Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update

🔗 CVE IDs covered (2)

📋 Description

🎯 Affected products107

• Red Hat Ansible Automation Platform 2.5
• registry.redhat.io/ansible-automation-platform-25/aap-must-gather-rhel8@sha256:16473130880da08c44ac5bf9c179c80ba401ec71bb52ed46a03e6c6745e5088b_amd64 as a component of Red Hat Ansible Automation Platform 2.5
• registry.redhat.io/ansible-automation-platform-25/aap-must-gather-rhel8@sha256:1fd7386ecca4f28b747a5298e1d60403667b98ea822d6b107a5c48422761fb71_arm64 as a component of Red Hat Ansible Automation Platform 2.5
• registry.redhat.io/ansible-automation-platform-25/aap-must-gather-rhel8@sha256:2125d40c8cc202ef5a5d45a8f3625fc28a92022832789e8df117338367dbfbd3_s390x as a component of Red Hat Ansible Automation Platform 2.5
• registry.redhat.io/ansible-automation-platform-25/aap-must-gather-rhel8@sha256:604a2d04cd9252eea50d8c322a804dc6d576580927ad50d374e3b7bbb7095131_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
• registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel8@sha256:217665da1aa6030082a94c8f3161e9b42f7ee304435bae229dc43273a18388a8_arm64 as a component of Red Hat Ansible Automation Platform 2.5
• registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel8@sha256:5fcd52fb63546d20e0f1041a490e9afad50c4ef1c53cdb25e4cd21a045d6bb86_s390x as a component of Red Hat Ansible Automation Platform 2.5
• registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel8@sha256:726434bc8c36915e861fdf7631ef971e1b10a8f6bef8d26a5c17ef2f229d4678_amd64 as a component of Red Hat Ansible Automation Platform 2.5
• registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel8@sha256:fbc4cf5b36da92f562871bfda55caab0ec22e093879f4f6d50cb2f688e0a2838_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
• registry.redhat.io/ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:41092630c336354cacf57ff88af6805a2bc30baf58b49586667e4cd7f00046cf_arm64 as a component of Red Hat Ansible Automation Platform 2.5
• registry.redhat.io/ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:73eb29c6e71d349e1759cbfeb23074474ff0ae6502695f6b3dbfec87be8a3220_amd64 as a component of Red Hat Ansible Automation Platform 2.5
• registry.redhat.io/ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:b26956e10ed61113d04e0db688d6d4568718ada81010a5a03e6605a06d8c9776_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
• registry.redhat.io/ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:b9b8b0e3148aca6c764748b998edb702e1a9c01332e87848ec5cb15ace5fdc85_s390x as a component of Red Hat Ansible Automation Platform 2.5
• registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel8@sha256:1c3ae4e82271843a3295985d139dd6333bb7a89cc210af47e8db2634fe20b2fa_arm64 as a component of Red Hat Ansible Automation Platform 2.5
• registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel8@sha256:22c9c13ef8191bc753f9a7985a42c50d8a48de53d1551340085bb35184a5a53f_s390x as a component of Red Hat Ansible Automation Platform 2.5
• registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel8@sha256:494c613b2ddaeb0b91dd9e564843198a827acfdef740c29399381309f4831e3c_amd64 as a component of Red Hat Ansible Automation Platform 2.5
• registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel8@sha256:9a8388938164773811f9623779563d3d912a98c1981df057431698765440467f_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
• registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel8@sha256:38c41b65f1d1f438d93508d9d933d3c199f065f8986ca0587bb72d8d84734a79_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
• registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel8@sha256:3f3f945bcf7295d0f5386e86ff2a2248cd58efc5868597e942f9a3a48da498d3_arm64 as a component of Red Hat Ansible Automation Platform 2.5
• registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel8@sha256:882479ec5c8e06ee52360d11af2154278597836c56964d9c1a4d4510aa32dd4c_s390x as a component of Red Hat Ansible Automation Platform 2.5
• registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel8@sha256:8dce1e40b61671bfacb6422dff9c2f4837adadfdfeaaf315aad337da1cc83427_amd64 as a component of Red Hat Ansible Automation Platform 2.5
• registry.redhat.io/ansible-automation-platform-25/controller-rhel8-operator@sha256:315d3dac3f5795a767c89f5c59efc9908cae9d8742a432db105dc4913e91dd3b_arm64 as a component of Red Hat Ansible Automation Platform 2.5
• registry.redhat.io/ansible-automation-platform-25/controller-rhel8-operator@sha256:35af26339ebc7dcad99f0cd7e9648db7daaeb268252b2c7a583838187cdd62f5_amd64 as a component of Red Hat Ansible Automation Platform 2.5
• registry.redhat.io/ansible-automation-platform-25/controller-rhel8-operator@sha256:456d699c5103cb04148997c588d31b617dd818e81812632080cc34ad58d2511f_s390x as a component of Red Hat Ansible Automation Platform 2.5
• registry.redhat.io/ansible-automation-platform-25/controller-rhel8-operator@sha256:4bfc53a41d7c03499a34d40623688a31d8d2e3945f7e4aea63710805ee594ed7_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
• registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:03b33afcdee237e322ef40b7146123cee48c4173da19c1c4de43f44602c1e2c7_s390x as a component of Red Hat Ansible Automation Platform 2.5
• registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:518adc0da7bfff172339ef9738afab1c08c43e6b7bc2d65b0c9eb69ca19d0f08_amd64 as a component of Red Hat Ansible Automation Platform 2.5
• registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:e107016c68ad0d5d27176ef8062e9041d66200d3069e082ffca014dd7ec25c20_arm64 as a component of Red Hat Ansible Automation Platform 2.5
• registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:ff6d62f72b2fcca55fdd1f194189084383784b2ee301032cf6d9c6a5cbf82bd2_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
• registry.redhat.io/ansible-automation-platform-25/de-minimal-rhel8@sha256:0c15d930765b53baca4385a2003071df451f63626a519f193e545d9f70f9d7f1_s390x as a component of Red Hat Ansible Automation Platform 2.5
• +77 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5#Upgrading Workaround: Defense-in-depth practices such as using RBAC to enforce the principle of least privilege and careful token management are essential to reduce the scope of impact. See this KCS article for additional details and strategies. https://access.redhat.com/articles/7136004

🔗 References (6)

• selfhttps://access.redhat.com/errata/RHSA-2026:0409
• externalhttps://access.redhat.com/security/cve/CVE-2025-14025
• externalhttps://access.redhat.com/security/cve/CVE-2025-68664
• externalhttps://access.redhat.com/security/updates/classification/
• externalhttps://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/release_notes/patch_releases
• selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0409.json