From 2c1acb233533f333b5b763b7baa8830ddc14288b Mon Sep 17 00:00:00 2001 From: Dygland Date: Tue, 27 Oct 2026 09:09:23 +0100 Subject: [PATCH] Update brotli extension version to 0.21.1 brotli 0.21.1 Includes a fix for CVE-2026-111497: out-of-bounds write permits remote code execution. --- bin/misp_compile_php_extensions.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/bin/misp_compile_php_extensions.sh b/bin/misp_compile_php_extensions.sh index 1acabe4..84b9e14 100644 --- a/bin/misp_compile_php_extensions.sh +++ b/bin/misp_compile_php_extensions.sh @@ -84,7 +84,7 @@ mv modules/*.so /build/php-modules/ # Compile brotli mkdir /tmp/brotli cd /tmp/brotli -download_and_check https://github.com/kjdev/php-ext-brotli/archive/refs/tags/0.19.0.tar.gz d5a75c4a022459fc413c43d1116335bef9b580e2fc2ac4d12930b7c5462d05b6 +download_and_check https://github.com/kjdev/php-ext-brotli/archive/refs/tags/0.21.1.tar.gz 252af499f354133c056cdb87652121d1d6a69cdcce18c66c5cfe46daeccdbf22 phpize CFLAGS="$DEFAULT_FLAGS" ./configure --silent --with-libbrotli make -j$NPROC