RHSA-2026:13553HighCVSS 8.1

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update

Published
May 4, 2026
Last Modified
August 20, 2026

🔗 CVE IDs covered (10)

CVE-2025-69227 →CVE-2026-4800 →CVE-2026-26007 →CVE-2026-27459 →CVE-2026-29074 →CVE-2026-30922 →CVE-2026-32597 →CVE-2026-33154 →CVE-2026-23490 →CVE-2026-32274 →

📋 Description

CVE-2025-69227 — aiohttp: aiohttp: Denial of Service via specially crafted POST request CVE-2026-4800 — lodash: lodash: Arbitrary code execution via untrusted input in template imports CVE-2026-23490 — pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID CVE-2026-26007 — cryptography: cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves CVE-2026-27459 — pyOpenSSL: DTLS cookie callback buffer overflow CVE-2026-29074 — svgo: SVGO: Denial of Service via XML entity expansion CVE-2026-30922 — pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion CVE-2026-32274 — black: Black: Arbitrary file writes from unsanitized user input in cache file name CVE-2026-32597 — pyjwt: PyJWT accepts unknown crit header extensions (RFC 7515 §4.1.11 MUST violation) CVE-2026-33154 — dynaconf: jinja2: Dynaconf: Arbitrary code execution via Server-Side Template Injection

🎯 Affected products103

  • Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/aap-must-gather-rhel8@sha256:ac588b174bb083df04647e21f80e36789622f2bb9c70c0f25dc72a207546f4b0_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/aap-must-gather-rhel8@sha256:c2b8db8cf462e63346fd7f70ea92ad47b60ce8a346b1766a210e6b8e12987b15_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/aap-must-gather-rhel8@sha256:dbb7cffb582b6073c2d1d15fd8b3cb4b0e3dbd88871c35ebe87fe480530cc8c4_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/aap-must-gather-rhel8@sha256:f3587a93b8186143d887c3d8b20b8796f1a3d9ead39b25804708c9b7dad3088a_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel8@sha256:32d53a06360f409fddfd003b5752facd3fd191297f333300e85fc194030cb757_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel8@sha256:705d314f2eb93d2c851138fbcb04706f02df38e3665f4ff5cab982f78589dd6e_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel8@sha256:7f39118c7aeb45defec1b25d1b458227b5a62c5c6177f51be100d9d0d4e5f308_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel8@sha256:f1197cb5e8b22462341aeb0ffacc8c7a805d2692e1c07b614ef20698fb535f7b_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:39a5bde35ba0e9acb169edeb753dccd33fbb0e4bb311ee7037aa2042f9850874_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:4a4d9cc473a7047512a07c4b8448f09d826576ed910d46dc94d8062616ba6efb_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:7a04b1492ffb125b001f7803a4e3472aafc7cf7c236e8f73e13389b84676b87f_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:c449bd42eb778d5358523f750bac003ad0b3bb728e369146e24b32d9f49f5c07_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel8@sha256:225fc37f80925652e6528e2ef9b74e12e6abab42cd86e8cdeb4381d7d4ca62bc_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel8@sha256:6d3a683bcebb36f781ab8d6904f29c2dc8a66a6dc720a4d7175b0b4f7f2b7d98_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel8@sha256:9e4133428c71165d7e936efd3c1f7344b434bece53738b6a93a411e822a8e096_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel8@sha256:f6b0c62b35bd4ed6ae4cacaa5d08ded9e0403cec4cc586fd205bcb71ac7bfc9a_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel8@sha256:00ee4300bc6c059bd48da2d46b7dfc928ba8be6d6d313dbb551559bdb76acb40_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel8@sha256:68868f5129890f9ce2416e6ade3e340dded49269f532791b541a6919f8c6db5b_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel8@sha256:6baa6f0d35e3dc4d95b19680ea853a7f6c2d6e04791b2ba2ed242d2593d0067f_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel8@sha256:f0bb7a65e2fc5985a3211bebb79876bdc2bd1b61da7efd53416c8457253d4691_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8-operator@sha256:595ca0391a1ebe714c692906f08dc879d679f3ea99f7d8ab8f3d9537e6c88f4b_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8-operator@sha256:66586f6c269e34a9a1de9d96bb90ed09f4384385d767f5fae988499855afaa7f_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8-operator@sha256:8e474b0dc2a31969f7c1ac11ba2d9f5afdaad4c04402000a6d744bf7152b2ea7_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8-operator@sha256:d3c79490034d50c28e1d359d48a130f3afcaa19a86ec165b39c68c9c5f8c98c8_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:1e5786ac9dc6ba99af93a08a4b927c09cfcd7dc389100ba979094f6579fb481d_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:56943e6ef83543aaf15367e37d213aaabd8fe585d5d4e324b1f127e009509da4_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:89686191015453d93dda8818895cf5df85ba20afb8cfca929f8bd7f9d5c68d96_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:8c0908022fc3e47059b25b8927201256b331272a018a584a50803e735262c82e_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/de-minimal-rhel8@sha256:0b90b184be8b91ba0429aab99151f6fde8b58197f50379876e354e66a567e044_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • +73 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5#Upgrading Workaround: No mitigation is currently available that meets Red Hat Product Security’s standards for usability, deployment, applicability, or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: To mitigate this flaw, ensure the callback provided to the set_cookie_generate_callback function strictly limits the returned cookie string or byte sequence to under 256 bytes. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (14)