Skip to content
OpenAdvisories
Critical 1 exploited CVE RHSA-2026:93065 1 CVE

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

Published Nov 13, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 6

ReleasePackageFixed in
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el8 python3.12-brotli 0:1.2.1-1.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el8 python3.12-brotli-debuginfo 0:1.2.1-1.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el8 python3.12-brotli-debugsource 0:1.2.1-1.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el9 python3.12-brotli 0:1.2.1-1.el9ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el9 python3.12-brotli-debuginfo 0:1.2.1-1.el9ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el9 python3.12-brotli-debugsource 0:1.2.1-1.el9ap

Vulnerabilities 1

  • Critical 9.2
    CVE-2026-111497 Exploited Public exploit EPSS 83%

    Out-of-Bounds Write in Google Brotli Decoder

    A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause …

    Google Brotli firefox open-webui Debian Ubuntu Azure Linux Alpine Wolfi PyPI Go Hex
    KEV Oct 27, 2026

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.4/html/red_hat_ansible_automation_platform_release_notes/asynchronous_updates
  • article
    https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.4#Installation%20and%20upgrade
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2558973
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_93065.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-111497
  • article
    https://access.redhat.com/security/vulnerabilities/RHSB-2026-015
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-111497
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-111497
  • article
    https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high
  • article
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog