RHSA-2026:1609HighCVSS 7.5

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update

Published
January 30, 2026
Last Modified
July 27, 2026

🔗 CVE IDs covered (4)

CVE-2025-66471 →CVE-2025-69223 →CVE-2026-21441 →CVE-2025-64460 →

📋 Description

CVE-2025-64460 — Django: Django: Algorithmic complexity in XML Deserializer leads to denial of service CVE-2025-66471 — urllib3: urllib3 Streaming API improperly handles highly compressed data CVE-2025-69223 — aiohttp: AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb CVE-2026-21441 — urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)

🎯 Affected products107

  • Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/aap-must-gather-rhel8@sha256:3662747fd7a3f9474323c8e7b500105189deb789390e7ecc3faf11c1241398b9_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/aap-must-gather-rhel8@sha256:4b5b05a5682f0cf6341f78fc452a5d01533b998cc5030eb75ecefc92f4a56093_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/aap-must-gather-rhel8@sha256:952db89555352927633c2760bc33e1cdceff03f726fa1105a39695327ed0ec62_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/aap-must-gather-rhel8@sha256:9e42569e58818dc161b47ea52f69db8e2b1deb0b2d9148c80115886fbd9b5e1f_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel8@sha256:27b536af2fb6a59bb231e6fe2565c4e2cdb9a8a57a2f20e3df9f718ff2743410_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel8@sha256:663afa3e484bf96c317ad726d4ae730de9b3309f4b9ca3e3631d8502d193e86a_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel8@sha256:9a886932439afeaf87d5ba5aa8160c63a7d0820d153e8b9bffb3dfa1f9cc707a_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel8@sha256:d175d40b7b8329bc70faba83dae7b6c5e63cc1640c026ffcdb01e223fc842b6b_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:0c8d36134f8170232175b725604f5004193ab30e4245b332d28da6f592e413b0_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:4a71cdd7352df8a58ee69deb9a916d6e313fd2c642c92ecde2b90269b797a095_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:7740e771ac3997e076d34c653bd12bdd1f3be7800d51d8515db012a09a6bf0ee_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:bd08266502561285eaf83351c2811ac2c2fbb8e821a7de40a6f96355ea1140ed_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel8@sha256:90254224eb37b43c876c07126da6ea89144e1820cbcdf1ec5e749c59b80e5449_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel8@sha256:94ca70f95566a1a69e905fb9c266e8b801510da409711819c988ece6470ce6da_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel8@sha256:addd6c376dbe3f223eba740be78fa719c911a09f8a4b2c30d064467ed1a59ef9_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel8@sha256:c666a6fa9f7d76039cc26c3b1bc475cf8453cd05a803df262106ada9447dbc94_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel8@sha256:2aacd8cbd68d1dd9a512828dc07b55e01361fa966dbe548493f71a95279d76d9_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel8@sha256:69d99ea7d6d46c2b1c33563cdff2d3ac9fc57b4625f603a07ef482468fbb6fef_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel8@sha256:a1b63febc4e74e8377b59d21bbf69b555b39a6975a1d3e1e74986a07d25fb8db_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel8@sha256:b7013dcd6a0d85f2e51548aee48334ced018f276ba9e71f271e2eca4ce5dc9c0_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8-operator@sha256:1440f51eeae2b2e49f815889c7d28de38f8dac986c04e1e3486d9e3c25abfdeb_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8-operator@sha256:2e57ccd378d6b9af626b0d115610f65a099cb234cf7e9c140d3fa6b37d682a96_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8-operator@sha256:a27fa879223325c52a519d8b08866eadc3eb5a9da2e2df1d99deec66d818a96b_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8-operator@sha256:b805cb82d9d5e88afa403afefcb2442cd32be289897b77e454e31fcfd5ec634d_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:c44f34991963fc565a108a54cc50003f77e024761f9ba76149c3c18186be4798_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:c9ef2966e55a6e5ccde035ad98b79c66660951e2f7002da9a5817b10ab863ee5_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:d615f55b96ae5abf16d78672063c6f42f597ff8d3af8e526627558858d08a060_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:e627268fea858240171a3330fdaee5c952500b33e04584e31848c615b3e1826f_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/de-minimal-rhel8@sha256:10232eb059cce71243b8e7115b46b15619accb1c04ef3605ba49d32e36fecfc6_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • +77 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5#Upgrading Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (8)