Ubuntu patches Brotli bug that could crash systems or run code
Original title: USN-8956-2: Brotli vulnerability
USN-8956-2 backports the earlier Brotli fix to Ubuntu 16.04 LTS, 18.04 LTS and 20.04 LTS, with no CVE named.
Ubuntu notice USN-8956-2 supplies the Brotli fixes from USN-8956-1 for Ubuntu 16.04 LTS, 18.04 LTS and 20.04 LTS. Ubuntu says Brotli incorrectly handled certain compressed streams, so a remote attacker could possibly cause a denial of service or execute arbitrary code. The notice does not name a CVE, fixed package version or exploitation status.
- The update covers Ubuntu 16.04 LTS, 18.04 LTS and 20.04 LTS.
- USN-8956-1 contained the original Brotli fix.
- The trigger described is certain compressed streams.
- No fixed package version is stated in the notice.
Impact: Possible denial of service or arbitrary code execution
| Product | Affected |
|---|---|
| Ubuntu Brotli | Ubuntu 16.04 LTS, 18.04 LTS, and 20.04 LTS |
- 1.Install the Brotli updates from USN-8956-2 on Ubuntu 16.04, 18.04 and 20.04 LTS.
From the original article
USN-8956-1 fixed a vulnerability in Brotli. This update provides the corresponding fixes for Ubuntu 16. 04 LTS, Ubuntu 18.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.