RHSA-2026:73133HighCVSS 7.5

Red Hat Security Advisory: Red Hat Ansible Automation Platform Execution Environments Update

Published
September 29, 2026
Last Modified
September 30, 2026

🔗 CVE IDs covered (1)

CVE-2025-66418 →

📋 Description

CVE-2025-66418 — urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion

🎯 Affected products5

  • Red Hat Ansible Automation Platform 2.16
  • registry.redhat.io/ansible-automation-platform/ee-minimal-rhel8@sha256:5b3cceb6c97f85e7a590c8b0838813e8715f554214ab06bf02c0fb4baf4fea63_arm64 as a component of Red Hat Ansible Automation Platform 2.16
  • registry.redhat.io/ansible-automation-platform/ee-minimal-rhel8@sha256:7798fcd8f98cfb9361e7a87f4acc8f7fc294cbc6cba8a0fb6e53ae7c4e8d5126_amd64 as a component of Red Hat Ansible Automation Platform 2.16
  • registry.redhat.io/ansible-automation-platform/ee-minimal-rhel8@sha256:872fffd4bc29e4273c0de445dc60867e41c8afce1d554984672895e81906f32c_ppc64le as a component of Red Hat Ansible Automation Platform 2.16
  • registry.redhat.io/ansible-automation-platform/ee-minimal-rhel8@sha256:fe817086f071d7b3de6923d5920e497e1453f6f0d68e1fe9609e2f7edc1fc87a_s390x as a component of Red Hat Ansible Automation Platform 2.16

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/latest/html/creating_and_using_execution_environments/index Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (4)