{
    "summary": {
        "snap": {
            "added": [],
            "removed": [],
            "diff": []
        },
        "deb": {
            "added": [],
            "removed": [],
            "diff": [
                "libbrotli1"
            ]
        }
    },
    "diff": {
        "deb": [
            {
                "name": "libbrotli1",
                "from_version": {
                    "source_package_name": "brotli",
                    "source_package_version": "1.2.0-3build1",
                    "version": "1.2.0-3build1"
                },
                "to_version": {
                    "source_package_name": "brotli",
                    "source_package_version": "1.2.0-3ubuntu0.1",
                    "version": "1.2.0-3ubuntu0.1"
                },
                "cves": [
                    {
                        "cve": "CVE-2026-111497",
                        "url": "https://ubuntu.com/security/CVE-2026-111497",
                        "cve_description": "A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.",
                        "cve_priority": "medium",
                        "cve_public_date": "2026-10-23"
                    }
                ],
                "launchpad_bugs_fixed": [],
                "changes": [
                    {
                        "cves": [
                            {
                                "cve": "CVE-2026-111497",
                                "url": "https://ubuntu.com/security/CVE-2026-111497",
                                "cve_description": "A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.",
                                "cve_priority": "medium",
                                "cve_public_date": "2026-10-23"
                            }
                        ],
                        "log": [
                            "",
                            "  * SECURITY UPDATE: DoS or code exec via buffer overflow",
                            "    - debian/patches/CVE-2026-111497.patch: Detect and report invalid stream",
                            "      earlier. in c/dec/decode.c, c/include/brotli/decode.h.",
                            "    - CVE-2026-111497",
                            ""
                        ],
                        "package": "brotli",
                        "version": "1.2.0-3ubuntu0.1",
                        "urgency": "medium",
                        "distributions": "resolute-security",
                        "launchpad_bugs_fixed": [],
                        "author": "Marc Deslauriers <marc.deslauriers@ubuntu.com>",
                        "date": "Sun, 25 Oct 2026 13:47:36 -0500"
                    }
                ],
                "notes": null,
                "is_version_downgrade": false
            }
        ],
        "snap": []
    },
    "added": {
        "deb": [],
        "snap": []
    },
    "removed": {
        "deb": [],
        "snap": []
    },
    "notes": "Changelog diff for Ubuntu 26.04 resolute image from daily image serial 20261024 to 20261027",
    "from_series": "resolute",
    "to_series": "resolute",
    "from_serial": "20261024",
    "to_serial": "20261027",
    "from_manifest_filename": "daily_manifest.previous",
    "to_manifest_filename": "manifest.current"
}