RHSA-2025:23131HighCVSS 8.3

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update

Published
December 11, 2025
Last Modified
August 25, 2026

🔗 CVE IDs covered (8)

CVE-2025-64459 →CVE-2025-9907 →CVE-2025-9908 →CVE-2025-9909 →CVE-2025-58754 →CVE-2025-59530 →CVE-2025-62707 →CVE-2025-62727 →

📋 Description

CVE-2025-9907 — event-driven-ansible: Event Stream Test Mode Exposes Sensitive Headers in AAP EDA CVE-2025-9908 — event-driven-ansible: Sensitive Internal Headers Disclosure in AAP EDA Event Streams CVE-2025-9909 — aap-gateway: Improper Path Validation in Gateway Allows Credential Exfiltration CVE-2025-58754 — axios: Axios DoS via lack of data size check CVE-2025-59530 — github.com/quic-go/quic-go: quic-go Crash Due to Premature HANDSHAKE_DONE Frame CVE-2025-62707 — pypdf: pypdf affected by possible infinite loop when reading DCT inline images without EOF marker CVE-2025-62727 — starlette: Starlette DoS via Range header merging CVE-2025-64459 — django: Django SQL injection

🎯 Affected products107

  • Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/aap-must-gather-rhel8@sha256:012b55d453ce5784e4b6136171b1cb54ce906917bfb49ea5dd976b269bbd1a21_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/aap-must-gather-rhel8@sha256:2f63d6914afc0930d5eea6b7baa8ee31d7f49837fea9b2b13ab5400d7eaf9e26_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/aap-must-gather-rhel8@sha256:7706e6672cde39736aff54098efe2327d9303078d87aa83189d094f1aea28889_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/aap-must-gather-rhel8@sha256:eaf289d9da2e865434a8532f9383174f31ae315f1e01d98119854625019c0eaf_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel8@sha256:50a3589616ac7f3783e5329b53151c75f2dfa638c119e38ecbc0b3c4704e5012_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel8@sha256:6b61a2b5509d11b57dcbf9b1a79f85e03be3b6b1e156d4d54d67a5577eb465b2_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel8@sha256:b4de938cbc8ece60f818537c53a5c58e62b57e480bac906dca113a03329933f8_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel8@sha256:ebef9227b0ea8d285b3ac3fddb9153ac9cc4b149202aa707e726f2cf79689786_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:1dda4e2975187b321db6136261b5d8b1fcdb3da3fe39aa6987b81be696e5b3ac_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:57cd6996f19ee627c765adcd9189277437fd3f5c5b4ed2725e253fb89845be43_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:654c1272c2de10b4710d58d2ed75b168006c89a60be0ec6a44206326344173a4_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:96e07140f207377e5a7d778370a7a556d741ebe0995a68ea15854bac618824b4_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel8@sha256:480fedddedaf241924e412b7c1c8c6503efc993dba10e01664ccacf139e6b52a_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel8@sha256:52b7d1e16051cad2b8e2d14ea64c4a324dd3275097919798d41c61b78b8bc4bd_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel8@sha256:6bae9e9dc6ca3e08c37724c5a1b12a37f98be65db21ca331503751480e1ce9ef_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel8@sha256:c08f0baba441a51f162eb72b040518bffd82c9b95d31242722e36902262ac0f7_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel8@sha256:441e7f398f01a23ce2a106c739a27baaeafb63bead53b4c6a12c2e5a7f020ff6_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel8@sha256:45eab69ea4f9288d4e07fbdc428f7a28c9d780588b9d2ae40500a110b39118c1_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel8@sha256:701988a16822e5350759f2708574f0d919453cdf0c7a4d966d6d42af7a96524d_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel8@sha256:fc43c95d53b56acc6c1c7c5d7ac5b84afc91cc66814b838987985dfec32b7ab1_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8-operator@sha256:24bead1ceb946e92cdb81d1daef9f1115570d7df1f7e49cb105c1e2ce052db1d_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8-operator@sha256:5e554094acb08ff75a1d433a025103f7b9116311b988d95892ee8386c3c501f7_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8-operator@sha256:a9109b18c8103b7e0d1f8807f0c45ab81a0cfc1ef4675941d04ec8fa7bcd0de1_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8-operator@sha256:c7a901bde09cbb12fd473212858f536d61abd89a4c10fe3230fd69c69c06991d_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:10b51fe08293a69b2e63f66a500de15faf1eb7762150a36b734bfaef9f04bb7a_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:3437139865834c67b28f632bccd1e94ff19932acfbc71fbba0cb0e1136c1dd75_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:39ce3cb3cf2d657088eda2c70efc1df44428884146c9d9aab85a4b06263a1072_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:b0ac39cbb6c752d12dfd529240c141d33616a4241427c32b39ebc06b8d804043_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/de-minimal-rhel8@sha256:22eb08141ad602a4ab407c8a8eadfbce321ddfc162f6161e393376b49c374dd2_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • +77 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5#Upgrading Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (12)