Red Hat Security Advisory

RHSA-2026:42080

Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update

Released 2026-07-20 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Ansible Automation Platform 2.7 for RHEL 10 ansible-core-2:2.16.19-1.el10ap, receptor-1.6.6-1.el10ap
Red Hat Ansible Automation Platform 2.7 for RHEL 9 ansible-core-1:2.16.19-1.el9ap, receptor-1.6.6-1.el9ap

TI-2026-28703 CVE-2026-39821 · GHSA-w2q5-6q6x-x959

MEDIUM 47

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.01834 Published 2026-05-22 Partial fix · 1.25.13, 1.26.6 +2 CWE-1289

TI-2026-09781 CVE-2026-11332 · GHSA-w8p5-mx5w-cpqj

LOW 35

A flaw was found in ansible-core.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00222 Published 2026-06-05 Partial fix · 1:2.16.19-1.el8ap, 1:2.16.19-1.el9ap +33 CWE-88

TI-2026-21595 CVE-2026-27145 · GHSA-4279-q6mj-392r

LOW 30

(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00591 Published 2026-06-02 Partial fix · 1.25.11, 1.26.4

TI-2026-21586 CVE-2026-27136 · GHSA-m9x8-m34x-fj9q

LOW 27

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00223 Published 2026-05-22 Partial fix · 0.55.0 CWE-1021