RHSA-2025:3162HighCVSS 7.5

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update

Published
March 25, 2025
Last Modified
September 6, 2026

🔗 CVE IDs covered (2)

CVE-2025-26699 →CVE-2025-27516 →

📋 Description

CVE-2025-26699 — django: Potential denial-of-service vulnerability in django.utils.text.wrap() CVE-2025-27516 — jinja2: Jinja sandbox breakout through attr filter selecting format method

🎯 Affected products142

  • Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/aap-cloud-billing-rhel8-operator@sha256:e59afbd9e76ba49ffeefb6a9f3aa7c8e46eb15c3d05df02a93633740b496b10a_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-cloud-billing-rhel8@sha256:d8e1f355766aa23e9a3fd68838ebfa0330eb957154aed537de74012a91272e33_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-cloud-metrics-collector-rhel8@sha256:0f08f66ca95553076eae69530e4dba8d72ac6ba48711f17c03dd4e176b25a7e8_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-cloud-ui-rhel8-operator@sha256:902dc985b3d0b9f56c6d358372c20f1aae06567bcc103e3359f089ae3a0f3cd5_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-cloud-ui-rhel8@sha256:49b50c07ebe8a49b09ed4dd4e70fe44fdbab0e82cf5e64df384e68623df7351d_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-must-gather-rhel8@sha256:69b05005e934fee2040447c061e0fa9f2106c5cbadb469f7ed82b0e52d565802_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-must-gather-rhel8@sha256:8a21d85f4bbb24d4b498aec17025b60f5c0596057181daada26e88171b8685df_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-must-gather-rhel8@sha256:a23dd80fdc72c74d31d39a597ad6f986e081a0b853d6decbfadb783b2c7199a9_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-must-gather-rhel8@sha256:c15a8ce3f8e62f904bdde007070cff653a3a29eec57058dc843d774d24aacdf0_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-builder-rhel8@sha256:308bff477ddf1d4a95929051b5f634130f290e07e934301c6fec88f1503e6f28_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-builder-rhel8@sha256:52b88765b97153d2e8ddc94857a9da8b1cbbed9e157b3592fc6293bc84d866cf_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-builder-rhel8@sha256:b78bd771ec1b7376db34753c18f5b7258f884e772c598af91bcb23bd0e0df660_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-builder-rhel8@sha256:f4d9f890920b779e13efd93130d42ca4ed25a088cf9e4cd9a60437ef8ce10b4f_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-builder-rhel9@sha256:8a1732b0b8e8f2665e7d044dc2fe27bc97fc1fe796276b4d3951e9f5ad0a32b0_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-builder-rhel9@sha256:8ea96653e7ee2a38aa75094b5bcd9231783022b08900ad7b9719cc538edb9ece_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-builder-rhel9@sha256:e731d7d3748cc4c1aa0a882e7cb9f8bbb390189086ceb108dd7ad2c9634e35b5_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-builder-rhel9@sha256:f849a8620a88c866f79f959a010b3ef254ab644690983b56c1aa6f2815816083_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:3c71a9b9520581ace3f6ac77e96409234fb0b551e40a683640f6bc7c93eb17be_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:639f06e99bc8e813282d39c314b540d8ad05d280242efff8779cd5e2565b8ace_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:6b93fd2cc80aee2e3a3edf5da066f48756ec977712b0d954f2ae4a6f0fa60999_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:df748250631969ef91cc342ec6ad9875bcc627522f209407aa1842954bcc91b3_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-python-base-rhel8@sha256:41cc1680e25e4f9528525ad9ed06220120a313b693219249d9be8772b15ff322_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-python-base-rhel8@sha256:82b226fc0451826a72aef4c2ef51135fa17b8a576bf3129bec6e796504ab5954_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-python-base-rhel8@sha256:b93e293ee9a007ce3e4cf1f0dc37cdfef28f67c3628031f9c15da1dc80bb74c9_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-python-base-rhel8@sha256:b946c6144d58d9833985e12963937f6e28895071d7fa261e81c4f57b2f9354d9_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-python-base-rhel9@sha256:45abbe185a3b63ec556ee1d9b0aaaf27e825a09a28965741cffd93e2b2b1881f_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-python-base-rhel9@sha256:8f0ae6a2b90db4b1f8faca356f36c67d373152c7445d99c2eb7d765d37ee95a9_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-python-base-rhel9@sha256:a35e7dcef3a12670cabd2e1903dadcbcea79d026993ef6caf57fbdb1cc942ff1_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • +112 more not shown

✅ Remediation

Red Hat Ansible Automation Platform Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (5)