RHSA-2026:1599HighCVSS 7.5

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Container Release Update

Published
January 29, 2026
Last Modified
July 27, 2026

🔗 CVE IDs covered (4)

CVE-2026-21441 →CVE-2025-64460 →CVE-2025-66471 →CVE-2025-69223 →

📋 Description

CVE-2025-64460 — Django: Django: Algorithmic complexity in XML Deserializer leads to denial of service CVE-2025-66471 — urllib3: urllib3 Streaming API improperly handles highly compressed data CVE-2025-69223 — aiohttp: AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb CVE-2026-21441 — urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)

🎯 Affected products83

  • Red Hat Ansible Automation Platform 2.4
  • registry.redhat.io/ansible-automation-platform-24/aap-must-gather-rhel8@sha256:3411783ef3c7fc351658533d2cc1a4b7b0908356c056933463396054ed4281b5_amd64 as a component of Red Hat Ansible Automation Platform 2.4
  • registry.redhat.io/ansible-automation-platform-24/aap-must-gather-rhel8@sha256:6fde987c90bc20e258499da0616030b53f71d1ff77d0d154224c789a433341dc_arm64 as a component of Red Hat Ansible Automation Platform 2.4
  • registry.redhat.io/ansible-automation-platform-24/aap-must-gather-rhel8@sha256:93ac45b7b03446f7a357f4fabf330368d927e5a167f8fc02cef07b81cc02cf39_s390x as a component of Red Hat Ansible Automation Platform 2.4
  • registry.redhat.io/ansible-automation-platform-24/aap-must-gather-rhel8@sha256:bbf7ed6e4f3cf725895c44a3f225bdb0a38dd646762a400bef8cb0719162d606_ppc64le as a component of Red Hat Ansible Automation Platform 2.4
  • registry.redhat.io/ansible-automation-platform-24/ansible-builder-rhel8@sha256:40e408e5ba1ffc519d2c63d4575859b6f16721a61d1c7ea1a4615cbd7138ce19_ppc64le as a component of Red Hat Ansible Automation Platform 2.4
  • registry.redhat.io/ansible-automation-platform-24/ansible-builder-rhel8@sha256:48cb414b4513da45cb37248df2037592ad6f635442ff54996add26f500f27a63_s390x as a component of Red Hat Ansible Automation Platform 2.4
  • registry.redhat.io/ansible-automation-platform-24/ansible-builder-rhel8@sha256:a49b1f6d5f6db9f17f4ed2068fec3c735ba0d44f32546ba401c646e392436e52_arm64 as a component of Red Hat Ansible Automation Platform 2.4
  • registry.redhat.io/ansible-automation-platform-24/ansible-builder-rhel8@sha256:c5f6b2edaa4abf71b7cba93f7932f83e5427128842dcf16336ca75ff9b32d478_amd64 as a component of Red Hat Ansible Automation Platform 2.4
  • registry.redhat.io/ansible-automation-platform-24/ansible-python-base-rhel8@sha256:0ddbea5832402dbe5a29bfbce6b2f4c51dead6f2f9249974c4462bbce40a2688_s390x as a component of Red Hat Ansible Automation Platform 2.4
  • registry.redhat.io/ansible-automation-platform-24/ansible-python-base-rhel8@sha256:6e827c869c0f6dd3ee6c2b78bcd7990d0da235811c9464f9a4892484c593d9ad_ppc64le as a component of Red Hat Ansible Automation Platform 2.4
  • registry.redhat.io/ansible-automation-platform-24/ansible-python-base-rhel8@sha256:8e8773c54402d6d4086a9ddd1e01c75bcd9bbd39ca2e70468dba21ada2d9e0d3_arm64 as a component of Red Hat Ansible Automation Platform 2.4
  • registry.redhat.io/ansible-automation-platform-24/ansible-python-base-rhel8@sha256:91cb684e6bca08d59967f635b3e6fef4078551c2ac4d4d8e014ef9a232382129_amd64 as a component of Red Hat Ansible Automation Platform 2.4
  • registry.redhat.io/ansible-automation-platform-24/ansible-python-toolkit-rhel8@sha256:845d1eca9b17dc7f9c3a58371ccef094aa5a9206b14b0a87f56b76ae05e07e6f_s390x as a component of Red Hat Ansible Automation Platform 2.4
