BlackTreeCVE Intelligence
← Back to the CVE catalogue
Full vulnerability report · 2026
CVE-2026-111497High confidence

Google Brotli Unchecked Return Value Vulnerability

Google · Brotli

Official source article: Cisco CISCO-SA-OCT2026-NODE-JS-JJ3SQ19U ↗. Check the applicable product and release in the original source.

9.2CriticalCVSS 4.0
Recommended action
Patch only the product branches with a verified fix

CISA confirms exploitation in the wild and lists 2026-11-10 as the remediation due date. Verified remediation exists for at least one product or source, but 41 structured product or package states remain unresolved. Apply remediation only to the exact product branch confirmed by its source.

Fix availability varies by product
R
Operational reassessment

Published severity in operational context

Open reassessment dashboard →
Published severityCriticalOperational priority:Critical, unchanged from published severity.unchanged

Evidence used

  • CISA confirms exploitation in the wild.
  • The selected CVSS metric records a network-reachable, unauthenticated path with no user interaction.
  • EPSS is 82.64% for the current model date.

Compensating controls

  • Validate the affected product branch and deploy the verified fixed release.
  • Restrict the affected network interface to trusted sources where business-safe.
  • Increase monitoring for the attack path and post-exploitation behaviour described in the report.

Verification

  1. Confirm that the asset runs Google Brotli and falls inside the recorded affected range.
  2. Verify the installed build against the product-specific fixed version after deployment.
  3. Validate exposure, authentication requirements and compensating controls in the actual environment.
  4. Reopen this reassessment when CVSS, KEV, EPSS, exploit evidence or remediation changes.
Mitigation target: Within 3 daysRemediation target: Within 90 days

This automated reassessment organises public evidence. It does not know asset exposure, business impact or control effectiveness and does not replace CVSS or a human risk decision.

Cross-source reconciliation

Remediation availability differs by product scope

Verified remediation exists for at least one product or source, but 41 structured product or package states remain unresolved. Apply remediation only to the exact product branch confirmed by its source.

Distribution package intelligence

Release-specific package status

Alpine, Debian, ubuntu findings are scoped to the named distribution, release and source package. An absent finding does not mean a package is unaffected.

19 package states
Package result overrides the generic status

BlackTree has verified remediation for at least one product or source, but the relevant distribution still reports no fixed package for 4 affected package states shown here. Treat those rows as affected with no fix until that distribution publishes a fixed version.

Repository candidate not checked

A published vendor fix does not prove that a matching update is enabled and installable on a particular asset. Confirm the local package candidate before scheduling remediation.

Distribution releaseSource packageVendor stateFixed versionEvidence
Alpine v3.23v3.23 · mainbrotliVendor fix publishedAlpine records a security fix at this version. An absent entry does not mean the package is unaffected.1.2.1-r0Alpine Security Database ↗Source updated 3 Nov 2026
Alpine v3.23v3.23 · mainnodejsVendor fix publishedAlpine records a security fix at this version. An absent entry does not mean the package is unaffected.0Alpine Security Database ↗Source updated 3 Nov 2026
Alpine v3.22v3.22 · mainnodejsVendor fix publishedAlpine records a security fix at this version. An absent entry does not mean the package is unaffected.0Alpine Security Database ↗Source updated 3 Nov 2026
Alpine v3.21v3.21 · mainbrotliVendor fix publishedAlpine records a security fix at this version. An absent entry does not mean the package is unaffected.1.1.1-r0Alpine Security Database ↗Source updated 3 Nov 2026
Alpine v3.21v3.21 · mainnodejsVendor fix publishedAlpine records a security fix at this version. An absent entry does not mean the package is unaffected.0Alpine Security Database ↗Source updated 3 Nov 2026
Debian trixietrixie · sourcebrotliVendor fix publishedDebian records a fixed source-package version for this release.1.1.0-2+deb13u1Debian Security Tracker ↗Source updated 4 Nov 2026
Debian trixietrixie · sourcenodejsAffected, no fix publishedDebian currently tracks this release as open.Not published in this feedDebian Security Tracker ↗Source updated 4 Nov 2026
Debian trixietrixie · sourcepython-brotlicffiAffected, no fix publishedDebian currently tracks this release as open.Not published in this feedDebian Security Tracker ↗Source updated 4 Nov 2026
Debian bookwormbookworm · sourcebrotliVendor fix publishedDebian records a fixed source-package version for this release.1.0.9-2+deb12u1Debian Security Tracker ↗Source updated 4 Nov 2026
Debian bookwormbookworm · sourcenodejsAffected, no fix publishedDebian currently tracks this release as open.Not published in this feedDebian Security Tracker ↗Source updated 4 Nov 2026
Debian forkyforky · sourcebrotliVendor fix publishedDebian records a fixed source-package version for this release.1.2.0-4.1Debian Security Tracker ↗Source updated 4 Nov 2026
Debian forkyforky · sourcenodejsAffected, no fix publishedDebian currently tracks this release as open.Not published in this feedDebian Security Tracker ↗Source updated 4 Nov 2026
Debian forkyforky · sourcepython-brotlicffiVendor fix publishedDebian records a fixed source-package version for this release.1.2.1.0+ds-1Debian Security Tracker ↗Source updated 4 Nov 2026
Debian sidsid · sourcebrotliVendor fix publishedDebian records a fixed source-package version for this release.1.2.0-4.1Debian Security Tracker ↗Source updated 4 Nov 2026
Debian sidsid · sourcenodejsVendor fix publishedDebian records a fixed source-package version for this release.24.22.1+dfsg+~cs24.19.2-1Debian Security Tracker ↗Source updated 4 Nov 2026
Debian sidsid · sourcepython-brotlicffiVendor fix publishedDebian records a fixed source-package version for this release.1.2.1.0+ds-1Debian Security Tracker ↗Source updated 4 Nov 2026
Ubuntu 24.04 LTSnoble · standard archivebrotliVendor fix publishedCanonical reports that a fixed source package version has been published. Repository candidate availability is not checked by BlackTree.1.1.0-2ubuntu0.1Canonical Ubuntu Security ↗Source updated 4 Nov 2026
Ubuntu 24.04 LTSnoble · standard archivedotnet10Vendor fix publishedCanonical reports that a fixed source package version has been published. Repository candidate availability is not checked by BlackTree.10.0.114-10.0.14-0ubuntu1~24.04.1Canonical Ubuntu Security ↗Source updated 4 Nov 2026
Ubuntu 24.04 LTSnoble · standard archivedotnet8Vendor fix publishedCanonical reports that a fixed source package version has been published. Repository candidate availability is not checked by BlackTree.8.0.133-8.0.33-0ubuntu1~24.04.1Canonical Ubuntu Security ↗Source updated 4 Nov 2026
Open-source package ranges4 source-attributed ranges

These OSV and GitHub advisory ranges apply only to the named package and ecosystem. A listed fixed version is not a universal product patch or proof that an update is installed.

Ecosystem and packageAffected rangeFirst fixed versionEvidence
PyPIbrotliECOSYSTEM: introduced 1.0.3; fixed 1.2.11.2.1OSV record ↗aggregator derived · 3 Nov 2026
PyPIbrotliECOSYSTEM: introduced 0; fixed 1.2.11.2.1OSV record ↗source linked ecosystem record · 29 Oct 2026
PyPIbrotlicffiECOSYSTEM: introduced 1.0.3; fixed 1.2.1.01.2.1.0OSV record ↗aggregator derived · 3 Nov 2026
PyPIbrotlicffiECOSYSTEM: introduced 0; fixed 1.2.1.01.2.1.0OSV record ↗source linked ecosystem record · 29 Oct 2026
Direct vendor intelligence

Authoritative vendor CSAF and VEX advisories

Structured product status and remediation from the issuing vendor. Product-state explanations are always visible; large lists can be searched or downloaded.

8 current
cisco-sa-oct2026-node-js-Jj3SQ19u · CSAF 2.0 · revision 1.13.0 · interimCisco PSIRTVulnerabilities in Node.js and Brotli Affecting Cisco Products: October 2026
18 known affected

The vendor explicitly identifies these products as affected by this CVE.

  • Cisco Identity Services Engine Software
  • Cisco ISE Passive Identity Connector
  • Cisco Secure Malware Analytics
  • Cisco Nexus Dashboard Fabric Controller (NDFC), formerly Data Center Network Manager (DCNM)
  • Cisco NX-OS Software
  • Cisco Smart License Utility
  • Cisco License On-Prem
  • Cisco CloudCenter
  • Cisco Virtualized Infrastructure Manager
  • Cisco Secure Firewall Threat Defense (FTD) Software
  • Cisco Secure Firewall Management Center (FMC)
  • Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
Summary
Complete.
Remediation
Cisco has released software updates that address this vulnerability.
CVE-2026-111497 · CSAF 2.0 · revision 3 · finalRed Hat Product Securitybrotli: Out-of-Bounds Write in Google Brotli Decoder
15 known affected

The vendor explicitly identifies these products as affected by this CVE.

  • exploit-intelligence/agent-client-rhel9 as a component of Exploit Intelligence
  • exploit-intelligence/vulnerability-analysis-rhel9 as a component of Exploit Intelligence
  • ansible-automation-platform/automation-dashboard-rhel9 as a component of Red Hat Ansible Automation Platform 2
  • native-linux-x86_64 as a component of Red Hat build of Apache Camel 4 for Quarkus 3
  • native-linux-x86_64 as a component of Red Hat build of Apicurio Registry 3
  • native-linux-x86_64 as a component of Red Hat build of Debezium 3
  • rhdh/rhdh-hub-rhel9 as a component of Red Hat Developer Hub 1
  • rhdh/rhdh-hub-rhel9 as a component of Red Hat Developer Hub 2
  • jbcs-httpd24-brotli as a component of Red Hat JBoss Core Services
  • jbcs-httpd24-brotli-devel as a component of Red Hat JBoss Core Services
  • jbcs-httpd24-brotli.src as a component of Red Hat JBoss Core Services
  • rhoai/odh-mlserver-cuda-rhel9 as a component of Red Hat OpenShift AI (RHOAI)
Summary
A flaw was found in the Google Brotli decoder. An out-of-bounds write in the block-type switch handling in c/dec/decode.c can be triggered by a crafted Brotli-compressed stream. When an application decompresses untrusted Brotli data, this can lead to memory disclosure, denial of service, or potentially arbitrary code execution.
Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
4JXD000118 · CSAF 2.0 · revision 1 · draftABB Product Security Incident Response Team (PSIRT)CVE-2026-111497
2 known affected

The vendor explicitly identifies these products as affected by this CVE.

  • ABB ABB Ability™ OPTIMAX® 6.4.1
  • ABB ABB Ability™ OPTIMAX® 6.5.0
Summary
Google Brotli C compression decoder library is deeply bundled into popular software architectures. The flaw allows unauthenticated remote attackers to trigger denial-of-service (DoS) crashes, disclose sensitive memory, or achieve full Remote Code Execution (RCE) under the context of the running application
Remediation
The problem is corrected in the following product version: - ABB Ability™ OPTIMAX®, 6.4.1 OS Patch. Optional but recommended (don_osupdate_v6.4.1-release-date) OPTIMAX patch (OPTIMAX_v6.4.1+ release-date.iso) ABB recommends that customers apply the update at earliest convenience. A technical note will be made available to ABB customers via ABB Library describing the patching instructions.
4JNO000550-1189 · CSAF 2.0 · revision 1 · finalABB Product Security Incident Response Team (PSIRT)CVE-2026-111497
5 known affected

The vendor explicitly identifies these products as affected by this CVE.

  • ABB Advanced Batch Management (ABM) 1.2.1
  • ABB Advanced Batch Management (ABM) 1.2
  • ABB Advanced Batch Management (ABM) 1.1b
  • ABB Advanced Batch Management (ABM) 1.1
  • ABB Advanced Batch Management (ABM) 1.0
Summary
An invalid block switch in the Brotli decoder is reported as a temporary need for more input instead of a permanent format error. The streaming decoder therefore keeps appending input bytes to an eight-byte internal buffer and writes past its end, which allows corrupting process memory. In the reviewed ABM standard configuration, no default path to the vulnerable decoder was identified (see Mitigating factors).
Remediation
The problem is corrected by updating the Node.js runtime used by the product versions listed as affected. A new ABM release containing the patched runtime is not yet available; until then, the runtime must be updated manually: - Node.js 24.x (ABM 1.2, 1.2.1): Update to Node.js 24.22.1 or later within the 24.x line. This version has been successfully tested with the ABM standard. ABB recommends that customers apply the update at earliest convenience. Major-version changes require compatibility testing before a production restart. Where ASP.NET Core / .NET components are deployed together with ABM, ABB additionally recommends installing the vendor-patched .NET releases.
SSA-045512 · CSAF 2.0 · revision 2 · finalSiemens ProductCERTCVE-2026-111497
2 known affected

The vendor explicitly identifies these products as affected by this CVE.

  • Desigo CC family V8
  • Desigo CC family V9
Summary
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.
Remediation
Install the latest .NET security updates via Windows Update.
SSA-443410 · CSAF 2.0 · revision 1 · interimSiemens ProductCERTCVE-2026-111497
9 known affected

The vendor explicitly identifies these products as affected by this CVE.

  • Cloud Connector Configurator
  • Common Configurator (CC on IEM)
  • Common Configurator on Device (CC on Edge)
  • Data Flow Monitoring
  • Databus Configurator
  • Edge OPC UA Server Configurator
  • Flow Creator Configurator
  • Industrial Edge Hub
  • Industrial Edge Management Cloud
Summary
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.
Remediation
Vulnerability fixed on central cloud service starting 2026-10-29; no user actions necessary
SSA-898633 · CSAF 2.0 · revision 1 · finalSiemens ProductCERTCVE-2026-111497
1 known affected

The vendor explicitly identifies these products as affected by this CVE.

