Microsoft deploys emergency .NET updates to fix Brotli vulnerability

First reported by Neowin at · Updated · 5 sources

The Brotli decoder flaw can allow code execution and also affects Node.js, PowerShell and Python packages, according to SecurityWeek. The .NET updates additionally fix unsafe ownership settings in Linux distribution archives. Microsoft urges users to install the updates as soon as possible, according to Cyber Security News.

  • The fixes cover .NET 8, .NET 10 and .NET 11 Release Candidate 3.
  • Visual Studio also received updates, according to The Next Web.

Covered by 5 publishers within 13 hours of the first report.

Reporting5

Neowin Microsoft issues urgent .NET security patches for critical buffer overflow flaws · Paul Hill
SecurityWeek Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages · Eduard Kovacs
Cyber Security News Microsoft Releases Out-of-Band Security Updates for Brotli and .NET tarballs Vulnerability · Abinaya
BleepingComputer Microsoft releases emergency .NET patches for critical Brotli flaw · Sergiu Gatlan
The Next Web Microsoft ships emergency .NET fixes for a critical Brotli flaw · Ana Maria Constantin

Related

Attackers breach Microsoft 365 accounts across 79 organizations
Microsoft patches Authenticator bug that exposed Android work-account tokens
Microsoft shares how to fix broken Exchange Online EWS apps
Microsoft releases Surface Laptop Ultra firmware to fix display and restart bugs

Topics Microsoft