Red Hat Security Advisory

RHSA-2026:1609

Red Hat Ansible Automation Platform 2.5 Container Release Update

Released 2026-01-30 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Ansible Automation Platform 2.5 registry.redhat.io/ansible-automation-platform-25/controller-rhel8, registry.redhat.io/ansible-automation-platform-25/lightspeed-chatbot-rhel8, registry.redhat.io/ansible-automation-platform-25/lightspeed-rhel8

TI-2026-17326 CVE-2026-21441 · GHSA-38jv-5279-wg99

MEDIUM 50

urllib3 is an HTTP client library for Python.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.02922 Published 2026-01-07 Partial fix · 2.6.3 CWE-409

TI-2025-42677 CVE-2025-69223 · GHSA-6mq8-rvhq-8wgg

MEDIUM 40

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00583 Published 2026-01-05 Partial fix · 3.13.3 CWE-409

TI-2025-40898 CVE-2025-66471 · GHSA-2xpw-w6gg-jr37

MEDIUM 40

urllib3 is a user-friendly HTTP client library for Python.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00731 Published 2025-12-05 Partial fix · 2.6.0 CWE-409

TI-2025-39862 CVE-2025-64460 · GHSA-vrcr-9hj9-jcg6

LOW 37

An issue was discovered in 5.2 before 5.2.9, 5.1 before 5.1.15, and 4.2 before 4.2.27.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02162 Published 2025-12-02 Fixed in 5.2.9, 5.1.15 +1 CWE-407