RHSA-2025:19201HighCVSS 8.8
Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update
🔗 CVE IDs covered (4)
📋 Description
CVE-2025-9907 — event-driven-ansible: Event Stream Test Mode Exposes Sensitive Headers in AAP EDA CVE-2025-9908 — event-driven-ansible: Sensitive Internal Headers Disclosure in AAP EDA Event Streams CVE-2025-59343 — tar-fs: tar-fs symlink validation bypass CVE-2025-59682 — django: Potential partial directory-traversal via archive.extract()
🔗 References (8)
- selfhttps://access.redhat.com/errata/RHSA-2025:19201
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2392834
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2392835
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2397901
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2400450
- externalhttps://issues.redhat.com/browse/AAP-49448
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_19201.json