RLSA-2026:0845

Synopsis

Important: brotli security update

Description

Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffman coding and 2nd order context modeling, with a compression ratio comparable to the best currently available general-purpose compression methods. It is similar in speed with deflate but offers more dense compression.

Security Fix(es):

* Scrapy: python-scrapy: brotli: Python brotli decompression bomb DoS (CVE-2025-6176)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 10 aarch64 Rocky Linux 10 ppc64le Rocky Linux 10 s390x Rocky Linux 10 x86_64

Fixes

2408762

CVEs

CVE-2025-6176

Affected packages

Rocky Linux 10 ppc64le - BaseOS

libbrotli-debuginfo-0:1.1.0-7.el10_1.ppc64le.rpm libbrotli-0:1.1.0-7.el10_1.ppc64le.rpm brotli-debuginfo-0:1.1.0-7.el10_1.ppc64le.rpm brotli-0:1.1.0-7.el10_1.src.rpm brotli-debugsource-0:1.1.0-7.el10_1.ppc64le.rpm

Rocky Linux 10 s390x - AppStream

brotli-0:1.1.0-7.el10_1.s390x.rpm python3-brotli-0:1.1.0-7.el10_1.s390x.rpm python3-brotli-debuginfo-0:1.1.0-7.el10_1.s390x.rpm brotli-devel-0:1.1.0-7.el10_1.s390x.rpm

Rocky Linux 10 aarch64 - AppStream

python3-brotli-debuginfo-0:1.1.0-7.el10_1.aarch64.rpm python3-brotli-0:1.1.0-7.el10_1.aarch64.rpm brotli-devel-0:1.1.0-7.el10_1.aarch64.rpm brotli-0:1.1.0-7.el10_1.aarch64.rpm

Rocky Linux 10 ppc64le - AppStream

python3-brotli-0:1.1.0-7.el10_1.ppc64le.rpm python3-brotli-debuginfo-0:1.1.0-7.el10_1.ppc64le.rpm brotli-0:1.1.0-7.el10_1.ppc64le.rpm brotli-devel-0:1.1.0-7.el10_1.ppc64le.rpm

Rocky Linux 10 aarch64 - BaseOS

brotli-debuginfo-0:1.1.0-7.el10_1.aarch64.rpm brotli-debugsource-0:1.1.0-7.el10_1.aarch64.rpm libbrotli-0:1.1.0-7.el10_1.aarch64.rpm brotli-0:1.1.0-7.el10_1.src.rpm libbrotli-debuginfo-0:1.1.0-7.el10_1.aarch64.rpm

Rocky Linux 10 s390x - BaseOS

brotli-debugsource-0:1.1.0-7.el10_1.s390x.rpm libbrotli-debuginfo-0:1.1.0-7.el10_1.s390x.rpm brotli-0:1.1.0-7.el10_1.src.rpm brotli-debuginfo-0:1.1.0-7.el10_1.s390x.rpm libbrotli-0:1.1.0-7.el10_1.s390x.rpm

Rocky Linux 10 x86_64 - AppStream

brotli-devel-0:1.1.0-7.el10_1.x86_64.rpm brotli-0:1.1.0-7.el10_1.x86_64.rpm python3-brotli-debuginfo-0:1.1.0-7.el10_1.x86_64.rpm python3-brotli-0:1.1.0-7.el10_1.x86_64.rpm

Rocky Linux 10 x86_64 - BaseOS

brotli-debuginfo-0:1.1.0-7.el10_1.x86_64.rpm brotli-0:1.1.0-7.el10_1.src.rpm libbrotli-debuginfo-0:1.1.0-7.el10_1.x86_64.rpm brotli-debugsource-0:1.1.0-7.el10_1.x86_64.rpm libbrotli-0:1.1.0-7.el10_1.x86_64.rpm