  • RUGGEDCOM APE1808 with Palo Alto Networks PAN-OS
Summary
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.
Remediation
Upgrade to corresponding available PAN-OS version. Contact customer support to receive additional patch and update information.
CVE-2026-111497 · CSAF 2.0 · revision 7 · interimSUSE Product Security TeamCVE-2026-111497
9,011 known affected

The vendor explicitly identifies these products as affected by this CVE.

  • MozillaFirefox as component of SUSE Linux Enterprise Desktop 15 SP7
  • MozillaFirefox-devel as component of SUSE Linux Enterprise Desktop 15 SP7
  • MozillaFirefox-translations-common as component of SUSE Linux Enterprise Desktop 15 SP7
  • MozillaFirefox-translations-other as component of SUSE Linux Enterprise Desktop 15 SP7
  • MozillaThunderbird as component of SUSE Linux Enterprise Desktop 15 SP7
  • MozillaThunderbird-translations-common as component of SUSE Linux Enterprise Desktop 15 SP7
  • MozillaThunderbird-translations-other as component of SUSE Linux Enterprise Desktop 15 SP7
  • brotli as component of SUSE Linux Enterprise Desktop 15 SP7
  • ghostscript as component of SUSE Linux Enterprise Desktop 15 SP7
  • ghostscript-devel as component of SUSE Linux Enterprise Desktop 15 SP7
  • ghostscript-x11 as component of SUSE Linux Enterprise Desktop 15 SP7
  • ipmctl as component of SUSE Linux Enterprise Desktop 15 SP7
Summary
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.
Remediation
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Optional official sources

National CERT insights
?CERT means Computer Emergency Response Team; CSIRT is the closely related term Computer Security Incident Response Team.

Choose official national sources for this report. Each advisory shows its original language. Your selection is remembered on this device and included in shared links.

Official European source

ENISA European Vulnerability Database

Official EUVD identifiers, advisory evidence and known-exploited context. Missing fields are not treated as evidence of low risk.

1 current
ENISA EUVD identifier

EUVD-2026-108169

CISA KEV mirrored by ENISA

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.

EUVD state
Present in the current official mapping
Known exploitation
Recorded by ENISA since 27 Oct 2026. Evidence sources: cisa_kev.
ENISA score
9.2 · CVSS 4.0
Advisory evidence
5 linked advisory records
Explicit mitigation evidence

Only statements that explicitly mention a fix, patch, update, workaround or mitigation are shown here.

  • csaf_redhat · RHSA-2026:87420Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Recommended actionPatch only the product branches with a verified fix

CISA confirms exploitation in the wild and lists 2026-11-10 as the remediation due date. Verified remediation exists for at least one product or source, but 41 structured product or package states remain unresolved. Apply remediation only to the exact product branch confirmed by its source.

Fix availability varies by product
01

What, why and how

Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.

What

Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.

Why

A bounds error lets data be written beyond the intended memory region, potentially corrupting control data.

How

An attacker operating through a network path may attempt exploitation without authentication or user interaction. If successful, the issue may execute code or commands in the affected security context.

What

Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.

Why

A bounds error lets data be written beyond the intended memory region, potentially corrupting control data.

How

An attacker operating through a network path may attempt exploitation without authentication or user interaction. If successful, the issue may execute code or commands in the affected security context.

02

Exploit reality and attack path

CVSS severity, EPSS forecast probability, public exploit material and CISA-confirmed exploitation are separate signals.

Observed exploitation
?Confirmed exploitation and public exploit material are separate signals. Attacks can occur without public proof-of-concept or exploit code.
Confirmed in the wild

CISA added this CVE to its Known Exploited Vulnerabilities catalogue on 2026-10-27.

Public PoC / exploit material
?Confirmed exploitation and public exploit material are separate signals. Attacks can occur without public proof-of-concept or exploit code.
None recorded

No exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.

Likely attack path
a network path → Out-of-bounds Write → execute code or commands in the affected security context
Attack surface
Network
Privileges required
None: unauthenticated exploitation is possible
User interaction
None
Attack complexity
Low: no specialised conditions are recorded
Security boundary
Not a CVSS 4.0 base metric
Weakness
?CWE means Common Weakness Enumeration: a standard category for the underlying weakness.
CWE-787 ↗

CWE-787: Out-of-bounds Write. The product writes data past the end, or before the beginning, of the intended buffer.

CVSS vector
?CVSS means Common Vulnerability Scoring System. The vector records the metric values used to calculate technical severity.
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Common Vulnerability Scoring System 4.0: the compact vector below is decoded into plain language.

AVNetworkAttack vector: The vulnerable component can be reached over a network.ACLowAttack complexity: No specialised conditions are required beyond attacker-controlled input.ATPresentAttack requirements: A particular deployment or execution condition must be present.PRNonePrivileges required: The attacker does not need an account or existing privileges.UINoneUser interaction: No action by another user is required.VCHighVulnerable-system confidentiality: A successful attack can cause a major loss.VIHighVulnerable-system integrity: A successful attack can cause a major loss.VAHighVulnerable-system availability: A successful attack can cause a major loss.SCNoneSubsequent-system confidentiality: No direct loss is represented by this metric.SINoneSubsequent-system integrity: No direct loss is represented by this metric.SANoneSubsequent-system availability: No direct loss is represented by this metric.
Post-exploitation / living off the land
After compromise, an attacker may use built-in shells, scripting engines, scheduled tasks and native network utilities for discovery, persistence or movement. This is a plausible LoTL path, not evidence that it has occurred for every attack.
NetworkUnauthenticatedRemote code executionDenial of serviceCWE-787CISA KEV
A

Official authority intelligence

Only matched European and national findings are included. Language selectors and unavailable sources are omitted.

ENISA EUVD · EUVD-2026-108169Known-exploited evidence recorded

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.

Official EUVD record ↗
BSI · German · WID-SEC-2026-4117Node.js: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Node.js ausnutzen, um einen Denial of Service Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen und um beliebigen Programmcode auszuführen.

Official advisory ↗
Canadian Centre for Cyber Security · English · AL26-027AL26-027 - Critical vulnerability impacting Google Brotli – CVE-2026-111497

An Alert is used to raise awareness of a recently identified cyber threat that may impact cyber information assets, and to provide additional detection and mitigation advice to recipients. The Canadian Centre for Cyber Security ("Cyber Centre") is also available to provide additional assistance regarding the content of this Alert to recipients as requested.

Official advisory ↗
Canadian Centre for Cyber Security · English · AV26-1085Google security advisory (AV26-1085) - Update 1

As of October 22, 2026, Google is affected by a vulnerability in the following product: Update 1 On October 27, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-111497 to their Known Exploited Vulnerabilities (KEV) Database.

Official advisory ↗
Cyber Security Agency of Singapore · English · CSA-SB-20261028Security Bulletin 28 Oct 2026

The Cyber Security Agency of Singapore included this CVE in its official Security Bulletin 28 Oct 2026, published on 28 October 2026. Open the linked bulletin for the product, severity and reference information published in that issue.

Official advisory ↗
INCIBE-CERT · Spanish · escritura-fuera-de-limites-en-productos-de-citrixEscritura fuera de límites en productos de Citrix

Khai Tran y Sylvie Mayer, de OpenAI Codex Security, han informado sobre una vulnerabilidad de severidad crítica en Brotli que afecta a los componentes de Unicon identificados por Citrix. Podría permitir corromper memoria, obtener información sensible, provocar una denegación de servicio o ejecutar código.

Official advisory ↗
INCIBE-CERT · Spanish · multiples-vulnerabilidades-en-dameware-de-solarwindsMúltiples vulnerabilidades en Dameware de SolarWinds

Luiz Felipe Mol (Confu53) y Greg Bernatowicz, del Boeing Enterprise Security Red Team, han informado sobre 3 vulnerabilidades en Dameware. SolarWinds ha corregido estos fallos y otros dos en componentes de terceros: en total, 2 vulnerabilidades de severidad crítica, 2 altas y 1 media.

Official advisory ↗
INCIBE-CERT · Spanish · escritura-fuera-de-limites-en-php-para-windowsEscritura fuera de límites en PHP para Windows

Khai Tran y Sylvie Mayer, de OpenAI Codex Security, han informado sobre 1 vulnerabilidad de severidad crítica en Brotli, componente incluido en PHP para Windows, que podría permitir divulgar información, provocar una denegación de servicio o ejecutar código.

Official advisory ↗
INCIBE-CERT · Spanish · multiples-vulnerabilidades-en-openscape-endpoint-management-de-mitelMúltiples vulnerabilidades en OpenScape Endpoint Management de Mitel

Rodrigo Duarte Garcia, de Telefónica Tech, ha informado sobre 2 vulnerabilidades de severidad alta en Node-RED de OpenScape Endpoint Management. Khai Tran y Sylvie Mayer, de OpenAI Codex Security, han informado sobre 1 vulnerabilidad de severidad crítica en Brotli, también presente en este producto.

Official advisory ↗
INCIBE-CERT · Spanish · multiples-vulnerabilidades-en-productos-de-cisco-20Múltiples vulnerabilidades en productos de Cisco

Eric Fernald ha informado sobre una vulnerabilidad en ASA y FTD. Junto con las incidencias de Node.js comunicadas por Khai Tran y Sylvie Mayer, de OpenAI Codex Security, Hasan Flayyih Abdullah y anagnorisis2peripeteia, se reúnen 5 vulnerabilidades: 1 de severidad crítica y 4 altas. Su explotación podría permitir ejecutar código, divulgar información, eludir comprobaciones de seguridad o provocar denegaciones de servicio.

Official advisory ↗
INCIBE-CERT · Spanish · actualizacion-30102026-multiples-vulnerabilidades-en-productos-de-cisco[Actualización 30/10/2026] Múltiples vulnerabilidades en productos de Cisco

Eric Fernald ha informado sobre una vulnerabilidad en ASA y FTD. Junto con las incidencias de Node.js comunicadas por Khai Tran y Sylvie Mayer, de OpenAI Codex Security, Hasan Flayyih Abdullah y anagnorisis2peripeteia, se reúnen 5 vulnerabilidades: 1 de severidad crítica y 4 altas. Su explotación podría permitir ejecutar código, divulgar información, eludir comprobaciones de seguridad o provocar denegaciones de servicio.

Official advisory ↗
INCIBE-CERT · Spanish · escritura-fuera-de-limites-en-sddc-manager-de-broadcomEscritura fuera de límites en SDDC Manager de Broadcom

Khai Tran y Sylvie Mayer, de OpenAI Codex Security, han informado sobre una vulnerabilidad en Brotli, integrado en Node.js. Broadcom confirma que afecta a SDDC Manager y podría permitir ejecutar código arbitrario. Existe explotación confirmada de Brotli, sin confirmación específica de ataques a SDDC Manager.

Official advisory ↗
INCIBE-CERT · Spanish · escritura-fuera-de-limites-en-productos-de-palo-alto-networks[Actualización 28/10/2026] Escritura fuera de límites en productos de Palo Alto Networks

Khai Tran y Sylvie Mayer, de OpenAI Codex Security, han informado sobre una vulnerabilidad en el decodificador Brotli que podría permitir a un atacante remoto sin autenticación revelar información, provocar una denegación de servicio o ejecutar código arbitrario.

Official advisory ↗
CERT-FR · French · CERTFR-2026-AVI-1526Avis du CERT-FR

De multiples vulnérabilités ont été découvertes dans Apple HomeView Software. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.

Official advisory ↗
CERT-FR · French · CERTFR-2026-AVI-1536Avis du CERT-FR

bre 2026 https://access.redhat.com/errata/RHSA-2026:98047 Bulletin de sécurité Red Hat RHSA-2026:98239 du 11 novembre 2026 https://access.redhat.com/errata/RHSA-2026:98239 Référence CVE CVE-2025-22063 https://www.cve.org/CVERecord?id=CVE-2025-22063 Référence CVE CVE-2025-31936 https://www.cve.org/CVERecord?id=CVE-2025-31936 Référence CVE CVE-2025-38004 https://www.cve.org/CVERecord?id=CVE-2025-38004 Référence CVE CVE-2025-38147 https://www.cve.org/CVERecord?id=CVE-2025-38147 Référence CVE CVE-2025-47273 https://www.cve.org/CVERecord?id=CVE-2025-47273 Référence CVE CVE-2026-103111 https://www.cve.org/CVERecord?id=CVE-2026-103111 Référence CVE CVE-2026-111497 https://www.cve.org/CVERecord?id=CVE-2026-111497 Référence CVE CVE-2026-114406 https://www.cve.org/CVERecord?id=CVE-2026-114406 Référence CVE CVE-2026-12080 https://www.cve.org/CVERecord?id=CVE-2026-12080 Référence CVE CVE-2026-14456 https://www.cve.org/CVERecord?id=CVE-2026-14456 Référence CVE CVE-2026-16313 https://www.cve.org/CVERecord?id=CVE-2026-16313 Référence CVE CVE-2026-18798 https://www.cve.org/CVERecord?id=CVE-2026-18798 Référence CVE CVE-2026-19630 https://www.cve.org/CVERecord?id=CVE-2026-19630 Référence CVE CVE-2026-26007 https://www.cve.org/CVERecord?id=CVE-2026-26007 Référence CVE CVE-2026-28390 https://www.cve.org/CVERecord?

Official advisory ↗
CERT-FR · French · CERTFR-2026-AVI-1524Avis du CERT-FR

Une vulnérabilité a été découverte dans les produits Kaspersky. Elle permet à un attaquant de provoquer un déni de service à distance.

Official advisory ↗
CERT-FR · French · CERTFR-2026-AVI-1487Avis du CERT-FR

De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données, une atteinte à l'intégrité des données et un contournement de la politique de sécurité.

Official advisory ↗
CERT-FR · French · CERTFR-2026-AVI-1495Avis du CERT-FR

De multiples vulnérabilités ont été découvertes dans Siemens SIMATIC. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et un contournement de la politique de sécurité.

Official advisory ↗
CERT-FR · French · CERTFR-2026-AVI-1482Avis du CERT-FR

De multiples vulnérabilités ont été découvertes dans les produits Synology. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.

Official advisory ↗
CERT-FR · French · CERTFR-2026-AVI-1486Avis du CERT-FR

879 Référence CVE CVE-2026-109125 https://www.cve.org/CVERecord?id=CVE-2026-109125 Référence CVE CVE-2026-109518 https://www.cve.org/CVERecord?id=CVE-2026-109518 Référence CVE CVE-2026-110879 https://www.cve.org/CVERecord?id=CVE-2026-110879 Référence CVE CVE-2026-111063 https://www.cve.org/CVERecord?id=CVE-2026-111063 Référence CVE CVE-2026-111064 https://www.cve.org/CVERecord?id=CVE-2026-111064 Référence CVE CVE-2026-111065 https://www.cve.org/CVERecord?id=CVE-2026-111065 Référence CVE CVE-2026-111066 https://www.cve.org/CVERecord?id=CVE-2026-111066 Référence CVE CVE-2026-111181 https://www.cve.org/CVERecord?id=CVE-2026-111181 Référence CVE CVE-2026-111497 https://www.cve.org/CVERecord?id=CVE-2026-111497 Référence CVE CVE-2026-111748 https://www.cve.org/CVERecord?id=CVE-2026-111748 Référence CVE CVE-2026-111749 https://www.cve.org/CVERecord?id=CVE-2026-111749 Référence CVE CVE-2026-111750 https://www.cve.org/CVERecord?id=CVE-2026-111750 Référence CVE CVE-2026-111751 https://www.cve.org/CVERecord?id=CVE-2026-111751 Référence CVE CVE-2026-111752 https://www.cve.org/CVERecord?id=CVE-2026-111752 Référence CVE CVE-2026-111943 https://www.cve.org/CVERecord?id=CVE-2026-111943 Référence CVE CVE-2026-112060 https://www.cve.org/CVERecord?id=CVE-2026-112060 Référence CVE CVE-2026-112061 https://www.cve.o

Official advisory ↗
CERT-FR · French · CERTFR-2026-AVI-1472Avis du CERT-FR

345 Référence CVE CVE-2026-110281 https://www.cve.org/CVERecord?id=CVE-2026-110281 Référence CVE CVE-2026-110282 https://www.cve.org/CVERecord?id=CVE-2026-110282 Référence CVE CVE-2026-110283 https://www.cve.org/CVERecord?id=CVE-2026-110283 Référence CVE CVE-2026-110816 https://www.cve.org/CVERecord?id=CVE-2026-110816 Référence CVE CVE-2026-111063 https://www.cve.org/CVERecord?id=CVE-2026-111063 Référence CVE CVE-2026-111064 https://www.cve.org/CVERecord?id=CVE-2026-111064 Référence CVE CVE-2026-111065 https://www.cve.org/CVERecord?id=CVE-2026-111065 Référence CVE CVE-2026-111066 https://www.cve.org/CVERecord?id=CVE-2026-111066 Référence CVE CVE-2026-111497 https://www.cve.org/CVERecord?id=CVE-2026-111497 Référence CVE CVE-2026-111748 https://www.cve.org/CVERecord?id=CVE-2026-111748 Référence CVE CVE-2026-111749 https://www.cve.org/CVERecord?id=CVE-2026-111749 Référence CVE CVE-2026-111750 https://www.cve.org/CVERecord?id=CVE-2026-111750 Référence CVE CVE-2026-112366 https://www.cve.org/CVERecord?id=CVE-2026-112366 Référence CVE CVE-2026-11332 https://www.cve.org/CVERecord?id=CVE-2026-11332 Référence CVE CVE-2026-116376 https://www.cve.org/CVERecord?id=CVE-2026-116376 Référence CVE CVE-2026-11906 https://www.cve.org/CVERecord?id=CVE-2026-11906 Référence CVE CVE-2026-12143 https://www.cve.org/CV

Official advisory ↗
CERT-FR · French · CERTFR-2026-AVI-1475Avis du CERT-FR

De multiples vulnérabilités ont été découvertes dans les produits Splunk. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.

Official advisory ↗
CERT-FR · French · CERTFR-2026-AVI-1474Avis du CERT-FR

Une vulnérabilité a été découverte dans les produits VMware. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance.

Official advisory ↗
CERT-FR · French · CERTFR-2026-AVI-1477Avis du CERT-FR

Une vulnérabilité a été découverte dans les produits Mitel. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance.

Official advisory ↗
CERT-FR · French · CERTFR-2026-AVI-1464Avis du CERT-FR

De multiples vulnérabilités ont été découvertes dans les produits Siemens. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.

Official advisory ↗
CERT-FR · French · CERTFR-2026-AVI-1467Avis du CERT-FR

De multiples vulnérabilités ont été découvertes dans les produits Cisco. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un contournement de la politique de sécurité et un problème de sécurité non spécifié par l'éditeur.

Official advisory ↗
CERT-FR · French · CERTFR-2026-AVI-1449Avis du CERT-FR

De multiples vulnérabilités ont été découvertes dans les produits Citrix. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et une élévation de privilèges.

Official advisory ↗
CERT-FR · French · CERTFR-2026-AVI-1459Avis du CERT-FR

De multiples vulnérabilités ont été découvertes dans SolarWinds Dameware. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et un contournement de la politique de sécurité.

Official advisory ↗
CERT-FR · French · CERTFR-2026-AVI-1461Avis du CERT-FR

De multiples vulnérabilités ont été découvertes dans les produits Elastic. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.

Official advisory ↗
CERT-FR · French · CERTFR-2026-AVI-1429Avis du CERT-FR

Une vulnérabilité a été découverte dans Stormshield Management Center. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance.

Official advisory ↗
CERT-FR · French · CERTFR-2026-AVI-1396Avis du CERT-FR

Une vulnérabilité a été découverte dans les produits Palo Alto Networks. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.

Official advisory ↗
CERT-FR · French · CERTFR-2026-AVI-1383Avis du CERT-FR

Une vulnérabilité a été découverte dans les produits Microsoft. Elle permet à un attaquant de provoquer une élévation de privilèges.

Official advisory ↗
CERT-FR · French · CERTFR-2026-AVI-1382Avis du CERT-FR

De multiples vulnérabilités ont été découvertes dans Microsoft .Net. Elles permettent à un attaquant de provoquer une élévation de privilèges.

Official advisory ↗
NBSZ-NKI · Hungarian · cve-2026-111497CVE-2026-111497

A sérülékenység a Node.js futtatókörnyezet beépített zlib moduljában található Brotli-dekódert érinti, amely a Brotli-algoritmussal tömörített adatok kibontásáért felelős. A hiba a tömörített adatok feldolgozása során végzett nem megfelelő határellenőrzésből ered, amely puffertúlcsorduláshoz vezethet. A sérülékenység akkor válhat kihasználhatóvá, ha az alkalmazás támadó által befolyásolható, speciálisan kialakított Brotli-tömörítésű adatokat dolgoz fel. Érintett lehet például az Express 5 keretrendszer és a body-parser 2.x köztes szoftvert használó alkalmazások, amennyiben engedélyezett a beérkező HTTP-kérések automatikus kitömörítése, valamint a Node.js beépített fetch() függvényét használó szolgáltatások, amelyek nem megbízható forrásból származó, Brotli-tömörítésű HTTP-válaszokat dolgoznak fel. A sérülékenység nem kizárólag a Node.js-alapú alkalmazásokat érintheti, hanem más, azonos hibás Brotli-implementációt használó rendszereket is.

Official advisory ↗
CSIRT Italia · Italian · aggiornamenti-di-sicurezza-apple-22Aggiornamenti di sicurezza Apple

Apple ha rilasciato aggiornamenti di sicurezza per risolvere 9 nuove vulnerabilità, di cui 3 con gravità “alta”, nei prodotti iOS, iPadOS, macOS Golden Gate, macOS Tahoe, macOS Sequoia, watchOS e visionOS.

Official advisory ↗
CSIRT Italia · Italian · google-disponibile-poc-per-lo-sfruttamento-della-cve-2026-111497Google: disponibile PoC per lo sfruttamento della CVE-2026-111497

Nel dettaglio, la vulnerabilità identificata tramite la CVE-2026-111497 - di tipo "Out-of-bounds Write" e con CVSS v4.0 pari a 9.2 - interessa la libreria Google Brotli e i prodotti che integrano tale componente. Tale vulnerabilità è dovuta a una gestione non adeguata del decoder Brotli durante l'elaborazione di flussi di dati compressi, che può determinare condizioni di scrittura fuori dai limiti della memoria allocata. Un attaccante remoto non autenticato potrebbe sfruttare tale vulnerabilità, mediante l'invio di contenuti Brotli opportunamente predisposti, al fine di compromettere la disponibilità del servizio, ottenere l'accesso ad informazioni sensibili e, in determinate circostanze, eseguire codice arbitrario sui sistemi target.

Official advisory ↗
CSIRT Italia · Italian · node.js-risolte-molteplici-vulnerabilita-1Node.js: risolte molteplici vulnerabilità

La vulnerabilità identificata tramite la CVE-2026-111497 - di tipo "Out-of-bounds Write", con CVSS v4.0 pari a 9.2 e già trattata nell'ambito dell' AL03/261026/CSIRT-ITA - interessa Google Brotli e i prodotti che integrano tale componente, tra cui alcune versioni di Node.js, ed è dovuta a una gestione non adeguata del decoder Brotli durante l'elaborazione di flussi di dati compressi. Un attaccante remoto non autenticato potrebbe sfruttare tale vulnerabilità, mediante l'invio di contenuti Brotli opportunamente predisposti, al fine di compromettere la disponibilità del servizio, ottenere l'accesso ad informazioni sensibili e, in determinate circostanze, eseguire codice arbitrario sui sistemi target. La vulnerabilità identificata tramite la CVE-2026-105482 - di tipo "Improper Access Control" e con CVSS v3.x pari a 7.4 - interessa Node.js ed è dovuta a meccanismi di gestione non adeguati degli hostname contenenti caratteri NUL ( \0 ) nelle funzioni dns.resolve*() e dns.reverse() . In particolare, il nome host validato dall'applicazione può essere troncato silenziosamente dal resolver c-ares al primo carattere NUL , determinando una discrepanza tra il valore verificato dall'applicazione e quello effettivamente risolto. Un attaccante remoto non autenticato potrebbe sfruttare tale vulnerabilità, mediante l'invio di richieste opportunamente predisposte contenenti hostname manipolati, al fine di eludere i meccanismi di sicurezza basati su allowlist di domini e, in specifici scenari, realizzare attacchi di tipo Server-Side Request Forgery (SSRF) verso risorse interne.

Official advisory ↗
KISA KrCERT/CC · Korean · KNVD-7015美 CISA 발표 주요 Exploit 정보공유(Update. 2026-10-27)

Google Brotli Unchecked Return Value Vulnerability

Official advisory ↗
KISA KrCERT/CC · Korean · KNVD-7014Google 제품 보안 업데이트 권고

Google Brotli에서 발생하는 Out-of-bounds Write 취약점(CVE-2026-111497) [1][2]

Official advisory ↗
NCSC-NL · Dutch · NCSC-2026-0453Kwetsbaarheid in Google Brotli-decoder

Een ongeauthenticeerde kwaadwillende kan de kwetsbaarheid op afstand misbruiken door speciaal vervaardigde Brotli-gecomprimeerde gegevens te laten verwerken. Succesvol misbruik kan leiden tot een denial-of-service, toegang tot gevoelige gegevens uit het procesgeheugen of het uitvoeren van willekeurige code met de rechten van het getroffen proces.

Official advisory ↗
NCSC-NL · Dutch · NCSC-2026-0479Kwetsbaarheden verholpen in Siemens producten

Multiple out-of-bounds write vulnerabilities in Google and Node.js Brotli decoders across various versions allow remote code execution, memory corruption, denial of service, and data disclosure.

Official advisory ↗
03

Patch and workaround

Operational remediation based on structured source evidence.

Status
?Patch availability is based on structured fixed-version fields and authoritative update references. If no fix is verified, check the vendor advisory before making a change.
Fix availability varies by product
Affected
Fixed
Update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.
Action
Use the product-specific evidence above. Patch only products with a verified fixed release, and keep every affected or under-investigation state without a matching fix in the remediation queue.
Workaround
A mitigation or workaround reference is available from the source linked below; validate it against the affected product and version.
Official vendor articles12 stored documents

Linked articles are downloaded and versioned as source evidence. A CVE mention or approved update relationship does not, by itself, verify a fix for every product branch.

