Skip to content
OpenAdvisories
High RHSA-2025:21706 1 CVE

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

Published Nov 19, 2025 · Updated Sep 26, 2026

Ecosystem: Red Hat

Fixed packages 16

ReleasePackageFixed in
Red Hat · Ansible Automation Platform Developer 2 ansible_automation_platform_developer:2.4::el8 receptor 0:1.6.2-1.el8ap
Red Hat · Ansible Automation Platform Developer 2 ansible_automation_platform_developer:2.4::el8 receptorctl 0:1.6.2-1.el8ap
Red Hat · Ansible Automation Platform Developer 2 ansible_automation_platform_developer:2.4::el9 receptor 0:1.6.2-1.el9ap
Red Hat · Ansible Automation Platform Developer 2 ansible_automation_platform_developer:2.4::el9 receptorctl 0:1.6.2-1.el9ap
Red Hat · Ansible Automation Platform Inside 2 ansible_automation_platform_inside:2.4::el8 receptor 0:1.6.2-1.el8ap
Red Hat · Ansible Automation Platform Inside 2 ansible_automation_platform_inside:2.4::el8 receptorctl 0:1.6.2-1.el8ap
Red Hat · Ansible Automation Platform Inside 2 ansible_automation_platform_inside:2.4::el9 receptor 0:1.6.2-1.el9ap
Red Hat · Ansible Automation Platform Inside 2 ansible_automation_platform_inside:2.4::el9 receptorctl 0:1.6.2-1.el9ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el8 receptor 0:1.6.2-1.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el8 receptor-debuginfo 0:1.6.2-1.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el8 receptor-debugsource 0:1.6.2-1.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el8 receptorctl 0:1.6.2-1.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el9 receptor 0:1.6.2-1.el9ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el9 receptor-debuginfo 0:1.6.2-1.el9ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el9 receptor-debugsource 0:1.6.2-1.el9ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el9 receptorctl 0:1.6.2-1.el9ap

Vulnerabilities 1

  • High 7.5
    CVE-2025-59530

    quic-go has Client Crash Due to Premature HANDSHAKE_DONE Frame

    quic-go is an implementation of the QUIC protocol in Go. In versions prior to 0.49.0, 0.54.1, and 0.55.0, a misbehaving or malicious server can cause a denial-of-service (DoS) attack on the quic-go client by triggering an assertion failure, leading to a proce…

    quic-go quic-go k3s k3s-static Debian Ubuntu Azure Linux Wolfi Go

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2403125
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_21706.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-59530
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-59530
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-59530
  • article
    https://github.com/quic-go/quic-go/blob/v0.55.0/connection.go#L2682-L2685
  • article
    https://github.com/quic-go/quic-go/pull/5354
  • article
    https://github.com/quic-go/quic-go/security/advisories/GHSA-47m2-4cr7-mhcw