Red Hat Security AdvisoryRHSA-2026:1249
Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update
Released 2026-01-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Ansible Automation Platform 2.6 for RHEL 10 receptor-1.6.3-2.el10ap
- Red Hat Ansible Automation Platform 2.6 for RHEL 9 automation-controller-venv-tower-4.7.8-1.el9ap, python3.11-django-4.2.27-2.el9ap, python3.11-protobuf-4.25.8-1.el9ap +2
Fixes 6 records
Priority MEDIUM 41
Any project that uses Protobuf Pure-Python backend to parse untrusted Protocol Buffers data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding…
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00255 · Published 2025-06-16 · Partial fix · 4.25.8, 5.29.5 +1 CWE-674
Priority MEDIUM 40
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00583 · Published 2026-01-05 · Partial fix · 3.13.3 CWE-409
Priority MEDIUM 40
urllib3 is a user-friendly HTTP client library for Python.
CVSS 4.0HIGH 8.9· Network · No auth · No interaction · EPSS 0.00731 · Published 2025-12-05 · Partial fix · 2.6.0 CWE-409
Priority LOW 37
An issue was discovered in 5.2 before 5.2.9, 5.1 before 5.1.15, and 4.2 before 4.2.27.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02162 · Published 2025-12-02 · Fixed in 5.2.9, 5.1.15 +1 CWE-407
Priority LOW 33
Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0049 · Published 2025-12-02 · Partial fix · 1.24.11, 1.25.5 CWE-295
Priority LOW 10
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
CVSS 4.0LOW 1.7· Network · No auth · No interaction · EPSS 0.00355 · Published 2025-07-14 · Partial fix · 3.12.14 CWE-444
THREATIST.IORead the docs