A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the "streaming" API as opposed to the "one-shot" API, and impose chunk size limits.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade dotnet-hostfxr-5.0Upgrade aspnetcore-runtime-5.0Upgrade dotnet-targeting-pack-5.0Upgrade dotnet-runtime-5.0Upgrade dotnet-apphost-pack-3.1Upgrade dotnet-targeting-pack-3.1Upgrade brotli-develUpgrade dotnet-sdk-3.1-source-built-artifactsUpgrade dotnet-hostfxr-3.1Upgrade aspnetcore-targeting-pack-5.0Upgrade brotliUpgrade dotnet-sdk-5.0Upgrade dotnet-sdk-5.0-source-built-artifactsUpgrade aspnetcore-runtime-3.1Upgrade dotnet-runtime-3.1Upgrade aspnetcore-targeting-pack-3.1Upgrade dotnet-sdk-3.1Upgrade dotnet-templates-5.0Upgrade dotnet-templates-3.1Upgrade python3-brotliUpgrade dotnet-apphost-pack-5.0 | May 4, 2022 | Sep 15, 2020 |
| Alpine Linux | — | Upgrade brotli | Dec 4, 2020 | Sep 15, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 15, 2020 |
| Centos_linux | — | Upgrade dotnet-targeting-pack-5.0Upgrade dotnet-runtime-3.1Upgrade dotnet-apphost-pack-3.1-debuginfoUpgrade aspnetcore-runtime-3.1Upgrade dotnet-runtime-5.0-debuginfoUpgrade dotnet-sdk-3.1Upgrade brotli-develUpgrade dotnet5.0-debugsourceUpgrade dotnet-apphost-pack-5.0-debuginfoUpgrade aspnetcore-targeting-pack-5.0Upgrade dotnet-runtime-3.1-debuginfoUpgrade dotnet-templates-3.1Upgrade dotnet5.0-debuginfoUpgrade dotnet-sdk-3.1-debuginfoUpgrade dotnet-apphost-pack-3.1Upgrade aspnetcore-runtime-5.0Upgrade dotnet-runtime-5.0Upgrade dotnet-templates-5.0Upgrade dotnet-targeting-pack-3.1Upgrade dotnet-sdk-5.0-debuginfoUpgrade dotnet3.1-debugsourceUpgrade brotli-debuginfoUpgrade dotnet-hostfxr-5.0-debuginfoUpgrade dotnet-apphost-pack-5.0Upgrade dotnet-hostfxr-3.1-debuginfoUpgrade aspnetcore-targeting-pack-3.1Upgrade python3-brotli-debuginfoUpgrade dotnet3.1-debuginfoUpgrade dotnet-hostfxr-5.0Upgrade python3-brotliUpgrade brotliUpgrade brotli-debugsourceUpgrade dotnet-hostfxr-3.1Upgrade dotnet-sdk-5.0 | Jun 1, 2021 | Sep 15, 2020 |
| Debian | — | Upgrade brotli | Dec 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade brotli | Dec 15, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade brotli | Oct 13, 2020 | Sep 15, 2020 |
| Microsoft Visual_studio | — | Update Microsoft Visual Studio 2019 to the latest version in the LTSC 16.7 version stream, or upgrade to a newer supported version of Visual Studio 2019.Update Microsoft Visual Studio 2019 to the latest version in the LTSC 16.9 version stream, or upgrade to a newer supported version of Visual Studio 2019.Update Microsoft Visual Studio 2019 to the latest version in the LTSC 16.11 version stream, or upgrade to a newer supported version of Visual Studio 2019.Update Microsoft Visual Studio 2022 to the latest version in the LTSC 17.0 version stream, or upgrade to a newer supported version of Visual Studio 2022.Update Microsoft Visual Studio 2022 to the latest version in the current channel channel. | Jun 25, 2025 | Mar 8, 2022 |
