{"id":"RHSA-2026:87004","summary":"Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update","modified":"2026-11-14T10:02:02Z","published":"2026-11-13T18:46:45Z","upstream":["CVE-2026-102266","CVE-2026-102267","CVE-2026-102271","CVE-2026-102272","CVE-2026-102273","CVE-2026-45820","CVE-2026-87776","CVE-2026-90711","CVE-2026-90959","CVE-2026-94416"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:87004"},{"type":"ARTICLE","url":"https://access.redhat.com/security/updates/classification/#important"},{"type":"ARTICLE","url":"https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6/whats_new-async_updates"},{"type":"ARTICLE","url":"https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6#Upgrade"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2506034"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2531852"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533037"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533602"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2537465"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2542671"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2542687"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2542690"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2542695"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2542697"},{"type":"ADVISORY","url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_87004.json"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-45820"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-45820"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45820"},{"type":"ARTICLE","url":"https://github.com/101arrowz/fflate/blob/f7873560ad229c22c4b23b06c6a3806ffde77569/src/index.ts#L2714"},{"type":"ARTICLE","url":"https://www.npmjs.com/package/fflate"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-87776"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-87776"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87776"},{"type":"ARTICLE","url":"https://cna.openjsf.org/security-advisories.html"},{"type":"ARTICLE","url":"https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-90711"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-90711"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90711"},{"type":"ARTICLE","url":"https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-90959"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-90959"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90959"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-94416"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-94416"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94416"},{"type":"ARTICLE","url":"https://github.com/ansible/ansible.platform/pull/254"},{"type":"ARTICLE","url":"https://github.com/ansible/jewel/pull/235"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-102266"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-102266"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102266"},{"type":"ARTICLE","url":"https://github.com/jpadilla/pyjwt/commit/f91ed44dd65baaf457f4b3353ed35e98a753934c"},{"type":"ARTICLE","url":"https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"},{"type":"ARTICLE","url":"https://github.com/jpadilla/pyjwt/security/advisories/GHSA-9j54-fg26-wv3r"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-102267"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-102267"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102267"},{"type":"ARTICLE","url":"https://github.com/jpadilla/pyjwt/commit/0a795b8e1f6ef08f634aa7086fc41cc6d5ce3e56"},{"type":"ARTICLE","url":"https://github.com/jpadilla/pyjwt/security/advisories/GHSA-9v7f-9g4p-ffgj"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-102271"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-102271"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102271"},{"type":"ARTICLE","url":"https://github.com/jpadilla/pyjwt/commit/2798504fa2663364573cf2d1043d8d7fef389499"},{"type":"ARTICLE","url":"https://github.com/jpadilla/pyjwt/security/advisories/GHSA-p4g4-x82p-q773"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-102272"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-102272"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102272"},{"type":"ARTICLE","url":"https://github.com/jpadilla/pyjwt/commit/180783930de91876bc0d601f826a1f2956057291"},{"type":"ARTICLE","url":"https://github.com/jpadilla/pyjwt/security/advisories/GHSA-r6x4-923q-g947"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-102273"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-102273"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102273"},{"type":"ARTICLE","url":"https://github.com/jpadilla/pyjwt/commit/801cd128528c62d9b23fcd161d1a2e1c17982f95"},{"type":"ARTICLE","url":"https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w2cx-738m-mc7w"}],"affected":[{"package":{"name":"automation-platform-ui","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","purl":"pkg:rpm/redhat/automation-platform-ui"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.15-1.el9ap"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:87004.json"}},{"package":{"name":"python3.12-pulpcore","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","purl":"pkg:rpm/redhat/python3.12-pulpcore"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.49.71-1.el9ap"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:87004.json"}},{"package":{"name":"automation-gateway-server","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","purl":"pkg:rpm/redhat/automation-gateway-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.20261019-1.el9ap"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:87004.json"}},{"package":{"name":"python3.12-pyjwt+crypto","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","purl":"pkg:rpm/redhat/python3.12-pyjwt%2Bcrypto"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.0-1.el9ap"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:87004.json"}},{"package":{"name":"python3.12-pyjwt","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","purl":"pkg:rpm/redhat/python3.12-pyjwt"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.0-1.el9ap"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:87004.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"}]}