  • Release v1.2.7: Detect and report invalid stream earlier · andybalholm/brotli · GitHub →Original publisher ↗Searchable text snapshot · Captured 15 Nov 2026Repository navigation Code Issues 3  ( 3 ) Pull requests 1  ( 1 ) Actions Projects Security and quality 1  ( 1 ) Insights More items v1.2.7 v1.2.7 33c2a98 Compare Choose a tag to compare Sorry, something went wrong. Filter Loading Sorry, something went wrong. Uh oh! There was an error while loading. Please
  • Release v1.0.10 · google/brotli · GitHub →Original publisher ↗Searchable text snapshot · Captured 15 Nov 2026Repository navigation Code Issues 86  ( 86 ) Pull requests 46  ( 46 ) Actions Projects Wiki Security and quality Insights More items v1.0.10 Compare Choose a tag to compare Sorry, something went wrong. Filter Loading Sorry, something went wrong. Uh oh! There was an error while loading. Please reload this pag
  • Release v1.1.1 · google/brotli · GitHub →Original publisher ↗Searchable text snapshot · Captured 15 Nov 2026Repository navigation Code Issues 86  ( 86 ) Pull requests 46  ( 46 ) Actions Projects Wiki Security and quality Insights More items v1.1.1 Compare Choose a tag to compare Sorry, something went wrong. Filter Loading Sorry, something went wrong. Uh oh! There was an error while loading. Please reload this page
  • Release v1.2.1 · google/brotli · GitHub →Original publisher ↗Searchable text snapshot · Captured 15 Nov 2026Repository navigation Code Issues 86  ( 86 ) Pull requests 46  ( 46 ) Actions Projects Wiki Security and quality Insights More items v1.2.1 Latest Latest Compare Choose a tag to compare Sorry, something went wrong. Filter Loading Sorry, something went wrong. Uh oh! There was an error while loading. Please
  • PSIRT | FortiGuard Labs →Original publisher ↗Searchable text snapshot · Captured 14 Nov 2026PSIRT Node2Shell CVEs Summary CVE-2026-105482 - (high) This vulnerability affects Node.js 26.x, 24.x, and 22.x. CVE-2026-105483 - (high) This vulnerability affects Node.js 26.x and 24.x. CVE-2026-106069 - (high) This vulnerability affects Node.js 26.x, 24.x, and 22.x. CVE-2026-111497 - (high) A flaw in Node.js can caus
  • About the security content of tvOS 27.2.1 - Apple Support →Original publisher ↗Searchable text snapshot · Captured 14 Nov 2026Apple Store Mac iPad iPhone Watch Vision AirPods Home Entertainment Accessories Support 0 + "},{"name":"compact","assetInline":" "}],"analyticsAttributes":[{"name":"data-analytics-title","value":"apple home"}]},{"id":"ad4a2a26eb4836393385e9f6c61b526b4a3cb31409c5ed8730ce7a704dd7132f","name":"store","text":"
  • About the security content of macOS Golden Gate 27.2.1 - Apple Support →Original publisher ↗Searchable text snapshot · Captured 13 Nov 2026Apple Store Mac iPad iPhone Watch Vision AirPods Home Entertainment Accessories Support 0 + "},{"name":"compact","assetInline":" "}],"analyticsAttributes":[{"name":"data-analytics-title","value":"apple home"}]},{"id":"ad4a2a26eb4836393385e9f6c61b526b4a3cb31409c5ed8730ce7a704dd7132f","name":"store","text":"
  • About the security content of macOS Tahoe 26.7.3 - Apple Support →Original publisher ↗Searchable text snapshot · Captured 13 Nov 2026Apple Store Mac iPad iPhone Watch Vision AirPods Home Entertainment Accessories Support 0 + "},{"name":"compact","assetInline":" "}],"analyticsAttributes":[{"name":"data-analytics-title","value":"apple home"}]},{"id":"ad4a2a26eb4836393385e9f6c61b526b4a3cb31409c5ed8730ce7a704dd7132f","name":"store","text":"
  • About the security content of macOS Sequoia 15.8.3 - Apple Support →Original publisher ↗Searchable text snapshot · Captured 13 Nov 2026Apple Store Mac iPad iPhone Watch Vision AirPods Home Entertainment Accessories Support 0 + "},{"name":"compact","assetInline":" "}],"analyticsAttributes":[{"name":"data-analytics-title","value":"apple home"}]},{"id":"ad4a2a26eb4836393385e9f6c61b526b4a3cb31409c5ed8730ce7a704dd7132f","name":"store","text":"
  • About the security content of watchOS 27.2.1 - Apple Support →Original publisher ↗Searchable text snapshot · Captured 13 Nov 2026Apple Store Mac iPad iPhone Watch Vision AirPods Home Entertainment Accessories Support 0 + "},{"name":"compact","assetInline":" "}],"analyticsAttributes":[{"name":"data-analytics-title","value":"apple home"}]},{"id":"ad4a2a26eb4836393385e9f6c61b526b4a3cb31409c5ed8730ce7a704dd7132f","name":"store","text":"
  • About the security content of visionOS 27.2.1 - Apple Support →Original publisher ↗Searchable text snapshot · Captured 13 Nov 2026Apple Store Mac iPad iPhone Watch Vision AirPods Home Entertainment Accessories Support 0 + "},{"name":"compact","assetInline":" "}],"analyticsAttributes":[{"name":"data-analytics-title","value":"apple home"}]},{"id":"ad4a2a26eb4836393385e9f6c61b526b4a3cb31409c5ed8730ce7a704dd7132f","name":"store","text":"
  • About the security content of HomeView Software Version 27.2 - Apple Support →Original publisher ↗Searchable text snapshot · Captured 13 Nov 2026Apple Store Mac iPad iPhone Watch Vision AirPods Home Entertainment Accessories Support 0 + "},{"name":"compact","assetInline":" "}],"analyticsAttributes":[{"name":"data-analytics-title","value":"apple home"}]},{"id":"ad4a2a26eb4836393385e9f6c61b526b4a3cb31409c5ed8730ce7a704dd7132f","name":"store","text":"
04

Evidence and provenance

Published 22 Oct 2026 · Last source change 10 Nov 2026, 12:50 UTC · CWE-787 · Out-of-bounds Write

CVE recordCVE.org · 5.2
CVSS sourceCNA
EPSS source
?The date BlackTree first stored a score for this CVE from the daily FIRST EPSS feed.
FIRST · tracked since 2026-10-23
European sourceENISA EUVD · EUVD-2026-108169
Product sourceVendor CSAF · Cisco PSIRT
Remediation sourceVendor CSAF · Cisco PSIRT
CWE sourceCNA
NVD statusNVD enriched

Core structured fields are present and their contributing authorities are shown above.

