Ubuntu still considers the #brotli RCE (CVE-2026-111497) as "medium" priority: https://ubuntu.com/security/CVE-2026-111497 Some other Linuxes: AlpineLinux: https://security.alpinelinux.org/vuln/CVE-2026-111497 Debian: https://security-tracker.debian.org/tracker/CVE-2026-111497 Gentoo: https://bugs.gentoo.org/show_bug.cgi?id=CVE-2026-111497 RedHat: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2026-111497 https://access.redhat.com/security/cve/cve-2026-111497 SuSE: https://www.suse.com/security/cve/CVE-2026-111497.html