From f2c1c4e11d0211505283240e1404a4f18730a721 Mon Sep 17 00:00:00 2001 From: chen21019 <19357113+chen21019@users.noreply.github.com> Date: Sun, 25 Oct 2026 17:34:43 +0800 Subject: [PATCH] Restore Server release-note component evidence boundary --- docs/releases/server-1.6.553.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/releases/server-1.6.553.md b/docs/releases/server-1.6.553.md index 74d18fd747..24cf266533 100644 --- a/docs/releases/server-1.6.553.md +++ b/docs/releases/server-1.6.553.md @@ -4,7 +4,7 @@ Prepared source only; no Server image or release has been published. Deployment acceptance is not claimed until the normal protected release workflow and the affected runtime checks complete. -## Scope +## Verified component inputs CVE-2026-111497 affects the Brotli decoder. The accepted Google fix is applied to the pinned Ubuntu source without replacing Ubuntu packaging or adding