Skip to content
OpenAdvisories
Critical 1 exploited CVE RHSA-2026:87420 1 CVE

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Nov 13, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 brotli 0:1.2.1-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 brotli-devel 0:1.2.1-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 libbrotli 0:1.2.1-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3-brotli 0:1.2.1-0.1.hum1

Vulnerabilities 1

  • Critical 9.2
    CVE-2026-111497 Exploited Public exploit EPSS 83%

    Out-of-Bounds Write in Google Brotli Decoder

    A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause …

    Google Brotli firefox open-webui Debian Ubuntu Azure Linux Alpine Wolfi PyPI Go Hex
    KEV Oct 27, 2026

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-111497
  • article
    https://access.redhat.com/security/updates/classification/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_87420.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2558973
  • article
    https://access.redhat.com/security/vulnerabilities/RHSB-2026-015
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-111497
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-111497
  • article
    https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high
  • article
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog