RHSA-2025:8615HighCVSS 7.4

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Container Release Update

Published
June 5, 2025
Last Modified
August 15, 2026

🔗 CVE IDs covered (1)

CVE-2025-43859 →

📋 Description

CVE-2025-43859 — h11: h11 accepts some malformed Chunked-Encoding bodies

🎯 Affected products115

  • Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/aap-must-gather-rhel8@sha256:0c3cd3cb5b74f6fda40d45a4a37fac562a1fff46dc67e2c85ba3381863064aea_arm64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/aap-must-gather-rhel8@sha256:6c75d859ee3d3288ab727ee9a27ee6dcfcb129d7e85e4c11161cb30021f5fba2_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/aap-must-gather-rhel8@sha256:c449d81af864399675e59773b9b97a49e2f94fa6917d8cee78a4d0812ee41d36_s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/aap-must-gather-rhel8@sha256:d3969568006dcfca4ee8fe4633950012316719e877b380b1885ff55ff3b13712_ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-builder-rhel8@sha256:703ac920f04fc9ec354080c9db4da5fe80d7b52eeffce0ad65a6dc13766ef4df_s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-builder-rhel8@sha256:72d01b6e0335c798c135eb7726177ffb79c241bf949e7562201e42bb8790d1fe_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-builder-rhel8@sha256:eb17b8350eeea7035a9e41f1127836c355863ff06a4afb17c9b7bfd3d008a083_arm64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-builder-rhel8@sha256:f648d1b2518633dea5bdc6de2c8a759145474c4745e3ec883c135c8e535c3d53_ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-builder-rhel9@sha256:234e606aceb86c9803ae5f4c18eeae6c947b5e719426d3b15a078df7f489cdba_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/ansible-builder-rhel9@sha256:37267154acc4472f5796bb1081a50cdd2142b1656faf18bbdf9f2b5a9cbfbaa5_arm64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/ansible-builder-rhel9@sha256:8af87656bf3c6fa1b1510e9d2faa55a13d8692e2da2e61ed3385826d5735b501_ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/ansible-builder-rhel9@sha256:bcb8ec6edf19724832e6d88f2e0b68fa70d0f6d332fc95568385a6eba7b56813_s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/ansible-python-base-rhel8@sha256:7cd5d603ec5336c3df133826788745dd07b99a864625ba1ac239b31b6a7c54ec_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-python-base-rhel8@sha256:83de0100dd59eed860d985aaabed3dd77b0cb8617aa8794b3c9957478a5d1947_arm64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-python-base-rhel8@sha256:bc27b361e7192d48dca0daefa7ffcc0a93dcd69deac29446d787c05c625b53b4_ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-python-base-rhel8@sha256:d9a92b880fce028c86d9f855cb589c0d65df229a49829b937d8337111c7f0878_s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-python-base-rhel9@sha256:1304f8aac84f9ca90dec3e2582a58a1bbd29e182ffc1ba2000d108aad5bb660b_s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/ansible-python-base-rhel9@sha256:2605eb036600260e80c248d2c01fa8971ffa605bf84043e44158aaab17c2a70f_arm64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/ansible-python-base-rhel9@sha256:58210445a630b5dde73b11947ea84110b57329898358570f3cc5a3b1e7432989_ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/ansible-python-base-rhel9@sha256:caefdef1105b556df62ba25dcd51c9cb8c31a93190ee840b83ec5745cb06f23a_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/ansible-python-toolkit-rhel8@sha256:21d70899082eac5a3f2a4aecb1acaa957b53b478d054e99286286ab51a56247d_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-python-toolkit-rhel8@sha256:7da35fc64167b96a8ddaee06ae6096dee3e884f2a5416e41808d8813262c9940_ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-python-toolkit-rhel8@sha256:9d924e3e52bd51422749ed0cbd063ed88975fc1739fb896b7a2ff583efe2f138_arm64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-python-toolkit-rhel8@sha256:9f9b8ec7e1ce71817fa0696d5db91c33c281c5911a456d5764f34cad626ced15_s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-python-toolkit-rhel9@sha256:be028a61f5dd1e7a4b0a4ad6c50678a2a7f3662cd1b3482c53e99fab1981bf3a_s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/ansible-python-toolkit-rhel9@sha256:cc8106cff6b6b09f8a2efbc9a62aea00ce9c715aa5aacf26601daca0063ea095_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/ansible-python-toolkit-rhel9@sha256:d36107b97b2dfa56b287cab07faf7317379c1b05a7b6f0c2b77c1ae242de6486_ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/ansible-python-toolkit-rhel9@sha256:ea729cebfe6f50bd8c02ccf7948d752af53f693408e994bc92024722913b343e_arm64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • +85 more not shown

✅ Remediation

Red Hat Ansible Automation Platform Workaround: Ensure any applications using h11 are behind a correctly configured reverse proxy will prevent exploitation of this flaw.

🔗 References (4)