RHSA-2025:21775MediumCVSS 6.7

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Container Release Update

Published
November 19, 2025
Last Modified
August 13, 2026

🔗 CVE IDs covered (2)

📋 Description

CVE-2025-9909 — aap-gateway: Improper Path Validation in Gateway Allows Credential Exfiltration CVE-2025-59530 — github.com/quic-go/quic-go: quic-go Crash Due to Premature HANDSHAKE_DONE Frame

🎯 Affected products103

  • Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:3a9f71dccd69c69b4c22340422afb79721baa325da14cec800ebde673cebf930_amd64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:7f9b3d985ecd6f93529b2b839baa4d737164d1ba298f30a6f3bc831965dc4312_s390x as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:ace7ce2ae2ee9b98dc8a4942a98300512b735b66d8cc37059b6b1f67e07d8e1b_arm64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:e3f483e45cea2d749ce26912c4a1156d10846d98abc117af21498f29c430c1b5_ppc64le as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:09eca964b00db2d71d01b093e51a4a35ed84a24f9e4876b884b2e73228aaae9c_ppc64le as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:4e84dcc052eb9b24266d4390f07a67685c643e383d04a8a5f516960ce83e3c6a_amd64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:9adfea6f4de00dddfb4fabfb75bc32ca50d5eb8207c8392fbb1bd69d39ef8b1c_s390x as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:f9e4d7afc8ad21a79486a9c651ee7c19b3d92fc0583cf966b4dad14773137884_arm64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:3617bcce27c83a80ab3a3d1e293093c67deff43c648a97acfb6ac948ff793dfe_amd64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:777c94c4a68d39c1407ad15378634c0cb0d1c19e25ddf8ccce66ed2838cf37ed_ppc64le as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:83f792abb8bc80e1f0f7df382f60e5755a136b16e0a3a43aa6131010794ac122_arm64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:94fcd4ab926cb289a83631b3c51c11197a53abcf071ef9ae7c431850e1324086_s390x as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:45e4196bf6d68b20cbba715803d58a2605ff1fcd0dbb53f2801b88c22fad132e_amd64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:7576521a6e2ea17c73adc411f3e7a3482391af5d4b47ef54297ce0d1fa99ca3d_ppc64le as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:a78a49f839edbf5f7034f9ddc2b59790d079ff940f8fa5a690e6daf153b0ac2d_s390x as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/controller-rhel9-operator@sha256:fc58f987e868373066412653fb2ab0fc1a987c9e1a57f7ebc4a03b39064255dc_arm64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:34b96fa71bec1a5e64da3fa2aefdde8e771c8074c789cd1b008638733059376d_s390x as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:a5c5074c6a8a89eda577b337888bfd9cd46bd8a5e7ee8483f7dbd3c7fe27b604_ppc64le as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:ca509114d80375ec403d4fed5ddbb3d4e331cc86af1098159be138e59129b74e_arm64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:ff2c15cf116fda40641696f675874c1386345081f9697db278e47bfe9db68762_amd64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:18b770e23f808bde9e31dcaf76cbe51add16f18f3a37ad35a6cafedd4cf9d8ab_arm64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:65722ae4cc9f6e4c9921a5bef61dda6c5cc5f7f44a4ade32acb7effcae0d64c9_ppc64le as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:b850178cc0d3cba4b8461529d0afe987c92661024da2d71c38beb32a04b03d7a_amd64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:e71de3760078e84dc99c084b7f384a4ed367aedf9973f56fa553983765e27d46_s390x as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:11bc6d478098b9fdf9962a66d80bb80cf15b91dde7ca63d67d46f206b91d0180_arm64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:144f421032efd741e78e23e9bedee6a502ba6a48e937889458f8051c3f1e1df3_s390x as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:6fbda034807be4b897dd13a7e7b1c5c292db0839ea05e7b54dfb00cf9217d888_ppc64le as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:f124392fac8a6e08600705ba73f39ef3b4c33c6965aa3222c57908928e986892_amd64 as a component of Red Hat Ansible Automation Platform 2.6
  • registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9-operator@sha256:346d9931a27fe022df1499c36e18e506d4e698bafbd58366693c4033f65a3cce_ppc64le as a component of Red Hat Ansible Automation Platform 2.6
  • +73 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6#Upgrading Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (6)