RHSA-2025:8221HighCVSS 7.4

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update

Published
May 27, 2025
Last Modified
August 15, 2026

🔗 CVE IDs covered (1)

CVE-2025-43859 →

📋 Description

CVE-2025-43859 — h11: h11 accepts some malformed Chunked-Encoding bodies

🎯 Affected products146

  • Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/aap-cloud-billing-rhel8-operator@sha256:e243dd0461e1c6d96bb70f0b4d1bdc982c0c2e52db385af16c006eeae09e21cf_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-cloud-billing-rhel8@sha256:fa2c82f2645ff17d2fcdc4551a173f242ca036e00ef12748c102fbad87bc687b_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-cloud-metrics-collector-rhel8@sha256:ec3b52ad41d7b629b4f03056bcf74543ec681ac4131a83d268934cf32936329b_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-cloud-ui-rhel8-operator@sha256:f359f9f1ca878957b21d11a1a7f47499b3bdfb76fcf7d9875119047e2dd25a05_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-cloud-ui-rhel8@sha256:d21b2d4338d1f04097c27b8dc78d322f0705c2c678e68e232bb935f372c82cdf_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-must-gather-rhel8@sha256:22007754749bb634b78d07fdf85186b06e4c6d2f28b79ffec3d54c5ecd34eff9_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-must-gather-rhel8@sha256:6272222641fa81c51cbdfdf4b28d783898a20d0d47d43fd052e4dcdf45921b76_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-must-gather-rhel8@sha256:b8f148232b71dfeb5da8330998ad1eb7cb58e8e74b81c16725ce52b3daeb7779_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-must-gather-rhel8@sha256:d933588c21a9127915865f76246c4afa8bdbd29b7627b3cb74dc5adf6da04254_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-builder-rhel8@sha256:3a1b704b309e35b5c9d9e1c1d7590d39c7983e5f480089523d5a130cb2b4dd23_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-builder-rhel8@sha256:b8c1e0fbcb623c314397990871a6a6e58c47c58ff620265b5edf201b644bc13c_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-builder-rhel8@sha256:d18076e20a1a03a60a78699fc9d0879a1a3234b34e04631cb9e21d87af8e2857_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-builder-rhel8@sha256:ee605aad3716940049b8b6a57660325d384203c68f65c3eb2ebfe8499fd2824c_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-builder-rhel9@sha256:205c223cc79e53dd59f4954f8a9489e758425059a4f21f010eceff24b88da841_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-builder-rhel9@sha256:42b931c79f1c7f5d87a3f0c406c6feffa1a276facf5efd68ea5f693466f8c9b7_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-builder-rhel9@sha256:adfc1561c81dfa54aec3a9a7a45047c94333305315c4c40e8261c87add2c9959_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-builder-rhel9@sha256:c52466e36f848015d0ad31b2dd46681896e18aba34ae45a1782830401fa8214f_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:0702d8967c000d97f5c5e203a4b63ff96961ee991b0ca13577f866b1cd75a78a_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:11c8ed186efd958f0f2768476aa1193876a386ac65da376ed176eaf0a55c48af_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:23148d4c5b94945121e1d04eec723b972596cb60a0c0af1672fda41ec48e3df0_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:4ea230e3d2bc5e6f29145d76a85745f3e9fc2759eee741bac010b48fcfa23674_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-python-base-rhel8@sha256:58c74d7dae65f9929a8c0ae667098ee4b826e75f938367ff12da3c5c761a6d44_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-python-base-rhel8@sha256:5e7e25e203df9a24934d7934aa4bb618f40eaa57c418096fcb976282444fea77_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-python-base-rhel8@sha256:828d3e9405cc62160e69b5317f13a4955530cd03321e44ec526eafa94a92d54c_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-python-base-rhel8@sha256:8d288d5825a3d9a52e23a4d5e71b12b458caeb3ec5a56ca22cf76c3a8b36bf7f_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-python-base-rhel9@sha256:1721441a1bce040ea66729a981151f1f2a8e151d8f0023026bb76697ef38b2c9_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-python-base-rhel9@sha256:80e16ab4f6527f1a788d8525db50a54fb41e3a67e0d03f4406785f60fd068ce7_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-python-base-rhel9@sha256:e96c3f6796e94089827350eee98638c7ffbede656932e4a7ecf0c42420919300_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • +116 more not shown

✅ Remediation

Red Hat Ansible Automation Platform Workaround: Ensure any applications using h11 are behind a correctly configured reverse proxy will prevent exploitation of this flaw.

🔗 References (4)