Alerts This Week
Warning Icon 1 717
Alerts This Week
Warning Icon 1 717

Fedora 42: perl-Alien-Brotli Faces Critical Denial-of-Service Risk

fedora
Calendar Grey December 18, 2025
Dist Fedora Esm H88
Critical update for perl-Alien-Brotli in Fedora to address DoS issues from decompression bombs effectively.
Update brotli to 1.2.0

Summary

This distribution installs the brotli compressor, so that it can be used by

other distributions, and provides a way to find the executable.

Update Information:

Update brotli to 1.2.0. This update provides the necessary Python APIs in python3-brotli to fix denial- of-service security issues related to \u201cdecompression bombs,\u201d such as CVE-2025-66471 or CVE-2025-6176, but actually fixing them would require separate updates in affected packages.

Topics%20covered

Topics Covered

security advisory denial of service fedora critical decompression bomb perl-alien-brotli

Change Log

* Wed Dec 10 2025 Miro Hron\u010dok - 0.2.2-11 - Rebuilt for brotli 1.2.0 * Fri Jul 25 2025 Fedora Release Engineering - 0.2.2-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild

References


[ 1 ] Bug #2419491 - CVE-2025-6176 brotli: Brotli decompression bomb DoS in scrapy/scrapy [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2419491

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-9e233a4e22' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: perl-Alien-Brotli
Product: Fedora 42
Version: 0.2.2
Release: 11.fc42
URL: http://metacpan.org/dist/Alien-Brotli
Summary: Find and install the Brotli compressor

Topics%20covered

Topics Covered

security advisory denial of service fedora critical decompression bomb perl-alien-brotli

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here