Jump to content

Oct. 2026 Brotli libs vulnerability


Recommended Posts

sonusfaber
Posted (edited)

in the company we are fixing tons of servers running node.js, .Net, etc. because of the Brotli vulnerability.

What about Emby server running on Linux?

./opt/emby-server/licenses/libbrotli
./opt/emby-server/system/System.IO.Compression.Brotli.dll


Seems we have something related to .Net

 

Edited by sonusfaber
Posted

Hi, no, we do not do any decompression of untrusted brotli, and in fact, the server doesn't do any decompression of brotli at all.

sonusfaber
Posted

Good to know, but... then... what is the Brotli library in the Emby path for?

Posted

For compression only.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...