[ALSA-2026:2389] Important: brotli security update
Type:
security
Severity:
important
Release date:
2026-02-11
Description:
Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffman coding and 2nd order context modeling, with a compression ratio comparable to the best currently available general-purpose compression methods. It is similar in speed with deflate but offers more dense compression. Security Fix(es): * Scrapy: python-scrapy: brotli: Python brotli decompression bomb DoS (CVE-2025-6176) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 brotli-1.0.6-4.el8_10.aarch64.rpm 3cbd3ff9ae82a26094cd5c17a4006235945fa2ffd661ac2d73c381b96b12b411
aarch64 brotli-devel-1.0.6-4.el8_10.aarch64.rpm 65f386156f3c8d9c732b9db1ee5bcd636836c004384f633c1dd870f594d5b182
aarch64 python3-brotli-1.0.6-4.el8_10.aarch64.rpm 71154f1bfa1088046b0540b9dc398481faab8ba4830097db77dd3ecfea5d7a47
i686 brotli-1.0.6-4.el8_10.i686.rpm 18e50abb05577fe95a392ed3a7c6a67b2005c338c93febc12bcfaadb400f2ac8
i686 brotli-devel-1.0.6-4.el8_10.i686.rpm 953cc9575e4394068c66e8e63ba3b695b9f12471f6ba8d080734d42561722c42
ppc64le python3-brotli-1.0.6-4.el8_10.ppc64le.rpm a090081ac7351f5717bbf9f2044350e4d6aa76e1a558b7014aa0b73d456654af
ppc64le brotli-1.0.6-4.el8_10.ppc64le.rpm d5b588b5d659b753ec9e6158618c5644c1c71e028cf7e860c32666d329a9e5c4
ppc64le brotli-devel-1.0.6-4.el8_10.ppc64le.rpm e01f24daf6930b28020d59f334253a3964cd34baa8c16a6be2cd788798c729fc
s390x python3-brotli-1.0.6-4.el8_10.s390x.rpm 9185e6498fe7615012fd12bb0242cb772d88809f084b68cc84a82d567ebbc170
s390x brotli-1.0.6-4.el8_10.s390x.rpm 927177214f5d588d4b1435f513ef7ac823b750e202d40feb33ef873ce1381cb8
s390x brotli-devel-1.0.6-4.el8_10.s390x.rpm bcda24d7e1716e221b40369cc54a38600c22a0fae82dcada9d2af7dfb0763a25
x86_64 python3-brotli-1.0.6-4.el8_10.x86_64.rpm 00fc475b5eedf1a0448df3723196eae2e4fe440736bcfa6c2112a6e8ec67379a
x86_64 brotli-devel-1.0.6-4.el8_10.x86_64.rpm 7c5ed273609901aace8b622c582a6f2e90a4dfa833bda016a46733d7a1d53ef0
x86_64 brotli-1.0.6-4.el8_10.x86_64.rpm e6edba1470e246922d2199ebba2457c804d3972498fb2d63ddf7f19beda355d3
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.