Material change intelligence

What changed after publication

View recent updates ↗
  1. Affected versionsThe structured affected or fixed version information changed.
    Before
    exploit-intelligence/agent-client-rhel9 as a component of Exploit Intelligence; exploit-intelligence/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; ansible-automation-platform/automation-dashboard-rhel9 as a component of Red Hat Ansible Automation Platform 2; native-linux-x86_64 as a component of Red Hat build of Apache Camel 4 for Quarkus 3; native-linux-x86_64 as a component of Red Hat build of Apicurio Registry 3; native-linux-x86_64 as a component of Red Hat build of Debezium 3; rhdh/rhdh-hub-rhel9 as a component of Red Hat Developer Hub 1; rhdh/rhdh-hub-rhel9 as a component of Red Hat Developer Hub 2; nodejs-docs (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs-full-i18n (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs-libs (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs.src (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs (nodejs:26) as a component of Red Hat Enterprise Linux 9; npm (nodejs:26) as a component of Red Hat Enterprise Linux 9; jbcs-httpd24-brotli as a component of Red Hat JBoss Core Services; jbcs-httpd24-brotli-devel as a component of Red Hat JBoss Core Services; jbcs-httpd24-brotli.src as a component of Red Hat JBoss Core Services; rhoai/odh-mlserver-cuda-rhel9 as a component of Red Hat OpenShift AI (RHOAI); openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 5; satellite/iop-remediations-rhel9 as a component of Red Hat Satellite 6 · Fixed: firefox-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); python3.12-brotli-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; and 1628 more
    After
    exploit-intelligence/agent-client-rhel9 as a component of Exploit Intelligence; exploit-intelligence/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; ansible-automation-platform/automation-dashboard-rhel9 as a component of Red Hat Ansible Automation Platform 2; native-linux-x86_64 as a component of Red Hat build of Apache Camel 4 for Quarkus 3; native-linux-x86_64 as a component of Red Hat build of Apicurio Registry 3; native-linux-x86_64 as a component of Red Hat build of Debezium 3; rhdh/rhdh-hub-rhel9 as a component of Red Hat Developer Hub 1; rhdh/rhdh-hub-rhel9 as a component of Red Hat Developer Hub 2; jbcs-httpd24-brotli as a component of Red Hat JBoss Core Services; jbcs-httpd24-brotli-devel as a component of Red Hat JBoss Core Services; jbcs-httpd24-brotli.src as a component of Red Hat JBoss Core Services; rhoai/odh-mlserver-cuda-rhel9 as a component of Red Hat OpenShift AI (RHOAI); openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 5; satellite/iop-remediations-rhel9 as a component of Red Hat Satellite 6 · Fixed: firefox-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); python3.12-brotli-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; and 1689 more
    Red Hat Product Security ↗
  2. Affected versionsThe structured affected or fixed version information changed.
    Before
    exploit-intelligence/agent-client-rhel9 as a component of Exploit Intelligence; exploit-intelligence/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; ansible-automation-platform/automation-dashboard-rhel9 as a component of Red Hat Ansible Automation Platform 2; native-linux-x86_64 as a component of Red Hat build of Apache Camel 4 for Quarkus 3; native-linux-x86_64 as a component of Red Hat build of Apicurio Registry 3; native-linux-x86_64 as a component of Red Hat build of Debezium 3; rhdh/rhdh-hub-rhel9 as a component of Red Hat Developer Hub 1; rhdh/rhdh-hub-rhel9 as a component of Red Hat Developer Hub 2; nodejs-docs (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs-full-i18n (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs-libs (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs.src (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs (nodejs:26) as a component of Red Hat Enterprise Linux 9; npm (nodejs:26) as a component of Red Hat Enterprise Linux 9; jbcs-httpd24-brotli as a component of Red Hat JBoss Core Services; jbcs-httpd24-brotli-devel as a component of Red Hat JBoss Core Services; jbcs-httpd24-brotli.src as a component of Red Hat JBoss Core Services; rhoai/odh-mlserver-cuda-rhel9 as a component of Red Hat OpenShift AI (RHOAI); openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 5; satellite/iop-remediations-rhel9 as a component of Red Hat Satellite 6 · Fixed: firefox-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); python3.12-brotli-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; and 1624 more
    After
    exploit-intelligence/agent-client-rhel9 as a component of Exploit Intelligence; exploit-intelligence/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; ansible-automation-platform/automation-dashboard-rhel9 as a component of Red Hat Ansible Automation Platform 2; native-linux-x86_64 as a component of Red Hat build of Apache Camel 4 for Quarkus 3; native-linux-x86_64 as a component of Red Hat build of Apicurio Registry 3; native-linux-x86_64 as a component of Red Hat build of Debezium 3; rhdh/rhdh-hub-rhel9 as a component of Red Hat Developer Hub 1; rhdh/rhdh-hub-rhel9 as a component of Red Hat Developer Hub 2; nodejs-docs (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs-full-i18n (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs-libs (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs.src (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs (nodejs:26) as a component of Red Hat Enterprise Linux 9; npm (nodejs:26) as a component of Red Hat Enterprise Linux 9; jbcs-httpd24-brotli as a component of Red Hat JBoss Core Services; jbcs-httpd24-brotli-devel as a component of Red Hat JBoss Core Services; jbcs-httpd24-brotli.src as a component of Red Hat JBoss Core Services; rhoai/odh-mlserver-cuda-rhel9 as a component of Red Hat OpenShift AI (RHOAI); openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 5; satellite/iop-remediations-rhel9 as a component of Red Hat Satellite 6 · Fixed: firefox-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); python3.12-brotli-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; and 1628 more
    Red Hat Product Security ↗
  3. Affected versionsThe structured affected or fixed version information changed.
    Before
    exploit-intelligence/agent-client-rhel9 as a component of Exploit Intelligence; exploit-intelligence/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; ansible-automation-platform-26/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform/automation-dashboard-rhel9 as a component of Red Hat Ansible Automation Platform 2; native-linux-x86_64 as a component of Red Hat build of Apache Camel 4 for Quarkus 3; native-linux-x86_64 as a component of Red Hat build of Apicurio Registry 3; native-linux-x86_64 as a component of Red Hat build of Debezium 3; rhdh/rhdh-hub-rhel9 as a component of Red Hat Developer Hub 1; nodejs-docs (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs-full-i18n (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs-libs (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs.src (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs (nodejs:26) as a component of Red Hat Enterprise Linux 9; npm (nodejs:26) as a component of Red Hat Enterprise Linux 9; jbcs-httpd24-brotli as a component of Red Hat JBoss Core Services; jbcs-httpd24-brotli-devel as a component of Red Hat JBoss Core Services; jbcs-httpd24-brotli.src as a component of Red Hat JBoss Core Services; rhoai/odh-mlserver-cuda-rhel9 as a component of Red Hat OpenShift AI (RHOAI); openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 5; python-brotli.src as a component of Red Hat Satellite 6; satellite/iop-remediations-rhel9 as a component of Red Hat Satellite 6 · Fixed: firefox-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); python3.12-brotli-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; and 1600 more
    After
    exploit-intelligence/agent-client-rhel9 as a component of Exploit Intelligence; exploit-intelligence/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; ansible-automation-platform/automation-dashboard-rhel9 as a component of Red Hat Ansible Automation Platform 2; native-linux-x86_64 as a component of Red Hat build of Apache Camel 4 for Quarkus 3; native-linux-x86_64 as a component of Red Hat build of Apicurio Registry 3; native-linux-x86_64 as a component of Red Hat build of Debezium 3; rhdh/rhdh-hub-rhel9 as a component of Red Hat Developer Hub 1; rhdh/rhdh-hub-rhel9 as a component of Red Hat Developer Hub 2; nodejs-docs (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs-full-i18n (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs-libs (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs.src (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs (nodejs:26) as a component of Red Hat Enterprise Linux 9; npm (nodejs:26) as a component of Red Hat Enterprise Linux 9; jbcs-httpd24-brotli as a component of Red Hat JBoss Core Services; jbcs-httpd24-brotli-devel as a component of Red Hat JBoss Core Services; jbcs-httpd24-brotli.src as a component of Red Hat JBoss Core Services; rhoai/odh-mlserver-cuda-rhel9 as a component of Red Hat OpenShift AI (RHOAI); openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 5; satellite/iop-remediations-rhel9 as a component of Red Hat Satellite 6 · Fixed: firefox-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); python3.12-brotli-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; and 1624 more
    Red Hat Product Security ↗
  4. Affected versionsThe structured affected or fixed version information changed.
    Before
    exploit-intelligence/agent-client-rhel9 as a component of Exploit Intelligence; exploit-intelligence/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; ansible-automation-platform-26/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform/automation-dashboard-rhel9 as a component of Red Hat Ansible Automation Platform 2; native-linux-x86_64 as a component of Red Hat build of Apache Camel 4 for Quarkus 3; native-linux-x86_64 as a component of Red Hat build of Apicurio Registry 3; native-linux-x86_64 as a component of Red Hat build of Debezium 3; rhdh/rhdh-hub-rhel9 as a component of Red Hat Developer Hub 1; nodejs-docs (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs-full-i18n (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs-libs (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs.src (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs (nodejs:26) as a component of Red Hat Enterprise Linux 9; npm (nodejs:26) as a component of Red Hat Enterprise Linux 9; jbcs-httpd24-brotli as a component of Red Hat JBoss Core Services; jbcs-httpd24-brotli-devel as a component of Red Hat JBoss Core Services; jbcs-httpd24-brotli.src as a component of Red Hat JBoss Core Services; rhoai/odh-mlserver-cuda-rhel9 as a component of Red Hat OpenShift AI (RHOAI); openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 5; python-brotli.src as a component of Red Hat Satellite 6; satellite/iop-remediations-rhel9 as a component of Red Hat Satellite 6 · Fixed: firefox-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); python3.12-brotli-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; and 1586 more
    After
    exploit-intelligence/agent-client-rhel9 as a component of Exploit Intelligence; exploit-intelligence/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; ansible-automation-platform-26/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform/automation-dashboard-rhel9 as a component of Red Hat Ansible Automation Platform 2; native-linux-x86_64 as a component of Red Hat build of Apache Camel 4 for Quarkus 3; native-linux-x86_64 as a component of Red Hat build of Apicurio Registry 3; native-linux-x86_64 as a component of Red Hat build of Debezium 3; rhdh/rhdh-hub-rhel9 as a component of Red Hat Developer Hub 1; nodejs-docs (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs-full-i18n (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs-libs (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs.src (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs (nodejs:26) as a component of Red Hat Enterprise Linux 9; npm (nodejs:26) as a component of Red Hat Enterprise Linux 9; jbcs-httpd24-brotli as a component of Red Hat JBoss Core Services; jbcs-httpd24-brotli-devel as a component of Red Hat JBoss Core Services; jbcs-httpd24-brotli.src as a component of Red Hat JBoss Core Services; rhoai/odh-mlserver-cuda-rhel9 as a component of Red Hat OpenShift AI (RHOAI); openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 5; python-brotli.src as a component of Red Hat Satellite 6; satellite/iop-remediations-rhel9 as a component of Red Hat Satellite 6 · Fixed: firefox-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); python3.12-brotli-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; and 1600 more
    Red Hat Product Security ↗
  5. Vendor guidanceAuthoritative vendor guidance changed from remediation: cert-portal.siemens.com/ssa-045512.html to remediation: cert-portal.siemens.com/ssa-045512.html.
    Before
    remediation: cert-portal.siemens.com/ssa-045512.html
    After
    remediation: cert-portal.siemens.com/ssa-045512.html
    Siemens ProductCERT ↗
  6. Remediation statusRemediation status changed from Awaiting fix to Patch available.
    Before
    Awaiting fix
    After
    Patch available
    Siemens ProductCERT ↗
  7. Affected versionsThe structured affected or fixed version information changed.
    Before
    After
    Desigo CC family V8; Desigo CC family V9
    Siemens ProductCERT ↗
  8. Affected versionsThe structured affected or fixed version information changed.
    Before
    exploit-intelligence/agent-client-rhel9 as a component of Exploit Intelligence; exploit-intelligence/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; ansible-automation-platform-26/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform/automation-dashboard-rhel9 as a component of Red Hat Ansible Automation Platform 2; native-linux-x86_64 as a component of Red Hat build of Apache Camel 4 for Quarkus 3; native-linux-x86_64 as a component of Red Hat build of Apicurio Registry 3; native-linux-x86_64 as a component of Red Hat build of Debezium 3; nodejs-docs (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs-full-i18n (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs-libs (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs.src (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs (nodejs:26) as a component of Red Hat Enterprise Linux 9; npm (nodejs:26) as a component of Red Hat Enterprise Linux 9; jbcs-httpd24-brotli as a component of Red Hat JBoss Core Services; jbcs-httpd24-brotli-devel as a component of Red Hat JBoss Core Services; jbcs-httpd24-brotli.src as a component of Red Hat JBoss Core Services; rhoai/odh-mlserver-cuda-rhel9 as a component of Red Hat OpenShift AI (RHOAI); openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 5; devspaces/multicluster-redirector-rhel9 as a component of Red Hat OpenShift Dev Spaces; devspaces/udi-rhel9 as a component of Red Hat OpenShift Dev Spaces; python-brotli.src as a component of Red Hat Satellite 6; satellite/iop-remediations-rhel9 as a component of Red Hat Satellite 6 · Fixed: firefox-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); python3.12-brotli-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; python3.12-brotli-0:1.2.1-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; python3.12-brotli-0:1.2.1-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; python3.12-brotli-0:1.2.1-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; python3.12-brotli-0:1.2.1-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; python3.12-brotli-debuginfo-0:1.2.1-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; python3.12-brotli-debuginfo-0:1.2.1-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; python3.12-brotli-debuginfo-0:1.2.1-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; python3.12-brotli-debuginfo-0:1.2.1-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; and 1488 more
    After
    exploit-intelligence/agent-client-rhel9 as a component of Exploit Intelligence; exploit-intelligence/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; ansible-automation-platform-26/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform/automation-dashboard-rhel9 as a component of Red Hat Ansible Automation Platform 2; native-linux-x86_64 as a component of Red Hat build of Apache Camel 4 for Quarkus 3; native-linux-x86_64 as a component of Red Hat build of Apicurio Registry 3; native-linux-x86_64 as a component of Red Hat build of Debezium 3; rhdh/rhdh-hub-rhel9 as a component of Red Hat Developer Hub 1; nodejs-docs (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs-full-i18n (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs-libs (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs.src (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs (nodejs:26) as a component of Red Hat Enterprise Linux 9; npm (nodejs:26) as a component of Red Hat Enterprise Linux 9; jbcs-httpd24-brotli as a component of Red Hat JBoss Core Services; jbcs-httpd24-brotli-devel as a component of Red Hat JBoss Core Services; jbcs-httpd24-brotli.src as a component of Red Hat JBoss Core Services; rhoai/odh-mlserver-cuda-rhel9 as a component of Red Hat OpenShift AI (RHOAI); openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 5; python-brotli.src as a component of Red Hat Satellite 6; satellite/iop-remediations-rhel9 as a component of Red Hat Satellite 6 · Fixed: firefox-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); python3.12-brotli-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; and 1586 more
    Red Hat Product Security ↗
  9. Affected versionsThe structured affected or fixed version information changed.
    Before
