RHSA-2025:18984HighCVSS 8.8

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update

Published
October 22, 2025
Last Modified
August 15, 2026

🔗 CVE IDs covered (4)

CVE-2025-59681 →CVE-2025-59682 →CVE-2025-6985 →CVE-2025-7647 →

📋 Description

CVE-2025-6985 — langchain-text-splitters: XXE Vulnerability in langchain-text-splitters CVE-2025-7647 — llama-index-core: Insecure Temporary File Handling in run-llama/llama_index CVE-2025-59681 — django: Potential SQL injection in QuerySet.annotate(), alias(), aggregate(), and extra() on MySQL and MariaDB1 CVE-2025-59682 — django: Potential partial directory-traversal via archive.extract()

🎯 Affected products146

  • Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/aap-cloud-billing-rhel8-operator@sha256:e79db40abedb3a71462d0c2a4935d9e4dcb37caf146a1baf16fef866865f37ac_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-cloud-billing-rhel8@sha256:29f35764429050a5e4a4dd4cd6cb3ff837c5e57e149f8ec11b69a172e8b3ece9_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-cloud-metrics-collector-rhel8@sha256:3709741724b71bb458dc2d9c9e838142e218d07dc5831c4a2fa725c273377aaa_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-cloud-ui-rhel8-operator@sha256:e4b53aec81a5e2c4fd9866e599b7f2ccb0c9bd3429ce142ee5655e83ad000f3d_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-cloud-ui-rhel8@sha256:44624eac1c25c145dc873d3f23816121e088247fafb9acf51615a181042bfea5_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-must-gather-rhel8@sha256:10e410d8de8c63abe04361ed7ff3f9189c7862ce40317c074dd8a8a1ed32dc6e_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-must-gather-rhel8@sha256:3ba53a793be22186b3f51ee0664e80dfac3c022fafaedc2c85056effc323369b_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-must-gather-rhel8@sha256:90eb42bc20881a0d5b43a9bd17e6847b5aaa4763b9f1609e8eff3dc396e18eb7_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-must-gather-rhel8@sha256:dbe711f8e735dde870f62b7e41d55ff173750da0ee4db6ce8877ec8a416b2ee1_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-builder-rhel8@sha256:5a0c17df8924b9ccf169651ed26f003a6f207142ad500f5dd617099b2e9b779d_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-builder-rhel8@sha256:b62327fb0e9293ee37c6a268d37fd6f0c8c558c272fad5f58a349c60c602f041_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-builder-rhel8@sha256:c633f402cad4aa97eaf901ca3c0cb614e8a01024d524d7ee27d18afd5c52729c_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-builder-rhel8@sha256:f1a19fa2727dde9f5938663ded792658752e1f0447f71d8edc59d952b9766a8f_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-builder-rhel9@sha256:0ae1d2ae61dbc0ade834b39635e6c426a7f5a44235b6e7c96e7383a80b85a04a_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-builder-rhel9@sha256:0cdc55c5da954717193b20e608ec73464109ecbc7e6b2396f0dc83b9f109eca0_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-builder-rhel9@sha256:4b958e867fbb280cd1efeb0d5ad4b215494dcf404dddeae5e112c35b40bcdb8f_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-builder-rhel9@sha256:78bc404486c9dcf1943c9c83e3d1a8fe8368cd2116e27bdd214cec919d6e9c23_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:03578fed4a13fc7380437e94b42a7af133740f79ebe8381acb992575def9c39d_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:4dbe8d8140d24928f11c9e8ae76cb439006f4de521ca0464f9cbd27eb121f2ca_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:ada7b2d8e614e8b6b877540abf9f787648b331af37787000c543736799228940_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:d2ef218661642e2666fe391dec56c897dcdcda5e043f3bad06e13cc6e9c67cfe_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-python-base-rhel8@sha256:35543386eaf782db2541d6756752bb7598436fda9a6c8b20a0630313d8d49088_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-python-base-rhel8@sha256:392965928b3d0ae9dbc7425e0f1eb158a645f3a551a389cc695c40ed2bd4ae94_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-python-base-rhel8@sha256:c485b1d688aa7556f94f77cf672bac1fc984e41925c8c20e1789961f68ac6835_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-python-base-rhel8@sha256:f249504b48f898e195064e3e31918f8f762d4dd4f1c13466fcf3739a19bc12f2_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-python-base-rhel9@sha256:658a567fdf7069169ebdcc10807fe019fbf585c74edd40792fae63a5866e9323_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-python-base-rhel9@sha256:6e654d8e8f110cdc44cbcac959476b4b1ccbc1cd3eb91996483db441b0828af9_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-python-base-rhel9@sha256:a6902421b0cae79dc0288ff7ae66a42cb691a68ee28664a2baa0ad7961ffc2ad_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • +116 more not shown

✅ Remediation

Red Hat Ansible Automation Platform Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (7)