  • registry.redhat.io/ansible-automation-platform-24/ansible-python-toolkit-rhel8@sha256:8767b36674955a708642227159d4e199cb3f1f2abe7ad67b362d50f682ab9919_ppc64le as a component of Red Hat Ansible Automation Platform 2.4
  • registry.redhat.io/ansible-automation-platform-24/ansible-python-toolkit-rhel8@sha256:ac1a2c9048e13533ed91c7a880aac3bb289457a404763e77b495605b00fc43f8_amd64 as a component of Red Hat Ansible Automation Platform 2.4
  • registry.redhat.io/ansible-automation-platform-24/ansible-python-toolkit-rhel8@sha256:e776eb31366683f77aa73870c8f543903e7c1e76a4ae447d690fcc0764e40bcc_arm64 as a component of Red Hat Ansible Automation Platform 2.4
  • registry.redhat.io/ansible-automation-platform-24/controller-rhel8-operator@sha256:1f6a726798ac012051d0250fcea1b8dbe0efe8c39307b741727e1616a6b22516_ppc64le as a component of Red Hat Ansible Automation Platform 2.4
  • registry.redhat.io/ansible-automation-platform-24/controller-rhel8-operator@sha256:2e76561fec17c2ec493abe95b40609df171ad6368a84f64570b1338cc242185f_amd64 as a component of Red Hat Ansible Automation Platform 2.4
  • registry.redhat.io/ansible-automation-platform-24/controller-rhel8-operator@sha256:c20c912fcfd5f9f46eddc8989b196e0c36f67eceac32341441d33abebcfb2a1a_s390x as a component of Red Hat Ansible Automation Platform 2.4
  • registry.redhat.io/ansible-automation-platform-24/controller-rhel8-operator@sha256:cf3f620786c2a5e3135d51b3d1d51a390966309cc1ab5c029afa56805e8c8807_arm64 as a component of Red Hat Ansible Automation Platform 2.4
  • registry.redhat.io/ansible-automation-platform-24/controller-rhel8@sha256:059a742329324ad0a6674bb63397958467cb2f4853eb12f02754d44689554922_ppc64le as a component of Red Hat Ansible Automation Platform 2.4
  • registry.redhat.io/ansible-automation-platform-24/controller-rhel8@sha256:37957b7b5eee1bc4a128974f3bfc0e6d31f49c457b50140b361b981626d8c0af_s390x as a component of Red Hat Ansible Automation Platform 2.4
  • registry.redhat.io/ansible-automation-platform-24/controller-rhel8@sha256:59ed853e148efffa6ef7b832c29dc0b58fc8d5d2915784548ce4985ed02c8de2_amd64 as a component of Red Hat Ansible Automation Platform 2.4
  • registry.redhat.io/ansible-automation-platform-24/controller-rhel8@sha256:6407934968d4a6b83164a2d11870e46ab781c14445ab809b55acb9ce32b3a450_arm64 as a component of Red Hat Ansible Automation Platform 2.4
  • registry.redhat.io/ansible-automation-platform-24/de-minimal-rhel8@sha256:4eb2242f26c50ba499969adfac3c38c3a1eddc50a500b9f93dd1afb8534f02f2_ppc64le as a component of Red Hat Ansible Automation Platform 2.4
  • registry.redhat.io/ansible-automation-platform-24/de-minimal-rhel8@sha256:626d371f365a5f82b7d34e6434a347ddc16e293c9c84362d0a3a276498ac2198_s390x as a component of Red Hat Ansible Automation Platform 2.4
  • registry.redhat.io/ansible-automation-platform-24/de-minimal-rhel8@sha256:6bd3c1e0cd357b063ec8af4d384abdbec2b4944fd195ef4da23c2a9cfa07d468_amd64 as a component of Red Hat Ansible Automation Platform 2.4
  • registry.redhat.io/ansible-automation-platform-24/de-minimal-rhel8@sha256:c7fffa61d87acf93f89f3701f9c5ef26675a8f6ed530142ad38ee52176fe6177_arm64 as a component of Red Hat Ansible Automation Platform 2.4
  • registry.redhat.io/ansible-automation-platform-24/de-supported-rhel8@sha256:10aea094099d5830aef2e7c4fe8a228b66d9fe8fba6c8f53455604beaded2f3c_arm64 as a component of Red Hat Ansible Automation Platform 2.4
  • +53 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.4#Installation%20and%20upgrade Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (8)