RHSA-2025:23133HighCVSS 8.3

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Container Release Update

Published
December 11, 2025
Last Modified
November 12, 2026

🔗 CVE IDs covered (2)

📋 Description

CVE-2025-62727 — starlette: Starlette DoS via Range header merging CVE-2025-64459 — django: Django SQL injection

🎯 Affected products107

  • Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:2b02bdcbbbee80fd7c49d31b50e847f5b95e727eb91f0ef164c65269aae62951_ppc64le as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:64950d38f0a81f6ef42cbf884c74cd98c353e70bf7954a94e87598033a02e518_s390x as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:7b70539e52abefa02678cfb8d815158c7bbd22a423eca681cd261bc28114ccec_amd64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:d0c5b1648b292cfa855e6f76adafd37491a0394d50a0cb3f8b8bd4be8c9139d0_arm64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:6c5a5f7468637341ac53e4e78d6ebd82174c30d0f9f66890da4ba71f899cbbf3_ppc64le as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:7115e0e7527a7a553525f096e26d4aee26484f63b2390bca117918f3f4524196_arm64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:7d07b590d053759e6ff51f3fbbd2d0d0313dc76e0e0ce9448c12b02548ccb304_amd64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:8c88ee7ad45460990b88ef79b1c4d5896ae2909ba7532ca571fac3da60f13aba_s390x as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:0bf05df209cffc8578ffb60f794c7390eb507833ab59c96ffe5055ad67e2b525_amd64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:29f3a5feedd7fa40358fd2a79a426237e4d3800ea3bd3e665ee38f123511bfa5_arm64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:6719fb32f7431064464eb1fc8a9b26e7757dda7476a2424a02443c98d12a7103_s390x as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:7e0ea08b9625440cce7cb3d470c30a89e7c6ef921fe3ff62c609362f54f50808_ppc64le as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:2ee0c0127ac2e6e17d3f6d8e8730b858f9f9ed6db63b08e1aa288040c47c930a_amd64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:37296d516bb32a3d7896bf418a1ff68e82dabaf5f29eb3099752a1ccb7448b54_arm64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:71f7a31ee803293a0f5a4ad6cd6d8c036c6578650675dd90c5ada71381a8944a_s390x as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:d7086d8bff9a69646a4050f723afee23103b0791afcffd341fcc16ab8d2cdbaa_ppc64le as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:4c7528d36ee6d44f72f22f4c1b00b0184bf69471ade27b01585421bd088da619_arm64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:5d134d52c15baff58a328d0daa92e3c4d4beefe41d839ddb1ad99d7348dd3b79_amd64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:5dd5aa1fb6108682b7620e7ca645d50cd4f72b31f235fd2fba7af96205f13695_ppc64le as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:c2f521a64da99acb6aa8d33e5f7c4857fba13c15bb0c517db459f01883d48280_s390x as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:05cf2dd533515929016f23e03000a2a89abc6b7de7777bfb80db834e5facd34f_s390x as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:4237dd7463ecfe7a5193eadb81319e3771a1a02c441d25d010e88352c26e6a33_arm64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:d5fd70285f97f714c3c8e6d35e51d57e8332934b3c2ce8f63b1ba0262a4245ee_ppc64le as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:d6075fdd6f92ccea194af8fbf5a44e3b36e13d715a5360f626b510cd370090ac_amd64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:8b82b2dcf6025d6bf8fd88f68c750bca858fc85286db1dace41429906e7a83ac_arm64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:a9c209c0a01a2db271948202537c3a992980dd8c070d06324262d7c9106fd980_amd64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:bffd55f3fdb0199b961230ec1a72823068573f00ef247c95eeacf63d90ba3917_s390x as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:cb5c4cbfb69b12c6fe4e4be4445c93af88f7283e5a0a00e79307cf10e3c384c5_ppc64le as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:0183a7211f1039a06351bf12bafcaa706f633098bdb17374696f3d6f5ecbe6b5_amd64 as a component of Red Hat Ansible Automation Platform 2.6
  • +77 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6#Upgrading Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (6)