| Oracle_linux | — | Upgrade brotli-develUpgrade brotliUpgrade dotnet-sdk-3.1-source-built-artifactsUpgrade aspnetcore-targeting-pack-3.1Upgrade dotnet-runtime-5.0Upgrade dotnet-sdk-3.1Upgrade dotnet-hostfxr-3.1Upgrade aspnetcore-runtime-5.0Upgrade dotnet-runtime-3.1Upgrade dotnet-apphost-pack-5.0Upgrade dotnet-sdk-5.0Upgrade aspnetcore-runtime-3.1Upgrade dotnet-templates-5.0Upgrade dotnet-hostfxr-5.0Upgrade aspnetcore-targeting-pack-5.0Upgrade dotnet-targeting-pack-3.1Upgrade dotnet-templates-3.1Upgrade python3-brotliUpgrade dotnet-apphost-pack-3.1Upgrade dotnet-targeting-pack-5.0Upgrade dotnet-sdk-5.0-source-built-artifacts | May 26, 2021 | Aug 27, 2020 |
| Redhat_linux | — | Upgrade dotnet-targeting-pack-5.0Upgrade dotnet-sdk-5.0-source-built-artifactsUpgrade dotnet-runtime-5.0-debuginfoUpgrade dotnet-templates-3.1Upgrade dotnet-sdk-3.1-debuginfoUpgrade dotnet-apphost-pack-5.0-debuginfoUpgrade dotnet3.1-debuginfoUpgrade dotnet-apphost-pack-3.1Upgrade dotnet-runtime-5.0Upgrade dotnet-apphost-pack-3.1-debuginfoUpgrade aspnetcore-targeting-pack-5.0Upgrade dotnet3.1-debugsourceUpgrade dotnet-sdk-3.1-source-built-artifactsUpgrade dotnet5.0-debugsourceUpgrade dotnet-runtime-3.1-debuginfoUpgrade dotnet-hostfxr-5.0Upgrade dotnet-hostfxr-3.1Upgrade dotnet-targeting-pack-3.1Upgrade dotnet-sdk-5.0Upgrade aspnetcore-runtime-3.1Upgrade dotnet-runtime-3.1Upgrade aspnetcore-runtime-5.0Upgrade dotnet5.0-debuginfoUpgrade brotli-develUpgrade brotliUpgrade python3-brotliUpgrade dotnet-hostfxr-3.1-debuginfoUpgrade dotnet-sdk-5.0-debuginfoUpgrade python3-brotli-debuginfoUpgrade dotnet-hostfxr-5.0-debuginfoUpgrade dotnet-apphost-pack-5.0Upgrade brotli-debuginfoUpgrade dotnet-sdk-3.1Upgrade brotli-debugsourceUpgrade aspnetcore-targeting-pack-3.1Upgrade dotnet-templates-5.0 | May 21, 2021 | Sep 15, 2020 |
| Rocky_linux | — | Upgrade dotnet-runtime-5.0Upgrade dotnet-templates-5.0Upgrade dotnet-runtime-3.1-debuginfoUpgrade aspnetcore-runtime-3.1Upgrade brotli-develUpgrade dotnet-hostfxr-3.1Upgrade dotnet5.0-debuginfoUpgrade dotnet-templates-3.1Upgrade dotnet-sdk-3.1-source-built-artifactsUpgrade dotnet-apphost-pack-3.1Upgrade brotliUpgrade dotnet-sdk-3.1-debuginfoUpgrade dotnet-apphost-pack-5.0-debuginfoUpgrade dotnet-hostfxr-5.0Upgrade dotnet-runtime-3.1Upgrade dotnet-hostfxr-3.1-debuginfoUpgrade dotnet-sdk-3.1Upgrade aspnetcore-runtime-5.0Upgrade dotnet3.1-debuginfoUpgrade aspnetcore-targeting-pack-5.0Upgrade python3-brotliUpgrade dotnet-targeting-pack-5.0Upgrade dotnet-hostfxr-5.0-debuginfoUpgrade dotnet-apphost-pack-3.1-debuginfoUpgrade python3-brotli-debuginfoUpgrade dotnet-runtime-5.0-debuginfoUpgrade dotnet-apphost-pack-5.0Upgrade dotnet-sdk-5.0Upgrade dotnet-sdk-5.0-source-built-artifactsUpgrade dotnet-targeting-pack-3.1Upgrade dotnet-sdk-5.0-debuginfoUpgrade brotli-debugsourceUpgrade brotli-debuginfoUpgrade aspnetcore-targeting-pack-3.1 | Mar 5, 2024 | Sep 15, 2020 |
| Suse | — | Upgrade libbrotli-develUpgrade libbrotlicommon1Upgrade libbrotlienc1-32bitUpgrade brotliUpgrade libbrotlidec1-32bitUpgrade libbrotlidec1Upgrade libbrotlicommon1-32bitUpgrade libbrotlienc1 | Oct 1, 2020 | Sep 15, 2020 |
| Ubuntu | — | Upgrade brotliUpgrade libbrotli1Upgrade python3-brotliUpgrade python-brotli | Oct 6, 2020 | Sep 15, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 15, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub