==========================================================================
Ubuntu Security Notice USN-4568-1
October 05, 2020

brotli vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 20.04 LTS
– Ubuntu 18.04 LTS
– Ubuntu 16.04 LTS

Summary:

Brotli could be made to crash if it received a specially crafted
input.

Software Description:
– brotli: lossless compression algorithm and format (command line utility)

Details:

It was discovered that Brotli incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a crash.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS:
brotli 1.0.7-6ubuntu0.1
libbrotli1 1.0.7-6ubuntu0.1
python3-brotli 1.0.7-6ubuntu0.1

Ubuntu 18.04 LTS:
brotli 1.0.3-1ubuntu1.3
libbrotli1 1.0.3-1ubuntu1.3
python-brotli 1.0.3-1ubuntu1.3
python3-brotli 1.0.3-1ubuntu1.3

Ubuntu 16.04 LTS:
brotli 1.0.3-1ubuntu1~16.04.2
libbrotli1 1.0.3-1ubuntu1~16.04.2
python-brotli 1.0.3-1ubuntu1~16.04.2
python3-brotli 1.0.3-1ubuntu1~16.04.2

In general, a standard system update will make all the necessary changes.

References:
https://usn.ubuntu.com/4568-1
CVE-2020-8927

Package Information:
https://launchpad.net/ubuntu/+source/brotli/1.0.7-6ubuntu0.1
https://launchpad.net/ubuntu/+source/brotli/1.0.3-1ubuntu1.3
https://launchpad.net/ubuntu/+source/brotli/1.0.3-1ubuntu1~16.04.2
—–BEGIN PGP SIGNATURE—–
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=OWLr
—–END PGP SIGNATURE—–
—