OpenSimWorld is the directory of 3D Virtual Worlds based on OpenSimulator and connected through the HyperGrid. Learn More
New Members
VeyaRavenshade✦, AfterlifeEstates, Arwen53, QueenieStardust, Andru83, Cyrine, IngersollSven, NinaSiva, Lyynn2, Quaneka, LYNNN, 700r4s, BerndZumba, Charlene23, EvieDeAngelo, RayneDeAngelo, Frank Duval, Tessa, InesGardera, Janice HumbleLikes
CVE-2026-111497 Buffer overflow vulnerability in Brotli
Maybe should update your .net and restart opensim/robust
OpenSimulator source has AutomaticDecompression = DecompressionMethods.None set, so probably not vulnerable. However the developers decided to include compiled binaries with the source and these 6 have references to Brotli. *probably not vulnerable* but better safe than sorry I think. :)
OpenMetaverse.dll, RestSharp.dll, Mono.Addins.Setup.dll, BouncyCastle.Cryptography.dll, MimeKit.dll, MailKit.dll
https://devblogs.microsoft.com/dotnet/dotnet-october-2026-...
Maybe should update your .net and restart opensim/robust
OpenSimulator source has AutomaticDecompression = DecompressionMethods.None set, so probably not vulnerable. However the developers decided to include compiled binaries with the source and these 6 have references to Brotli. *probably not vulnerable* but better safe than sorry I think. :)
OpenMetaverse.dll, RestSharp.dll, Mono.Addins.Setup.dll, BouncyCastle.Cryptography.dll, MimeKit.dll, MailKit.dll
https://devblogs.microsoft.com/dotnet/dotnet-october-2026-...
Comments
also identified a bug that appears to cause Bug Splats in fs. in AddNewClient() in opensimulator. it's checking for null after trying to lock() which throws an exception. the log entries correspond with bug splats. Trying my patch on the grid to see if it solves this issue.
like(0)