    exploit-intelligence/agent-client-rhel9 as a component of Exploit Intelligence; exploit-intelligence/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; ansible-automation-platform-26/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform/automation-dashboard-rhel9 as a component of Red Hat Ansible Automation Platform 2; native-linux-x86_64 as a component of Red Hat build of Apache Camel 4 for Quarkus 3; native-linux-x86_64 as a component of Red Hat build of Apicurio Registry 3; native-linux-x86_64 as a component of Red Hat build of Debezium 3; native-linux-x86_64 as a component of Red Hat build of Quarkus; nodejs-docs (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs-full-i18n (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs-libs (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs.src (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs (nodejs:26) as a component of Red Hat Enterprise Linux 9; npm (nodejs:26) as a component of Red Hat Enterprise Linux 9; jbcs-httpd24-brotli as a component of Red Hat JBoss Core Services; jbcs-httpd24-brotli-devel as a component of Red Hat JBoss Core Services; jbcs-httpd24-brotli.src as a component of Red Hat JBoss Core Services; rhoai/odh-mlserver-cuda-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-trustyai-service-rhel9 as a component of Red Hat OpenShift AI (RHOAI); openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 5; devspaces/multicluster-redirector-rhel9 as a component of Red Hat OpenShift Dev Spaces; devspaces/udi-rhel9 as a component of Red Hat OpenShift Dev Spaces; python-brotli.src as a component of Red Hat Satellite 6; satellite/iop-remediations-rhel9 as a component of Red Hat Satellite 6 · Fixed: firefox-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); python3.12-brotli-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; python3.12-brotli-0:1.2.1-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; python3.12-brotli-0:1.2.1-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; python3.12-brotli-0:1.2.1-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; python3.12-brotli-0:1.2.1-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; python3.12-brotli-debuginfo-0:1.2.1-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; python3.12-brotli-debuginfo-0:1.2.1-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; python3.12-brotli-debuginfo-0:1.2.1-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; python3.12-brotli-debuginfo-0:1.2.1-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; and 1215 more
    After
    exploit-intelligence/agent-client-rhel9 as a component of Exploit Intelligence; exploit-intelligence/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; ansible-automation-platform-26/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform/automation-dashboard-rhel9 as a component of Red Hat Ansible Automation Platform 2; native-linux-x86_64 as a component of Red Hat build of Apache Camel 4 for Quarkus 3; native-linux-x86_64 as a component of Red Hat build of Apicurio Registry 3; native-linux-x86_64 as a component of Red Hat build of Debezium 3; nodejs-docs (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs-full-i18n (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs-libs (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs.src (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs (nodejs:26) as a component of Red Hat Enterprise Linux 9; npm (nodejs:26) as a component of Red Hat Enterprise Linux 9; jbcs-httpd24-brotli as a component of Red Hat JBoss Core Services; jbcs-httpd24-brotli-devel as a component of Red Hat JBoss Core Services; jbcs-httpd24-brotli.src as a component of Red Hat JBoss Core Services; rhoai/odh-mlserver-cuda-rhel9 as a component of Red Hat OpenShift AI (RHOAI); openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 5; devspaces/multicluster-redirector-rhel9 as a component of Red Hat OpenShift Dev Spaces; devspaces/udi-rhel9 as a component of Red Hat OpenShift Dev Spaces; python-brotli.src as a component of Red Hat Satellite 6; satellite/iop-remediations-rhel9 as a component of Red Hat Satellite 6 · Fixed: firefox-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); python3.12-brotli-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; python3.12-brotli-0:1.2.1-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; python3.12-brotli-0:1.2.1-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; python3.12-brotli-0:1.2.1-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; python3.12-brotli-0:1.2.1-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; python3.12-brotli-debuginfo-0:1.2.1-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; python3.12-brotli-debuginfo-0:1.2.1-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; python3.12-brotli-debuginfo-0:1.2.1-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; python3.12-brotli-debuginfo-0:1.2.1-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; and 1488 more
    Red Hat Product Security ↗
  10. Affected versionsThe structured affected or fixed version information changed.
    Before
    exploit-intelligence/agent-client-rhel9 as a component of Exploit Intelligence; exploit-intelligence/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; ansible-automation-platform-26/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform/automation-dashboard-rhel9 as a component of Red Hat Ansible Automation Platform 2; python3.12-brotli.src as a component of Red Hat Ansible Automation Platform 2; native-linux-x86_64 as a component of Red Hat build of Apache Camel 4 for Quarkus 3; native-linux-x86_64 as a component of Red Hat build of Apicurio Registry 3; native-linux-x86_64 as a component of Red Hat build of Debezium 3; native-linux-x86_64 as a component of Red Hat build of Quarkus; nodejs-docs (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs-full-i18n (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs-libs (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs.src (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs (nodejs:26) as a component of Red Hat Enterprise Linux 9; npm (nodejs:26) as a component of Red Hat Enterprise Linux 9; jbcs-httpd24-brotli as a component of Red Hat JBoss Core Services; jbcs-httpd24-brotli-devel as a component of Red Hat JBoss Core Services; jbcs-httpd24-brotli.src as a component of Red Hat JBoss Core Services; rhoai/odh-mlserver-cuda-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-trustyai-service-rhel9 as a component of Red Hat OpenShift AI (RHOAI); openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 5; devspaces/multicluster-redirector-rhel9 as a component of Red Hat OpenShift Dev Spaces; devspaces/udi-rhel9 as a component of Red Hat OpenShift Dev Spaces; python-brotli.src as a component of Red Hat Satellite 6; python3.12-brotli.src as a component of Red Hat Satellite 6; satellite/iop-remediations-rhel9 as a component of Red Hat Satellite 6 · Fixed: firefox-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); brotli-0:1.1.0-6.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-0:1.1.0-6.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-0:1.1.0-6.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-0:1.1.0-6.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debuginfo-0:1.1.0-6.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debuginfo-0:1.1.0-6.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debuginfo-0:1.1.0-6.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debuginfo-0:1.1.0-6.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debugsource-0:1.1.0-6.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debugsource-0:1.1.0-6.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debugsource-0:1.1.0-6.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debugsource-0:1.1.0-6.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-devel-0:1.1.0-6.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-devel-0:1.1.0-6.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-devel-0:1.1.0-6.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-devel-0:1.1.0-6.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-0:140.10.0-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-0:140.10.0-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-0:140.10.0-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-0:140.10.0-1.el10_0.src as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-0:140.10.0-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-debuginfo-0:140.10.0-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); and 1185 more
    After
    exploit-intelligence/agent-client-rhel9 as a component of Exploit Intelligence; exploit-intelligence/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; ansible-automation-platform-26/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform/automation-dashboard-rhel9 as a component of Red Hat Ansible Automation Platform 2; native-linux-x86_64 as a component of Red Hat build of Apache Camel 4 for Quarkus 3; native-linux-x86_64 as a component of Red Hat build of Apicurio Registry 3; native-linux-x86_64 as a component of Red Hat build of Debezium 3; native-linux-x86_64 as a component of Red Hat build of Quarkus; nodejs-docs (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs-full-i18n (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs-libs (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs.src (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs (nodejs:26) as a component of Red Hat Enterprise Linux 9; npm (nodejs:26) as a component of Red Hat Enterprise Linux 9; jbcs-httpd24-brotli as a component of Red Hat JBoss Core Services; jbcs-httpd24-brotli-devel as a component of Red Hat JBoss Core Services; jbcs-httpd24-brotli.src as a component of Red Hat JBoss Core Services; rhoai/odh-mlserver-cuda-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-trustyai-service-rhel9 as a component of Red Hat OpenShift AI (RHOAI); openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 5; devspaces/multicluster-redirector-rhel9 as a component of Red Hat OpenShift Dev Spaces; devspaces/udi-rhel9 as a component of Red Hat OpenShift Dev Spaces; python-brotli.src as a component of Red Hat Satellite 6; satellite/iop-remediations-rhel9 as a component of Red Hat Satellite 6 · Fixed: firefox-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); python3.12-brotli-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debuginfo-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-debugsource-0:1.2.1-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8; python3.12-brotli-0:1.2.1-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; python3.12-brotli-0:1.2.1-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; python3.12-brotli-0:1.2.1-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; python3.12-brotli-0:1.2.1-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; python3.12-brotli-0:1.2.1-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; python3.12-brotli-debuginfo-0:1.2.1-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; python3.12-brotli-debuginfo-0:1.2.1-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; python3.12-brotli-debuginfo-0:1.2.1-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; python3.12-brotli-debuginfo-0:1.2.1-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9; and 1215 more
    Red Hat Product Security ↗
  11. Affected versionsThe structured affected or fixed version information changed.
    Before
    exploit-intelligence/agent-client-rhel9 as a component of Exploit Intelligence; exploit-intelligence/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; istio-proxy-selinux as a component of OpenShift Service Mesh 3; istio-proxy.src as a component of OpenShift Service Mesh 3; ansible-automation-platform-26/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform/automation-dashboard-rhel9 as a component of Red Hat Ansible Automation Platform 2; python3.12-brotli.src as a component of Red Hat Ansible Automation Platform 2; native-linux-x86_64 as a component of Red Hat build of Apache Camel 4 for Quarkus 3; native-linux-x86_64 as a component of Red Hat build of Apicurio Registry 3; native-linux-x86_64 as a component of Red Hat build of Debezium 3; native-linux-x86_64 as a component of Red Hat build of Quarkus; aspnetcore-runtime-8.0 as a component of Red Hat Enterprise Linux 10; aspnetcore-runtime-dbg-8.0 as a component of Red Hat Enterprise Linux 10; aspnetcore-targeting-pack-8.0 as a component of Red Hat Enterprise Linux 10; dotnet-apphost-pack-8.0 as a component of Red Hat Enterprise Linux 10; dotnet-hostfxr-8.0 as a component of Red Hat Enterprise Linux 10; dotnet-runtime-8.0 as a component of Red Hat Enterprise Linux 10; dotnet-runtime-dbg-8.0 as a component of Red Hat Enterprise Linux 10; dotnet-sdk-8.0 as a component of Red Hat Enterprise Linux 10; dotnet-sdk-8.0-source-built-artifacts as a component of Red Hat Enterprise Linux 10; dotnet-sdk-dbg-8.0 as a component of Red Hat Enterprise Linux 10; dotnet-targeting-pack-8.0 as a component of Red Hat Enterprise Linux 10; dotnet-templates-8.0 as a component of Red Hat Enterprise Linux 10; dotnet8.0.src as a component of Red Hat Enterprise Linux 10; aspnetcore-runtime-8.0 as a component of Red Hat Enterprise Linux 8; aspnetcore-runtime-dbg-8.0 as a component of Red Hat Enterprise Linux 8; aspnetcore-targeting-pack-8.0 as a component of Red Hat Enterprise Linux 8; dotnet-apphost-pack-8.0 as a component of Red Hat Enterprise Linux 8; dotnet-hostfxr-8.0 as a component of Red Hat Enterprise Linux 8; and 63 more · Fixed: firefox-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); brotli-0:1.1.0-6.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-0:1.1.0-6.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-0:1.1.0-6.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-0:1.1.0-6.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debuginfo-0:1.1.0-6.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debuginfo-0:1.1.0-6.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debuginfo-0:1.1.0-6.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debuginfo-0:1.1.0-6.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debugsource-0:1.1.0-6.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debugsource-0:1.1.0-6.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debugsource-0:1.1.0-6.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debugsource-0:1.1.0-6.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-devel-0:1.1.0-6.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-devel-0:1.1.0-6.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-devel-0:1.1.0-6.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-devel-0:1.1.0-6.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-0:140.10.0-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-0:140.10.0-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-0:140.10.0-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-0:140.10.0-1.el10_0.src as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-0:140.10.0-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-debuginfo-0:140.10.0-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); and 795 more
    After
    exploit-intelligence/agent-client-rhel9 as a component of Exploit Intelligence; exploit-intelligence/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; ansible-automation-platform-26/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform/automation-dashboard-rhel9 as a component of Red Hat Ansible Automation Platform 2; python3.12-brotli.src as a component of Red Hat Ansible Automation Platform 2; native-linux-x86_64 as a component of Red Hat build of Apache Camel 4 for Quarkus 3; native-linux-x86_64 as a component of Red Hat build of Apicurio Registry 3; native-linux-x86_64 as a component of Red Hat build of Debezium 3; native-linux-x86_64 as a component of Red Hat build of Quarkus; nodejs-docs (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs-full-i18n (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs-libs (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs.src (nodejs:26) as a component of Red Hat Enterprise Linux 9; nodejs (nodejs:26) as a component of Red Hat Enterprise Linux 9; npm (nodejs:26) as a component of Red Hat Enterprise Linux 9; jbcs-httpd24-brotli as a component of Red Hat JBoss Core Services; jbcs-httpd24-brotli-devel as a component of Red Hat JBoss Core Services; jbcs-httpd24-brotli.src as a component of Red Hat JBoss Core Services; rhoai/odh-mlserver-cuda-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-trustyai-service-rhel9 as a component of Red Hat OpenShift AI (RHOAI); openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 5; devspaces/multicluster-redirector-rhel9 as a component of Red Hat OpenShift Dev Spaces; devspaces/udi-rhel9 as a component of Red Hat OpenShift Dev Spaces; python-brotli.src as a component of Red Hat Satellite 6; python3.12-brotli.src as a component of Red Hat Satellite 6; satellite/iop-remediations-rhel9 as a component of Red Hat Satellite 6 · Fixed: firefox-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); brotli-0:1.1.0-6.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-0:1.1.0-6.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-0:1.1.0-6.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-0:1.1.0-6.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debuginfo-0:1.1.0-6.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debuginfo-0:1.1.0-6.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debuginfo-0:1.1.0-6.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debuginfo-0:1.1.0-6.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debugsource-0:1.1.0-6.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debugsource-0:1.1.0-6.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debugsource-0:1.1.0-6.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debugsource-0:1.1.0-6.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-devel-0:1.1.0-6.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-devel-0:1.1.0-6.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-devel-0:1.1.0-6.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-devel-0:1.1.0-6.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-0:140.10.0-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-0:140.10.0-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-0:140.10.0-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-0:140.10.0-1.el10_0.src as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-0:140.10.0-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-debuginfo-0:140.10.0-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); and 1185 more
