RHSA-2026:42141MediumCVSS 6.4

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update

Published
July 20, 2026
Last Modified
August 16, 2026

🔗 CVE IDs covered (1)

📋 Description

CVE-2025-57847 — ansible-automation-platform: privilege escalation via excessive group writable /etc/passwd permissions

🎯 Affected products29

  • Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel9@sha256:199cafb410bdadd430a91652f4daa0643709bb3a6d5cdd37cfd64c3124598d5f_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel9@sha256:b1d9779a5e2fac3aaddbbbd15f654cc085eda18f4c2eee438d6b183628cc135e_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel9@sha256:b41480e52cabb7d5229efe6af9f531706b941027d33a59847465933ab3acce32_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel9@sha256:fb3faa873fc799f76fceb29f33247e873087ad999362adfac2d4e58b6810415e_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel9@sha256:768d0d5b8d00775aa1a9ba3344f124416d064904d16f162423aee97a5cd6dc84_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel9@sha256:8fce930ce5d7ee33a0e3f6fe450e21433b4ef3cdaf537be69117168de97771b8_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel9@sha256:a7994daba603a3a7043543b27086918a898c386fd740556f9baa00c605a44517_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel9@sha256:f52dc83dea01db3b8fea910915d2615f7cea82ac32334c9f60a95dc40d7b3b14_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel9@sha256:3840941a38ae174ad29bc9b4ff162e08ff23c90665d61d9a0afdef2610c25c97_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel9@sha256:7fab8d1fcc4ffbeb65d210e021aad34d7310009409b68dc0fc18ccec0a385463_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel9@sha256:c49250b4bf378b8f1d25fb084df07c98290d33ff0166a1240d41a7e40f0cfc9c_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel9@sha256:e438c25ad1e57882cd6b7934429239e9b58b3d0304641dc82caf6c48b2b720b9_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/de-minimal-rhel9@sha256:1ec353af2547d43b75a82734edfaa2041a0b4c7d53c433baa11ebf9dd097d02d_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/de-minimal-rhel9@sha256:2fa69e66955a160f440deafd441e4d36be8a0a3fd4ad7350b9314b4f8a0de464_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/de-minimal-rhel9@sha256:6a6ca21259694fa24a677ef83a1897b8d0aba282e16045752984381949fa5989_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/de-minimal-rhel9@sha256:c3baa0490ca78ad5a267a8efdc2f0354d196b8fdf186c501639b62b7c042dca4_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/de-supported-rhel9@sha256:46172a40efb1767881ccce38937cb68856f4a6d8af96b31fa615f4d0b8c0878b_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/de-supported-rhel9@sha256:64a608cde39197a47d41765bc33c53cd5f3d6c2895644ffd407c5a085e22d34b_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/de-supported-rhel9@sha256:7846e8e2bb0544c370bd8997f819ef8aba40b1a0f3cca334477a9af5f0916ea8_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/de-supported-rhel9@sha256:89b8e0fe9305edf80da6552b0e23d575cb28a47de76620b3b80e88103646a05d_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ee-minimal-rhel9@sha256:0c4ba2b768b29eeabfada8f2c3fc139e54d016e59f9c4bd791420d741c0df0fd_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ee-minimal-rhel9@sha256:1d4b44fa240fc41688250129eca5b9a420b3dc02106c61fa50d25278f3b1e3bd_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ee-minimal-rhel9@sha256:355afaa0e96dbd1d05ff6ce5d500973cc247be540e938c14ec6d257c91b75126_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ee-minimal-rhel9@sha256:e4136dc104a9c549e2ebf42d145300a74043dddc901f609640a8c3d92c7eeabe_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ee-supported-rhel9@sha256:2abfc10be786994c8db75fda5956555ed79bbbe3dbfbbebed9dec2af9f32dea7_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ee-supported-rhel9@sha256:31bf9c7577e2c25b858cbe39fd73f5809b2dfb2dd147a61cac1fdadc190883f3_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ee-supported-rhel9@sha256:68b7492ca8215ca8d46efb854b9dc82d170fe7adc220c55e022375b098c484ee_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ee-supported-rhel9@sha256:d7b26835402437fba1724dd792133e5f5d23189408b021ee73689259f62e683d_arm64 as a component of Red Hat Ansible Automation Platform 2.5

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5#Upgrading

🔗 References (5)