Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · Ansible Automation Platform Developer 2 ansible_automation_platform_developer:2.6::el9 | receptor | 0:1.6.2-2.el9ap |
| Red Hat · Ansible Automation Platform Developer 2 ansible_automation_platform_developer:2.6::el9 | receptorctl | 0:1.6.2-2.el9ap |
| Red Hat · Ansible Automation Platform Inside 2 ansible_automation_platform_inside:2.6::el9 | receptor | 0:1.6.2-2.el9ap |
| Red Hat · Ansible Automation Platform Inside 2 ansible_automation_platform_inside:2.6::el9 | receptorctl | 0:1.6.2-2.el9ap |
| Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.6::el9 | automation-gateway-server | 0:2.6.20251119-1.el9ap |
| Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.6::el9 | receptor | 0:1.6.2-2.el9ap |
| Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.6::el9 | receptor-debuginfo | 0:1.6.2-2.el9ap |
| Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.6::el9 | receptor-debugsource | 0:1.6.2-2.el9ap |
| Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.6::el9 | receptorctl | 0:1.6.2-2.el9ap |
Vulnerabilities 2
-
High 7.5
quic-go has Client Crash Due to Premature HANDSHAKE_DONE Frame
quic-go is an implementation of the QUIC protocol in Go. In versions prior to 0.49.0, 0.54.1, and 0.55.0, a misbehaving or malicious server can cause a denial-of-service (DoS) attack on the quic-go client by triggering an assertion failure, leading to a proce…
-
Medium 6.7
Aap-gateway: improper path validation in gateway allows credential exfiltration
A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft via the creation of misleading routes using a double-slash (//) prefix in the gateway_path. A malicious or socially engine…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2392836
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2403125
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_21768.json
-
report
https://access.redhat.com/security/cve/CVE-2025-9909
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-9909
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-9909
-
report
https://access.redhat.com/security/cve/CVE-2025-59530
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-59530
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-59530
-
article
https://github.com/quic-go/quic-go/blob/v0.55.0/connection.go#L2682-L2685
-
article
https://github.com/quic-go/quic-go/pull/5354
-
article
https://github.com/quic-go/quic-go/security/advisories/GHSA-47m2-4cr7-mhcw