RHSA-2026:1596HighCVSS 8.3

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Container Release Update

Published
January 29, 2026
Last Modified
July 27, 2026

🔗 CVE IDs covered (8)

CVE-2025-64459 →CVE-2025-66031 →CVE-2025-66416 →CVE-2025-66471 →CVE-2025-69223 →CVE-2026-21441 →CVE-2025-15284 →CVE-2025-62706 →

📋 Description

CVE-2025-15284 — qs: qs: Denial of Service via improper input validation in array parsing CVE-2025-62706 — authlib: Authlib : JWE zip=DEF decompression bomb enables DoS CVE-2025-64459 — django: Django SQL injection CVE-2025-66031 — node-forge: node-forge ASN.1 Unbounded Recursion CVE-2025-66416 — mcp: DNS Rebinding Protection Disabled by Default in Model Context Protocol Python SDK CVE-2025-66471 — urllib3: urllib3 Streaming API improperly handles highly compressed data CVE-2025-69223 — aiohttp: AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb CVE-2026-21441 — urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)

🎯 Affected products107

  • Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:25a6efd0b0ffea2e71c9445b5182e573bfffd97eaa23524f4b68d5c607059996_s390x as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:64aac5689f60cbaec481e0555a578900d3e6eec1ce88383e99e26a326d7f4862_ppc64le as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:b6e302fce15818440e31111a18acbeac9b3c52d7f4a30093cb40a16f6bd8913c_amd64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:df7f3900ef9a956a086dabe8993c25980d49a289d38083abd7a34e5f80a20373_arm64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:25a43fd175bcf1ac97874ada6616f7bbdcc8b4e320e0d05761de7c0a55d8d87c_arm64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:6f8e6da5a073c87f19f299e056336e0ae2987a8c0347f65384829b8f4ce9e80c_s390x as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:d55b1eaa137dc27cf655ba161f3728954c93708f31096f4d7bec74bc443a5d62_amd64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:fabb3773554a200ec6bf7b1ce385a478f5412e97a0e50ef312f69ac7c98a4c68_ppc64le as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:00dd5ef9734ae5fd6bf02ea9c0082be429e7001be8c89848bf2ee1b96f7cbe00_amd64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:62629f3ff53f78d962960f108bda5107e4a8475a66d918d3fce7269e22e8d76b_s390x as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:635caa01e9609aec3a9e55438d2881863b31d83ad8b9fec50503332e4479d057_ppc64le as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:f1eb029e6a3cd2baf020e36d0bb35d2c3e34cf3bfc90dd4863c2647fab1d5d26_arm64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:21c1fc9587302a43e56a3a54287a9b8e0bf785984f0973343da6a59ac688a6b2_ppc64le as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:6b07ed2196c4b51752054682b678b1769b3e63efae0e29dc798b44543f4408f6_s390x as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:6f407a8a50253d1d86530fa2f7ed45fe01d9f0723f8db0d666012d7be282d4ba_amd64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:cef9ad82fe982c80adbb7cf096ebb32dc69ad5a8428355a2e798abbc7d3940b2_arm64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:351a42dbcf06a2512e36799930cc4b44ed176f088a5d65ab9cc373f5ba0aa9a2_arm64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:4b8e801c5a11c97202e4415fbaf65cf2a3351bd6c7368bc492c01f75285f8d9e_ppc64le as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:a567e651e4c79cff2462d3b69edcdbb2a50da4b4fbd9f1f3cc3f2dc93abc64b6_s390x as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:bb334abcc74bbebff0442393d370d7a4990097b275cf46761933a7fd61d94c87_amd64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:7f64dd39779023cd008c3237b60b419821985d658d24429b92070db9224b2629_amd64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:c4cf08cdbba3e616e2453f124ce11ebb72653e0de6a780b4f68307c90cda342d_ppc64le as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:d927536428dd9fc5e0110e2edf0678bce6ae803818851e9f3c6db4b2c1ed1b53_arm64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:f0cdeba4cbbb214e6706c95328b304f0d08e33e4ebf654c8861f20bd6f16359b_s390x as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:1494d1eb6aeb2b180d7833f4b4ade9f0bc945b995ffbd2378256919b0704c2b4_amd64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:1dd6b6b9d9426175830de6066033115287ec259d118d5214582730209f3b3e63_arm64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:b047748fdd4411af0807776e0765f76bc3065adc16187af5ae7e43cf980842bc_ppc64le as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:da951e7340094c17b6d359efc8d1e4591a9694a606cc16d007fae7e1abc95e8b_s390x as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:0aa678bfd5ae3650bd25e90b307dd251b3d5e56c700887c8f871301a9947330c_s390x as a component of Red Hat Ansible Automation Platform 2.6
  • +77 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6#Upgrade Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (12)