Small update: the PPA package has been re-uploaded as 1.0.7-6ubuntu0.1+esm1~gelistir1 (attached debdiff v2). The patch is byte-identical to v1; only the version string and changelog changed.
The first upload used 1.0.7-6ubuntu0.1+gelistir1, which sorts higher than a future 1.0.7-6ubuntu0.1+esm1 and would have kept PPA users from moving to the official ESM update. The new version sorts above 1.0.7-6ubuntu0.1 but below both +esm1 and ubuntu0.2 (checked with dpkg --compare-versions). Launchpad build for v2: https://launchpad.net/~gelistir/+archive/ubuntu/security/+build/33880791 ** Patch added: "debdiff v2 against 1.0.7-6ubuntu0.1 (same patch, version 1.0.7-6ubuntu0.1+esm1~gelistir1)" https://bugs.launchpad.net/ubuntu/+source/brotli/+bug/2172396/+attachment/6013163/+files/brotli_focal_CVE-2026-111497-v2.debdiff -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2172396 Title: CVE-2026-111497: backport of jammy fix for brotli 1.0.7 in focal To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/brotli/+bug/2172396/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
