Skip to content
OpenAdvisories
Medium RHSA-2026:50318 1 CVE

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update

Published Aug 5, 2026 · Updated Oct 10, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · Ansible Automation Platform Inside 2 ansible_automation_platform_inside:2.7::el9 receptor 0:1.6.7-1.el9ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.7::el10 receptor 0:1.6.7-1.el10ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.7::el9 receptor 0:1.6.7-1.el9ap

Vulnerabilities 1

  • Medium 5.3
    CVE-2026-40898

    quic-go: HTTP/3 QPACK Trailer Expansion Memory Exhaustion

    quic-go is an implementation of the QUIC protocol in Go. Prior to version 0.59.1, an attacker can cause excessive memory allocation in quic-go's HTTP/3 client and server implementations by sending a QPACK-encoded HEADERS frame that decodes into a large traile…

    quic-go quic-go k3s k3s-static Debian Ubuntu Wolfi Go

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7/whats_new-async_updates
  • article
    https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7#Upgrade
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2484875
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_50318.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-40898
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-40898
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-40898
  • article
    https://github.com/quic-go/quic-go/releases/tag/v0.59.1
  • article
    https://github.com/quic-go/quic-go/security/advisories/GHSA-vvgj-x9jq-8cj9