    Red Hat Product Security ↗
  12. Affected versionsThe structured affected or fixed version information changed.
    Before
    exploit-intelligence/agent-client-rhel9 as a component of Exploit Intelligence; exploit-intelligence/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; istio-proxy-selinux as a component of OpenShift Service Mesh 3; istio-proxy.src as a component of OpenShift Service Mesh 3; openshift-service-mesh/istio-proxyv2-rhel9 as a component of OpenShift Service Mesh 3; ansible-automation-platform-26/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform/automation-dashboard-rhel9 as a component of Red Hat Ansible Automation Platform 2; python3.12-brotli.src as a component of Red Hat Ansible Automation Platform 2; native-linux-x86_64 as a component of Red Hat build of Apache Camel 4 for Quarkus 3; native-linux-x86_64 as a component of Red Hat build of Apicurio Registry 3; native-linux-x86_64 as a component of Red Hat build of Debezium 3; native-linux-x86_64 as a component of Red Hat Build of Keycloak; rhbk/keycloak-rhel9 as a component of Red Hat Build of Keycloak; rhbk/keycloak-rhel9-operator as a component of Red Hat Build of Keycloak; native-linux-x86_64 as a component of Red Hat build of Quarkus; aspnetcore-runtime-8.0 as a component of Red Hat Enterprise Linux 10; aspnetcore-runtime-dbg-8.0 as a component of Red Hat Enterprise Linux 10; aspnetcore-targeting-pack-8.0 as a component of Red Hat Enterprise Linux 10; dotnet-apphost-pack-8.0 as a component of Red Hat Enterprise Linux 10; dotnet-hostfxr-8.0 as a component of Red Hat Enterprise Linux 10; dotnet-runtime-8.0 as a component of Red Hat Enterprise Linux 10; dotnet-runtime-dbg-8.0 as a component of Red Hat Enterprise Linux 10; dotnet-sdk-8.0 as a component of Red Hat Enterprise Linux 10; dotnet-sdk-8.0-source-built-artifacts as a component of Red Hat Enterprise Linux 10; dotnet-sdk-dbg-8.0 as a component of Red Hat Enterprise Linux 10; dotnet-targeting-pack-8.0 as a component of Red Hat Enterprise Linux 10; dotnet-templates-8.0 as a component of Red Hat Enterprise Linux 10; dotnet8.0.src as a component of Red Hat Enterprise Linux 10; aspnetcore-runtime-8.0 as a component of Red Hat Enterprise Linux 8; and 67 more · Fixed: firefox-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); brotli-0:1.1.0-6.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-0:1.1.0-6.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-0:1.1.0-6.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-0:1.1.0-6.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debuginfo-0:1.1.0-6.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debuginfo-0:1.1.0-6.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debuginfo-0:1.1.0-6.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debuginfo-0:1.1.0-6.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debugsource-0:1.1.0-6.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debugsource-0:1.1.0-6.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debugsource-0:1.1.0-6.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debugsource-0:1.1.0-6.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-devel-0:1.1.0-6.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-devel-0:1.1.0-6.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-devel-0:1.1.0-6.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-devel-0:1.1.0-6.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-0:140.10.0-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-0:140.10.0-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-0:140.10.0-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-0:140.10.0-1.el10_0.src as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-0:140.10.0-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-debuginfo-0:140.10.0-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); and 795 more
    After
    exploit-intelligence/agent-client-rhel9 as a component of Exploit Intelligence; exploit-intelligence/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; istio-proxy-selinux as a component of OpenShift Service Mesh 3; istio-proxy.src as a component of OpenShift Service Mesh 3; ansible-automation-platform-26/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform/automation-dashboard-rhel9 as a component of Red Hat Ansible Automation Platform 2; python3.12-brotli.src as a component of Red Hat Ansible Automation Platform 2; native-linux-x86_64 as a component of Red Hat build of Apache Camel 4 for Quarkus 3; native-linux-x86_64 as a component of Red Hat build of Apicurio Registry 3; native-linux-x86_64 as a component of Red Hat build of Debezium 3; native-linux-x86_64 as a component of Red Hat build of Quarkus; aspnetcore-runtime-8.0 as a component of Red Hat Enterprise Linux 10; aspnetcore-runtime-dbg-8.0 as a component of Red Hat Enterprise Linux 10; aspnetcore-targeting-pack-8.0 as a component of Red Hat Enterprise Linux 10; dotnet-apphost-pack-8.0 as a component of Red Hat Enterprise Linux 10; dotnet-hostfxr-8.0 as a component of Red Hat Enterprise Linux 10; dotnet-runtime-8.0 as a component of Red Hat Enterprise Linux 10; dotnet-runtime-dbg-8.0 as a component of Red Hat Enterprise Linux 10; dotnet-sdk-8.0 as a component of Red Hat Enterprise Linux 10; dotnet-sdk-8.0-source-built-artifacts as a component of Red Hat Enterprise Linux 10; dotnet-sdk-dbg-8.0 as a component of Red Hat Enterprise Linux 10; dotnet-targeting-pack-8.0 as a component of Red Hat Enterprise Linux 10; dotnet-templates-8.0 as a component of Red Hat Enterprise Linux 10; dotnet8.0.src as a component of Red Hat Enterprise Linux 10; aspnetcore-runtime-8.0 as a component of Red Hat Enterprise Linux 8; aspnetcore-runtime-dbg-8.0 as a component of Red Hat Enterprise Linux 8; aspnetcore-targeting-pack-8.0 as a component of Red Hat Enterprise Linux 8; dotnet-apphost-pack-8.0 as a component of Red Hat Enterprise Linux 8; dotnet-hostfxr-8.0 as a component of Red Hat Enterprise Linux 8; and 63 more · Fixed: firefox-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); brotli-0:1.1.0-6.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-0:1.1.0-6.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-0:1.1.0-6.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-0:1.1.0-6.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debuginfo-0:1.1.0-6.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debuginfo-0:1.1.0-6.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debuginfo-0:1.1.0-6.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debuginfo-0:1.1.0-6.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debugsource-0:1.1.0-6.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debugsource-0:1.1.0-6.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debugsource-0:1.1.0-6.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debugsource-0:1.1.0-6.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-devel-0:1.1.0-6.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-devel-0:1.1.0-6.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-devel-0:1.1.0-6.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-devel-0:1.1.0-6.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-0:140.10.0-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-0:140.10.0-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-0:140.10.0-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-0:140.10.0-1.el10_0.src as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-0:140.10.0-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-debuginfo-0:140.10.0-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); and 795 more
    Red Hat Product Security ↗
  13. BlackTree coverageBlackTree article coverage changed from 1 BlackTree article to 2 BlackTree articles.
    Before
    1 BlackTree article
    After
    2 BlackTree articles
    BlackTree editorial ↗
  14. BlackTree coverageBlackTree article coverage changed from no BlackTree article to 1 BlackTree article.
    Before
    no BlackTree article
    After
    1 BlackTree article
    BlackTree editorial ↗
  15. ENISA known-exploited stateENISA EUVD now records this CVE in its known-exploited dataset.
    Before
    not listed in ENISA EUVD known-exploited dataset
    After
    listed in ENISA EUVD known-exploited dataset (EUVD-2026-108169)
    ENISA EUVD ↗
  16. Vendor guidanceAuthoritative vendor guidance changed from remediation: access.redhat.com/CVE-2026-111497 to remediation: access.redhat.com/CVE-2026-111497.
    Before
    remediation: access.redhat.com/CVE-2026-111497
    After
    remediation: access.redhat.com/CVE-2026-111497
    Red Hat Product Security ↗
  17. Affected versionsThe structured affected or fixed version information changed.
    Before
    exploit-intelligence/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; istio-proxy-selinux as a component of OpenShift Service Mesh 3; istio-proxy.src as a component of OpenShift Service Mesh 3; ansible-automation-platform-25/controller-rhel8 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-26/controller-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-26/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/controller-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform/automation-dashboard-rhel9 as a component of Red Hat Ansible Automation Platform 2; python3.12-brotli.src as a component of Red Hat Ansible Automation Platform 2; brotli as a component of Red Hat Enterprise Linux 10; brotli-devel as a component of Red Hat Enterprise Linux 10; brotli.src as a component of Red Hat Enterprise Linux 10; firefox as a component of Red Hat Enterprise Linux 10; firefox.src as a component of Red Hat Enterprise Linux 10; libbrotli as a component of Red Hat Enterprise Linux 10; python3-brotli as a component of Red Hat Enterprise Linux 10; thunderbird as a component of Red Hat Enterprise Linux 10; thunderbird.src as a component of Red Hat Enterprise Linux 10; firefox as a component of Red Hat Enterprise Linux 7; firefox.src as a component of Red Hat Enterprise Linux 7; brotli as a component of Red Hat Enterprise Linux 8; brotli-devel as a component of Red Hat Enterprise Linux 8; brotli.src as a component of Red Hat Enterprise Linux 8; firefox as a component of Red Hat Enterprise Linux 8; firefox.src as a component of Red Hat Enterprise Linux 8; nodejs-devel (nodejs:24) as a component of Red Hat Enterprise Linux 8; nodejs-docs (nodejs:24) as a component of Red Hat Enterprise Linux 8; nodejs-full-i18n (nodejs:24) as a component of Red Hat Enterprise Linux 8; nodejs-libs (nodejs:24) as a component of Red Hat Enterprise Linux 8; and 44 more · Fixed: brotli-0:1.2.1-0.1.hum1@aarch64 as a component of Red Hat Hardened Images; brotli-0:1.2.1-0.1.hum1@s390x as a component of Red Hat Hardened Images; brotli-0:1.2.1-0.1.hum1@src as a component of Red Hat Hardened Images; brotli-0:1.2.1-0.1.hum1@x86_64 as a component of Red Hat Hardened Images; brotli-devel-0:1.2.1-0.1.hum1@aarch64 as a component of Red Hat Hardened Images; brotli-devel-0:1.2.1-0.1.hum1@s390x as a component of Red Hat Hardened Images; brotli-devel-0:1.2.1-0.1.hum1@x86_64 as a component of Red Hat Hardened Images; libbrotli-0:1.2.1-0.1.hum1@aarch64 as a component of Red Hat Hardened Images; libbrotli-0:1.2.1-0.1.hum1@s390x as a component of Red Hat Hardened Images; libbrotli-0:1.2.1-0.1.hum1@x86_64 as a component of Red Hat Hardened Images; python3-brotli-0:1.2.1-0.1.hum1@aarch64 as a component of Red Hat Hardened Images; python3-brotli-0:1.2.1-0.1.hum1@s390x as a component of Red Hat Hardened Images; python3-brotli-0:1.2.1-0.1.hum1@x86_64 as a component of Red Hat Hardened Images
    After
    exploit-intelligence/agent-client-rhel9 as a component of Exploit Intelligence; exploit-intelligence/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; istio-proxy-selinux as a component of OpenShift Service Mesh 3; istio-proxy.src as a component of OpenShift Service Mesh 3; openshift-service-mesh/istio-proxyv2-rhel9 as a component of OpenShift Service Mesh 3; ansible-automation-platform-26/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform/automation-dashboard-rhel9 as a component of Red Hat Ansible Automation Platform 2; python3.12-brotli.src as a component of Red Hat Ansible Automation Platform 2; native-linux-x86_64 as a component of Red Hat build of Apache Camel 4 for Quarkus 3; native-linux-x86_64 as a component of Red Hat build of Apicurio Registry 3; native-linux-x86_64 as a component of Red Hat build of Debezium 3; native-linux-x86_64 as a component of Red Hat Build of Keycloak; rhbk/keycloak-rhel9 as a component of Red Hat Build of Keycloak; rhbk/keycloak-rhel9-operator as a component of Red Hat Build of Keycloak; native-linux-x86_64 as a component of Red Hat build of Quarkus; aspnetcore-runtime-8.0 as a component of Red Hat Enterprise Linux 10; aspnetcore-runtime-dbg-8.0 as a component of Red Hat Enterprise Linux 10; aspnetcore-targeting-pack-8.0 as a component of Red Hat Enterprise Linux 10; dotnet-apphost-pack-8.0 as a component of Red Hat Enterprise Linux 10; dotnet-hostfxr-8.0 as a component of Red Hat Enterprise Linux 10; dotnet-runtime-8.0 as a component of Red Hat Enterprise Linux 10; dotnet-runtime-dbg-8.0 as a component of Red Hat Enterprise Linux 10; dotnet-sdk-8.0 as a component of Red Hat Enterprise Linux 10; dotnet-sdk-8.0-source-built-artifacts as a component of Red Hat Enterprise Linux 10; dotnet-sdk-dbg-8.0 as a component of Red Hat Enterprise Linux 10; dotnet-targeting-pack-8.0 as a component of Red Hat Enterprise Linux 10; dotnet-templates-8.0 as a component of Red Hat Enterprise Linux 10; dotnet8.0.src as a component of Red Hat Enterprise Linux 10; aspnetcore-runtime-8.0 as a component of Red Hat Enterprise Linux 8; and 67 more · Fixed: firefox-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-0:140.10.0-2.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); firefox-debuginfo-0:140.10.0-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); brotli-0:1.1.0-6.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-0:1.1.0-6.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-0:1.1.0-6.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-0:1.1.0-6.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debuginfo-0:1.1.0-6.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debuginfo-0:1.1.0-6.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debuginfo-0:1.1.0-6.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debuginfo-0:1.1.0-6.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debugsource-0:1.1.0-6.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debugsource-0:1.1.0-6.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debugsource-0:1.1.0-6.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-debugsource-0:1.1.0-6.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-devel-0:1.1.0-6.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-devel-0:1.1.0-6.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-devel-0:1.1.0-6.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); brotli-devel-0:1.1.0-6.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-0:140.10.0-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-0:140.10.0-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-0:140.10.0-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-0:140.10.0-1.el10_0.src as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-0:140.10.0-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); firefox-debuginfo-0:140.10.0-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); and 795 more
    Red Hat Product Security ↗
  18. Vendor guidanceAuthoritative vendor guidance changed: added mitigation: github.com/494.
    Before
    remediation: nodejs.org/october-2026-security-releases
    After
    mitigation: github.com/494 · remediation: nodejs.org/october-2026-security-releases
    nodejs.org ↗
  19. Affected versionsThe structured affected or fixed version information changed.
    Before
    SUSE Linux Enterprise Module for Web and Scripting 15 SP7:nodejs22; SUSE Linux Enterprise Module for Web and Scripting 15 SP7:nodejs22-devel; SUSE Linux Enterprise Module for Web and Scripting 15 SP7:nodejs22-docs; SUSE Linux Enterprise Module for Web and Scripting 15 SP7:npm22; SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22; SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel; SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs; SUSE Linux Enterprise Server 15 SP6-LTSS:npm22; SUSE Linux Enterprise Server 15 SP7:nodejs22; SUSE Linux Enterprise Server 15 SP7:nodejs22-devel; SUSE Linux Enterprise Server 15 SP7:nodejs22-docs; SUSE Linux Enterprise Server 15 SP7:npm22; SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22; SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel; SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs; SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22; SUSE Linux Enterprise Server for SAP Applications 15 SP7:nodejs22; SUSE Linux Enterprise Server for SAP Applications 15 SP7:nodejs22-devel; SUSE Linux Enterprise Server for SAP Applications 15 SP7:nodejs22-docs; SUSE Linux Enterprise Server for SAP Applications 15 SP7:npm22
    After
