What is RHSA-2026:6278?

RHSA-2026:6278 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

Which CVE IDs does RHSA-2026:6278 cover?

RHSA-2026:6278 covers the following CVE IDs: CVE-2025-61726, CVE-2025-68121, CVE-2026-25990. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2026:6278?

RHSA-2026:6278 has a CVSS v3 base score of 7.5, published by Red Hat Product Security.

Which products are affected by RHSA-2026:6278?

RHSA-2026:6278 affects 200 products, including: Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Ansible Automation Platform 2.5 for RHEL 9; aap-metrics-utility-0:0.6.3-2.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; aap-metrics-utility-0:0.6.3-2.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; aap-metrics-utility-0:0.6.3-2.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; and others — see the full list on the advisory page.

RHSA-2026:6278HighCVSS 7.5

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

Vendor

Red Hat Product Security

Published

March 31, 2026

Last Modified

September 4, 2026

🔗 CVE IDs covered (3)

CVE-2025-61726 →CVE-2025-68121 →CVE-2026-25990 →

📋 Description

CVE-2025-61726 — golang: net/url: Memory exhaustion in query parameter parsing in net/url CVE-2025-68121 — crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption CVE-2026-25990 — pillow: Pillow: Out-of-bounds Write via Specially Crafted PSD Image

🎯 Affected products200

Red Hat Ansible Automation Platform 2.5 for RHEL 8
Red Hat Ansible Automation Platform 2.5 for RHEL 9
aap-metrics-utility-0:0.6.3-2.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
aap-metrics-utility-0:0.6.3-2.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
aap-metrics-utility-0:0.6.3-2.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
aap-metrics-utility-0:0.6.3-2.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
aap-metrics-utility-0:0.6.3-2.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
aap-metrics-utility-0:0.6.3-2.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
aap-metrics-utility-0:0.6.3-2.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
aap-metrics-utility-0:0.6.3-2.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
aap-metrics-utility-0:0.6.3-2.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
aap-metrics-utility-0:0.6.3-2.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
ansible-automation-platform-installer-0:2.5-22.1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
ansible-automation-platform-installer-0:2.5-22.1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
ansible-automation-platform-installer-0:2.5-22.1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
ansible-automation-platform-installer-0:2.5-22.1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
ansible-core-1:2.16.17-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
ansible-core-1:2.16.17-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
ansible-core-1:2.16.17-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
ansible-core-1:2.16.17-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
ansible-test-1:2.16.17-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
ansible-test-1:2.16.17-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
automation-controller-0:4.6.27-2.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
automation-controller-0:4.6.27-2.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
automation-controller-0:4.6.27-2.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
automation-controller-0:4.6.27-2.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
automation-controller-0:4.6.27-2.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
automation-controller-0:4.6.27-2.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
automation-controller-0:4.6.27-2.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
automation-controller-0:4.6.27-2.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
+170 more not shown

✅ Remediation

For details on how to apply this update, refer to Ansible Automation Platform documentation. Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 CVE IDs covered (3)

📋 Description

🎯 Affected products200

✅ Remediation

🔗 References (8)