RHSA-2025:16514HighCVSS 8.2

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update

Published
September 23, 2025
Last Modified
August 15, 2026

🔗 CVE IDs covered (3)

CVE-2025-5302 →CVE-2025-6984 →CVE-2025-57833 →

📋 Description

CVE-2025-5302 — llama_index: Denial of Service (DOS) in JSONReader in run-llama/llama_index CVE-2025-6984 — langchain-community: Langchain-community insecure XML parsing CVE-2025-57833 — django: Django SQL injection in FilteredRelation column aliases

🎯 Affected products146

  • Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/aap-cloud-billing-rhel8-operator@sha256:65320b1ecc490981930216b3afce17c9dc4deb701bc770268af31fa3e5bf1b22_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-cloud-billing-rhel8@sha256:cb9c2e562e98928d0e76cc0129b738c917cada0adbe746a8c475af9fb173127a_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-cloud-metrics-collector-rhel8@sha256:c037109b1965c8059a9b2aecc167b2fb86218f822450f02b39e27cfc4ab5ce2f_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-cloud-ui-rhel8-operator@sha256:52339fe4f4c2ebd80f472ec6949a94761f7da81a80658df3dae17308c0cc07ae_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-cloud-ui-rhel8@sha256:fa942d8f64d6afe62dbebd19aa712c771775758cfab38c77369959bfe60f522e_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-must-gather-rhel8@sha256:343c9c46632e8b5a322f902cacfe6928755c13832f617ba4dcab619f1fe1fe39_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-must-gather-rhel8@sha256:4284353f42b17318ab3797298d10a999145d5abb5b681c0f42508c1da51033a3_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-must-gather-rhel8@sha256:879b1593bc364ade7622856d3abaf8d0373356841bb0b9532409d1ea564a0d67_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-must-gather-rhel8@sha256:b923aabbf3949c3b73a82d3b54ccd88724e87e7596b27485efac44b8453a59aa_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-builder-rhel8@sha256:14579dbcd53d0c8c8c68fe1a0e0298eda2c06f10ca3f9ff6980d076f300823c4_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-builder-rhel8@sha256:41d421d839fec0df9486fd2df214c026d80342e1e9590189ec91cfc23118c376_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-builder-rhel8@sha256:88d30f7fa885e7c454c9c9a8aecf8e2912ff65dcb82c3a0b29a2f83f536267ea_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-builder-rhel8@sha256:91ff45664b5e3b2c89538cf0e5177af7c05099a90f611ecc6881f94b5abfba3a_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-builder-rhel9@sha256:0ef12b5e400882bd9c520829eb071a354c27a4ba3c725e70fdafa5400b86ca16_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-builder-rhel9@sha256:2d3676fdd2081dab245c4f3e84821b29b0f0e04c21b84c2eaed683c4b19e2336_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-builder-rhel9@sha256:491aad212ab532c68b4a77a82c3af94a8627d8d45390bc5422bf36d6484a8879_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-builder-rhel9@sha256:a659193c0c004f5a1d096eab568fb645969da82dd3714e6baafba4719db5d911_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:492322befc10db0fb42d179af1f187dddde72acd2effc96c65f235aedd3223fa_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:5498974e26eb87b82aaa9ae78f565c3d4813902fa42c27b26d351f8154300792_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:a4019ab55f8fcf003cbe58aabd452bd6c903b906c9fded731da3d8ffbed3a039_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:b75a8b76c5c68d7465e58a42eb878e35d7caae3eb4477344c42b79eefe79ba93_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-python-base-rhel8@sha256:1a45953b806df96f5c998875332ba64ab8efbd581379c0146739042c06a60b1f_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-python-base-rhel8@sha256:8d29b7001fd31dbc0a31aa000e5df7800d6f0d546d511534a08bdca4b2b40455_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-python-base-rhel8@sha256:8e63c1dd37259a2b778bdf9d08ddf07f9e3c288364e15457946cb337dfe86f7d_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-python-base-rhel8@sha256:c702f79fd42dbc7ca0427daa786d153c2b633a055e7325e13db19ed98761717f_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-python-base-rhel9@sha256:45d064db3a89d12a17b0122d33f7e1e900780217715ffc0b6034cd90e41fa843_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-python-base-rhel9@sha256:5b9664b9cc6e870223d346d3195d94981f8dcae12373468b96b84aa3372a00d3_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-python-base-rhel9@sha256:5f0ffcd29f3282d2ec785c2f4801914d8b74a4e4aa59e4ea4baaaa07970a279d_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • +116 more not shown

✅ Remediation

Red Hat Ansible Automation Platform Workaround: There is currently no available mitigation for this flaw. However, upgrading the llama_index package, once available, to the version 0.12.38 addresses this issue. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (6)