    MozillaFirefox as component of SUSE Linux Enterprise Desktop 15 SP7; MozillaFirefox-devel as component of SUSE Linux Enterprise Desktop 15 SP7; MozillaFirefox-translations-common as component of SUSE Linux Enterprise Desktop 15 SP7; MozillaFirefox-translations-other as component of SUSE Linux Enterprise Desktop 15 SP7; MozillaThunderbird as component of SUSE Linux Enterprise Desktop 15 SP7; MozillaThunderbird-translations-common as component of SUSE Linux Enterprise Desktop 15 SP7; MozillaThunderbird-translations-other as component of SUSE Linux Enterprise Desktop 15 SP7; brotli as component of SUSE Linux Enterprise Desktop 15 SP7; ghostscript as component of SUSE Linux Enterprise Desktop 15 SP7; ghostscript-devel as component of SUSE Linux Enterprise Desktop 15 SP7; ghostscript-x11 as component of SUSE Linux Enterprise Desktop 15 SP7; ipmctl as component of SUSE Linux Enterprise Desktop 15 SP7; libbrotli-devel as component of SUSE Linux Enterprise Desktop 15 SP7; libbrotlicommon1 as component of SUSE Linux Enterprise Desktop 15 SP7; libbrotlicommon1-32bit as component of SUSE Linux Enterprise Desktop 15 SP7; libbrotlidec1 as component of SUSE Linux Enterprise Desktop 15 SP7; libbrotlidec1-32bit as component of SUSE Linux Enterprise Desktop 15 SP7; libbrotlienc1 as component of SUSE Linux Enterprise Desktop 15 SP7; libkpathsea6 as component of SUSE Linux Enterprise Desktop 15 SP7; libmozjs-115-0 as component of SUSE Linux Enterprise Desktop 15 SP7; libmozjs-60 as component of SUSE Linux Enterprise Desktop 15 SP7; libptexenc1 as component of SUSE Linux Enterprise Desktop 15 SP7; libsynctex2 as component of SUSE Linux Enterprise Desktop 15 SP7; libtexlua53-5 as component of SUSE Linux Enterprise Desktop 15 SP7; libtexluajit2 as component of SUSE Linux Enterprise Desktop 15 SP7; mozjs115 as component of SUSE Linux Enterprise Desktop 15 SP7; mozjs115-devel as component of SUSE Linux Enterprise Desktop 15 SP7; mozjs60 as component of SUSE Linux Enterprise Desktop 15 SP7; mozjs60-devel as component of SUSE Linux Enterprise Desktop 15 SP7; perl-biber as component of SUSE Linux Enterprise Desktop 15 SP7; and 8981 more
    SUSE Product Security Team ↗
  20. CISA KEV stateCISA KEV now confirms exploitation in the wild.
    Before
    not listed in CISA KEV
    After
    listed in CISA KEV since 2026-10-27
    CISA KEV ↗
  21. Vendor guidanceAuthoritative vendor guidance changed: added remediation: nodejs.org/october-2026-security-releases; removed remediation: github.com/v1.2.7.
    Before
    remediation: github.com/v1.2.7
    After
    remediation: nodejs.org/october-2026-security-releases
    CNA ↗
  22. Vendor guidanceAuthoritative vendor guidance changed: added remediation: github.com/v1.2.7; removed remediation: nodejs.org/october-2026-security-releases.
    Before
    remediation: nodejs.org/october-2026-security-releases
    After
    remediation: github.com/v1.2.7
    CNA ↗
  23. Affected versionsThe structured affected or fixed version information changed.
    Before
    exploit-intelligence/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; istio-proxy-selinux as a component of OpenShift Service Mesh 3; istio-proxy.src as a component of OpenShift Service Mesh 3; ansible-automation-platform-25/controller-rhel8 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-26/controller-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-26/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/controller-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; python3.11-brotli.src as a component of Red Hat Ansible Automation Platform 2; python3.12-brotli.src as a component of Red Hat Ansible Automation Platform 2; python3x-brotli.src as a component of Red Hat Ansible Automation Platform 2; brotli as a component of Red Hat Enterprise Linux 10; brotli-devel as a component of Red Hat Enterprise Linux 10; brotli.src as a component of Red Hat Enterprise Linux 10; firefox as a component of Red Hat Enterprise Linux 10; firefox.src as a component of Red Hat Enterprise Linux 10; libbrotli as a component of Red Hat Enterprise Linux 10; nodejs as a component of Red Hat Enterprise Linux 10; nodejs-devel as a component of Red Hat Enterprise Linux 10; nodejs-docs as a component of Red Hat Enterprise Linux 10; nodejs-full-i18n as a component of Red Hat Enterprise Linux 10; nodejs-libs as a component of Red Hat Enterprise Linux 10; nodejs-npm as a component of Red Hat Enterprise Linux 10; nodejs22.src as a component of Red Hat Enterprise Linux 10; python3-brotli as a component of Red Hat Enterprise Linux 10; thunderbird as a component of Red Hat Enterprise Linux 10; thunderbird.src as a component of Red Hat Enterprise Linux 10; firefox as a component of Red Hat Enterprise Linux 7; firefox.src as a component of Red Hat Enterprise Linux 7; brotli as a component of Red Hat Enterprise Linux 8; and 73 more · Fixed: brotli-0:1.2.1-0.1.hum1@aarch64 as a component of Red Hat Hardened Images; brotli-0:1.2.1-0.1.hum1@s390x as a component of Red Hat Hardened Images; brotli-0:1.2.1-0.1.hum1@src as a component of Red Hat Hardened Images; brotli-0:1.2.1-0.1.hum1@x86_64 as a component of Red Hat Hardened Images; brotli-devel-0:1.2.1-0.1.hum1@aarch64 as a component of Red Hat Hardened Images; brotli-devel-0:1.2.1-0.1.hum1@s390x as a component of Red Hat Hardened Images; brotli-devel-0:1.2.1-0.1.hum1@x86_64 as a component of Red Hat Hardened Images; libbrotli-0:1.2.1-0.1.hum1@aarch64 as a component of Red Hat Hardened Images; libbrotli-0:1.2.1-0.1.hum1@s390x as a component of Red Hat Hardened Images; libbrotli-0:1.2.1-0.1.hum1@x86_64 as a component of Red Hat Hardened Images; python3-brotli-0:1.2.1-0.1.hum1@aarch64 as a component of Red Hat Hardened Images; python3-brotli-0:1.2.1-0.1.hum1@s390x as a component of Red Hat Hardened Images; python3-brotli-0:1.2.1-0.1.hum1@x86_64 as a component of Red Hat Hardened Images
    After
    exploit-intelligence/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; istio-proxy-selinux as a component of OpenShift Service Mesh 3; istio-proxy.src as a component of OpenShift Service Mesh 3; ansible-automation-platform-25/controller-rhel8 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-26/controller-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-26/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/controller-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform/automation-dashboard-rhel9 as a component of Red Hat Ansible Automation Platform 2; python3.12-brotli.src as a component of Red Hat Ansible Automation Platform 2; brotli as a component of Red Hat Enterprise Linux 10; brotli-devel as a component of Red Hat Enterprise Linux 10; brotli.src as a component of Red Hat Enterprise Linux 10; firefox as a component of Red Hat Enterprise Linux 10; firefox.src as a component of Red Hat Enterprise Linux 10; libbrotli as a component of Red Hat Enterprise Linux 10; python3-brotli as a component of Red Hat Enterprise Linux 10; thunderbird as a component of Red Hat Enterprise Linux 10; thunderbird.src as a component of Red Hat Enterprise Linux 10; firefox as a component of Red Hat Enterprise Linux 7; firefox.src as a component of Red Hat Enterprise Linux 7; brotli as a component of Red Hat Enterprise Linux 8; brotli-devel as a component of Red Hat Enterprise Linux 8; brotli.src as a component of Red Hat Enterprise Linux 8; firefox as a component of Red Hat Enterprise Linux 8; firefox.src as a component of Red Hat Enterprise Linux 8; nodejs-devel (nodejs:24) as a component of Red Hat Enterprise Linux 8; nodejs-docs (nodejs:24) as a component of Red Hat Enterprise Linux 8; nodejs-full-i18n (nodejs:24) as a component of Red Hat Enterprise Linux 8; nodejs-libs (nodejs:24) as a component of Red Hat Enterprise Linux 8; and 44 more · Fixed: brotli-0:1.2.1-0.1.hum1@aarch64 as a component of Red Hat Hardened Images; brotli-0:1.2.1-0.1.hum1@s390x as a component of Red Hat Hardened Images; brotli-0:1.2.1-0.1.hum1@src as a component of Red Hat Hardened Images; brotli-0:1.2.1-0.1.hum1@x86_64 as a component of Red Hat Hardened Images; brotli-devel-0:1.2.1-0.1.hum1@aarch64 as a component of Red Hat Hardened Images; brotli-devel-0:1.2.1-0.1.hum1@s390x as a component of Red Hat Hardened Images; brotli-devel-0:1.2.1-0.1.hum1@x86_64 as a component of Red Hat Hardened Images; libbrotli-0:1.2.1-0.1.hum1@aarch64 as a component of Red Hat Hardened Images; libbrotli-0:1.2.1-0.1.hum1@s390x as a component of Red Hat Hardened Images; libbrotli-0:1.2.1-0.1.hum1@x86_64 as a component of Red Hat Hardened Images; python3-brotli-0:1.2.1-0.1.hum1@aarch64 as a component of Red Hat Hardened Images; python3-brotli-0:1.2.1-0.1.hum1@s390x as a component of Red Hat Hardened Images; python3-brotli-0:1.2.1-0.1.hum1@x86_64 as a component of Red Hat Hardened Images
    Red Hat Product Security ↗
  24. Affected versionsThe structured affected or fixed version information changed.
    Before
    exploit-intelligence/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; istio-proxy-selinux as a component of OpenShift Service Mesh 3; istio-proxy.src as a component of OpenShift Service Mesh 3; ansible-automation-platform-25/controller-rhel8 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-26/controller-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-26/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/controller-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; python3.11-brotli.src as a component of Red Hat Ansible Automation Platform 2; python3.12-brotli.src as a component of Red Hat Ansible Automation Platform 2; python3x-brotli.src as a component of Red Hat Ansible Automation Platform 2; brotli as a component of Red Hat Enterprise Linux 10; brotli-devel as a component of Red Hat Enterprise Linux 10; brotli.src as a component of Red Hat Enterprise Linux 10; firefox as a component of Red Hat Enterprise Linux 10; firefox.src as a component of Red Hat Enterprise Linux 10; libbrotli as a component of Red Hat Enterprise Linux 10; python3-brotli as a component of Red Hat Enterprise Linux 10; thunderbird as a component of Red Hat Enterprise Linux 10; thunderbird.src as a component of Red Hat Enterprise Linux 10; firefox as a component of Red Hat Enterprise Linux 7; firefox.src as a component of Red Hat Enterprise Linux 7; brotli as a component of Red Hat Enterprise Linux 8; brotli-devel as a component of Red Hat Enterprise Linux 8; brotli.src as a component of Red Hat Enterprise Linux 8; firefox as a component of Red Hat Enterprise Linux 8; firefox.src as a component of Red Hat Enterprise Linux 8; python3-brotli as a component of Red Hat Enterprise Linux 8; thunderbird as a component of Red Hat Enterprise Linux 8; thunderbird.src as a component of Red Hat Enterprise Linux 8; and 20 more · Fixed: brotli-0:1.2.1-0.1.hum1@aarch64 as a component of Red Hat Hardened Images; brotli-0:1.2.1-0.1.hum1@s390x as a component of Red Hat Hardened Images; brotli-0:1.2.1-0.1.hum1@src as a component of Red Hat Hardened Images; brotli-0:1.2.1-0.1.hum1@x86_64 as a component of Red Hat Hardened Images; brotli-devel-0:1.2.1-0.1.hum1@aarch64 as a component of Red Hat Hardened Images; brotli-devel-0:1.2.1-0.1.hum1@s390x as a component of Red Hat Hardened Images; brotli-devel-0:1.2.1-0.1.hum1@x86_64 as a component of Red Hat Hardened Images; libbrotli-0:1.2.1-0.1.hum1@aarch64 as a component of Red Hat Hardened Images; libbrotli-0:1.2.1-0.1.hum1@s390x as a component of Red Hat Hardened Images; libbrotli-0:1.2.1-0.1.hum1@x86_64 as a component of Red Hat Hardened Images; python3-brotli-0:1.2.1-0.1.hum1@aarch64 as a component of Red Hat Hardened Images; python3-brotli-0:1.2.1-0.1.hum1@s390x as a component of Red Hat Hardened Images; python3-brotli-0:1.2.1-0.1.hum1@x86_64 as a component of Red Hat Hardened Images
    After
    exploit-intelligence/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; istio-proxy-selinux as a component of OpenShift Service Mesh 3; istio-proxy.src as a component of OpenShift Service Mesh 3; ansible-automation-platform-25/controller-rhel8 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-26/controller-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-26/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/controller-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; python3.11-brotli.src as a component of Red Hat Ansible Automation Platform 2; python3.12-brotli.src as a component of Red Hat Ansible Automation Platform 2; python3x-brotli.src as a component of Red Hat Ansible Automation Platform 2; brotli as a component of Red Hat Enterprise Linux 10; brotli-devel as a component of Red Hat Enterprise Linux 10; brotli.src as a component of Red Hat Enterprise Linux 10; firefox as a component of Red Hat Enterprise Linux 10; firefox.src as a component of Red Hat Enterprise Linux 10; libbrotli as a component of Red Hat Enterprise Linux 10; nodejs as a component of Red Hat Enterprise Linux 10; nodejs-devel as a component of Red Hat Enterprise Linux 10; nodejs-docs as a component of Red Hat Enterprise Linux 10; nodejs-full-i18n as a component of Red Hat Enterprise Linux 10; nodejs-libs as a component of Red Hat Enterprise Linux 10; nodejs-npm as a component of Red Hat Enterprise Linux 10; nodejs22.src as a component of Red Hat Enterprise Linux 10; python3-brotli as a component of Red Hat Enterprise Linux 10; thunderbird as a component of Red Hat Enterprise Linux 10; thunderbird.src as a component of Red Hat Enterprise Linux 10; firefox as a component of Red Hat Enterprise Linux 7; firefox.src as a component of Red Hat Enterprise Linux 7; brotli as a component of Red Hat Enterprise Linux 8; and 73 more · Fixed: brotli-0:1.2.1-0.1.hum1@aarch64 as a component of Red Hat Hardened Images; brotli-0:1.2.1-0.1.hum1@s390x as a component of Red Hat Hardened Images; brotli-0:1.2.1-0.1.hum1@src as a component of Red Hat Hardened Images; brotli-0:1.2.1-0.1.hum1@x86_64 as a component of Red Hat Hardened Images; brotli-devel-0:1.2.1-0.1.hum1@aarch64 as a component of Red Hat Hardened Images; brotli-devel-0:1.2.1-0.1.hum1@s390x as a component of Red Hat Hardened Images; brotli-devel-0:1.2.1-0.1.hum1@x86_64 as a component of Red Hat Hardened Images; libbrotli-0:1.2.1-0.1.hum1@aarch64 as a component of Red Hat Hardened Images; libbrotli-0:1.2.1-0.1.hum1@s390x as a component of Red Hat Hardened Images; libbrotli-0:1.2.1-0.1.hum1@x86_64 as a component of Red Hat Hardened Images; python3-brotli-0:1.2.1-0.1.hum1@aarch64 as a component of Red Hat Hardened Images; python3-brotli-0:1.2.1-0.1.hum1@s390x as a component of Red Hat Hardened Images; python3-brotli-0:1.2.1-0.1.hum1@x86_64 as a component of Red Hat Hardened Images
    Red Hat Product Security ↗
  25. Vendor guidanceAuthoritative vendor guidance changed from remediation: suse.com/CVE-2026-111497 to remediation: suse.com/CVE-2026-111497.
    Before
    remediation: suse.com/CVE-2026-111497
    After
    remediation: suse.com/CVE-2026-111497
    SUSE Product Security Team ↗
  26. Remediation statusRemediation status changed from Awaiting fix to Patch available.
    Before
    Awaiting fix
    After
    Patch available
    SUSE Product Security Team ↗
  27. ENISA EUVD mappingEUVD-2026-108169 was added to the official ENISA EUVD mapping for this CVE.
    Before
    not recorded
    After
    {"euvdId":"EUVD-2026-108169"}
    ENISA EUVD ↗
  28. Vendor guidanceAuthoritative vendor guidance changed: removed patch: nodejs.org/october-2026-security-releases.
    Before
    patch: nodejs.org/october-2026-security-releases · remediation: nodejs.org/october-2026-security-releases
    After
    remediation: nodejs.org/october-2026-security-releases
    CNA ↗
  29. Vendor guidanceAuthoritative vendor guidance changed: added patch: nodejs.org/october-2026-security-releases; added remediation: nodejs.org/october-2026-security-releases; removed mitigation: acn.gov.it/node.js-risolte-molteplici-vulnerabilita-1; removed remediation: acn.gov.it/node.js-risolte-molteplici-vulnerabilita-1.
    Before
    mitigation: acn.gov.it/node.js-risolte-molteplici-vulnerabilita-1 · remediation: acn.gov.it/node.js-risolte-molteplici-vulnerabilita-1
    After
    patch: nodejs.org/october-2026-security-releases · remediation: nodejs.org/october-2026-security-releases
    nodejs.org ↗
  30. Affected versionsThe structured affected or fixed version information changed.
    Before
    The authority advisory does not provide a concise affected-product range. · Fixed: The authority publishes remediation guidance. Confirm the exact fixed release in the linked primary advisory.
    After
    Brotli: 1.0.3 < 1.0.10, 1.1.0 < 1.1.1, 1.2.0 < 1.2.1 · Fixed: Update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.
    CNA ↗
  31. Remediation statusRemediation status changed from Mitigation available to Patch available.
    Before
    Mitigation available
    After
    Patch available
    nodejs.org ↗
  32. SeveritySeverity changed from Unknown to Critical.
    Before
    Unknown
    After
    Critical
    CNA ↗
  33. CVSS scoreCVSS score changed from not recorded to 9.2 (CVSS 4.0 · CNA · CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N).
    Before
    not recorded
    After
    9.2 (CVSS 4.0 · CNA · CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)
    CNA ↗
  34. Catalogue recordCVE added to the BlackTree catalogue.
    Official national cybersecurity authority ↗
Material fields only · duplicate refreshes suppressed · history retained for the configured operational retention period
CVE published
Added to CISA KEV
Fixed release or patch reference recorded
ENISA EUVD · EUVD-2026-108169↗Vendor CSAF · Cisco PSIRT · Cisco CISCO-SA-OCT2026-NODE-JS-JJ3SQ19U↗CISA KEV record↗Mitigation reference↗CVE authority or vendor reference↗Official CVE record (CNA and ADP data)↗NVD record↗
Technical terms and abbreviations used in this report
CVE
Common Vulnerabilities and Exposures: the public identifier for one disclosed vulnerability.
CVSS
Common Vulnerability Scoring System: a technical severity framework; it is not patching priority by itself.
EPSS
Exploit Prediction Scoring System: FIRST's estimate of the probability that exploitation activity will be observed in the next 30 days; it is a forecast, not confirmation.
CWE
Common Weakness Enumeration: the standard category describing the underlying software or hardware weakness.
CNA
CVE Numbering Authority: an organisation authorised to assign and publish CVE records.
CISA ADP
Cybersecurity and Infrastructure Security Agency Authorized Data Publisher: structured enrichment added to a CVE record.
NVD
National Vulnerability Database: NIST's enrichment service for CVE records.
CERT / CSIRT
A computer security incident response team that publishes warnings or coordinates incident response.
PoC
Proof of concept: public material that demonstrates or helps reproduce exploitation.
CSAF
Common Security Advisory Framework: a machine-readable format for security advisories.
LoTL
Living off the land: abuse of legitimate tools or system functions during an attack.
Free version - for non-commercial use only.CVE-2026-111497 · cve.blacktree.nl