime.win-arm, NuGet: Microsoft.NETCore.App.Runtime.win-arm64, NuGet: Microsoft.NETCore.App.Runtime.win-x64, NuGet: Microsoft.NETCore.App.Runtime.win-x86 and 108 more

gsd-2020-8927

openSUSE-SU-2020:1578-1 — Security update for brotli

Security update for brotli

PYSEC-2020-29

Affected: PyPI: brotli

RHSA-2022:0828 — Red Hat Security Advisory: .NET 5.0 on RHEL 7 security and bugfix update

brotli: buffer overflow when input chunk is larger than 2GiB dotnet: ASP.NET Denial of Service via FormPipeReader dotnet: double parser stack buffer overrun

RUSTSEC-2021-0131 — Integer overflow in the bundled Brotli C library

Affected: crates.io: brotli-sys

An updated version of `brotli-sys` has not been released. If one cannot update the C library, its authors recommend to use the "streaming" API as opposed to the "one-shot" API, and impose chunk size limits.

In Rust the issue can be mitigated by migrating to the `brotli` crate, which provides a Rust implementation of Brotli compression and decompression that is not affected by this issue.

SUSE-SU-2021:3942-1 — Security update for brotli

Security update for brotli

UBUNTU-CVE-2020-8927

Affected: Ubuntu:16.04:LTS: brotli, Ubuntu:18.04:LTS: brotli, Ubuntu:20.04:LTS: brotli

WID-SEC-W-2025-0227 — IBM QRadar SIEM: Mehrere Schwachstellen

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um seine Privilegien zu erweitern, Administratorrechte zu erlangen, beliebigen Programmcode auszuführen, Informationen offenzulegen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.