Red Hat Security Advisory

RHSA-2025:19201

Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update

Released 2025-10-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Ansible Automation Platform 2.6 for RHEL 9 automation-eda-controller-1.2.1-1.el9ap, automation-eda-controller-base-1.2.1-1.el9ap, automation-eda-controller-base-services-1.2.1-1.el9ap +4

TI-2025-36904 CVE-2025-59343 · GHSA-vj76-c3g6-qr5v

LOW 38

tar-fs provides filesystem bindings for tar-stream.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0058 Published 2025-09-24 Partial fix · 3.1.1, 2.1.3 +3 CWE-22

TI-2025-37145 CVE-2025-59682 · GHSA-q95w-c7qg-hrff

LOW 31

An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00932 Published 2025-10-01 Partial fix · 4.2.25, 5.1.13 +1 CWE-23

TI-2025-09093 CVE-2025-9908 · GHSA-c2g3-cfch-p5h4

LOW 31

A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Streams.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00219 Published 2026-02-27 Fixed in 3.1.1-1.el8ap, 25.12.0-1.el8ap +39 CWE-200

TI-2025-09092 CVE-2025-9907 · GHSA-3mcc-r9wq-f9g6

LOW 31

A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Stream API.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00184 Published 2026-02-27 Fixed in 3.1.1-1.el8ap, 25.12.0-1.el8ap +39 CWE-200