Reachable assertion in quic-go - CVE-2025-59530

Vulnerability identifier: #VU116913

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-59530

CWE-ID: CWE-617

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to premature HANDSHAKE_DONE frame. A remote attacker can trigger an assertion in a quic-go client and cause a deial of service condition on the target system.

quic-go
Submariner
Ansible Automation Platform
ansible-sign (Red Hat package)
python3.11-requirements-parser (Red Hat package)
python3.11-ruamel-yaml-clib (Red Hat package)
python3.11-pyasn1-modules (Red Hat package)
python3.11-insights-analytics-collector (Red Hat package)
python3.11-distlib (Red Hat package)
python3.11-drools-jpy (Red Hat package)
aap-metrics-utility (Red Hat package)
python3.11-subprocess-tee (Red Hat package)
python3.11-galaxy-importer (Red Hat package)
python3.11-pyasn1 (Red Hat package)
python3.11-inflection (Red Hat package)
python3.11-webencodings (Red Hat package)
python3.11-gnupg (Red Hat package)
python3.11-sqlparse (Red Hat package)
python3.11-isodate (Red Hat package)
python3.11-ptyprocess (Red Hat package)
python3.11-mccabe (Red Hat package)
python3.11-defusedxml (Red Hat package)
python3.11-django-crum (Red Hat package)
python3.11-tabulate (Red Hat package)
python3.11-commonmark (Red Hat package)
python3.11-click-help-colors (Red Hat package)
python3.11-s3transfer (Red Hat package)
python3.11-rq-scheduler (Red Hat package)
python3.11-pathspec (Red Hat package)
python3.11-lockfile (Red Hat package)
python3.11-jpy (Red Hat package)
python3.11-ruamel-yaml (Red Hat package)
python3.11-future (Red Hat package)
python3.11-prometheus-client (Red Hat package)
python3.11-pyrsistent (Red Hat package)
python3.11-docutils (Red Hat package)
python3.11-pulp-ansible (Red Hat package)
python3.11-pulp-glue (Red Hat package)
python3.11-drf-spectacular (Red Hat package)
python3.11-drf-nested-routers (Red Hat package)
python3.11-mypy-extensions (Red Hat package)
python3.11-ansible-sdk (Red Hat package)
python3.11-janus (Red Hat package)
python3.11-resolvelib (Red Hat package)
python3.11-jmespath (Red Hat package)
python3.11-asyncio-throttle (Red Hat package)
python3.11-bleach-allowlist (Red Hat package)
automation-controller-fapolicyd (Red Hat package)
automation-eda-controller (Red Hat package)
ansible-rulebook (Red Hat package)
python3.11-djangorestframework-queryfields (Red Hat package)
python3.11-brotli (Red Hat package)
python3.11-et-xmlfile (Red Hat package)
python3.11-naya (Red Hat package)
python3.11-django-lifecycle (Red Hat package)
python3.11-django-split-settings (Red Hat package)
python3.11-ansible-pylibssh (Red Hat package)
python3.11-enrich (Red Hat package)
python3.11-deprecated (Red Hat package)
python3.11-onigurumacffi (Red Hat package)
python3.11-xlwt (Red Hat package)
python3.11-aiosignal (Red Hat package)
python3.11-requests-oauthlib (Red Hat package)
python3.11-parsley (Red Hat package)
python3.11-xmlsec (Red Hat package)
python3.11-frozenlist (Red Hat package)
python3.11-pluggy (Red Hat package)
python3.11-odfpy (Red Hat package)
python3.11-pyjwkest (Red Hat package)
python3.11-url-normalize (Red Hat package)
python3.11-drf-access-policy (Red Hat package)
python3.11-nginx (Red Hat package)
receptor (Red Hat package)
python3.11-uamqp (Red Hat package)
python3.11-websocket-client (Red Hat package)
python3.11-distro (Red Hat package)
python3.11-yarl (Red Hat package)
python3.11-pydantic (Red Hat package)
python3.11-rq (Red Hat package)
python3.11-django-storages (Red Hat package)
python3.11-markuppy (Red Hat package)
python3.11-wrapt (Red Hat package)
python3.11-python3-saml (Red Hat package)
python3.11-opentelemetry (Red Hat package)
python3.11-opentelemetry-contrib (Red Hat package)
python3.11-urllib3 (Red Hat package)
python3.11-azure-core (Red Hat package)
python3.11-boto3 (Red Hat package)
python3.11-botocore (Red Hat package)
yamllint (Red Hat package)
python3.11-grpcio (Red Hat package)
python3.11-googleapis-common-protos (Red Hat package)
python3.11-croniter (Red Hat package)
pulpcore-selinux (Red Hat package)
python3.11-xlrd (Red Hat package)
python3.11-async-lru (Red Hat package)
python3.11-execnet (Red Hat package)
python3.11-markupsafe (Red Hat package)
python3.11-dpath (Red Hat package)
python3.11-backoff (Red Hat package)
python3.11-django-prometheus (Red Hat package)
python3.11-daemon (Red Hat package)
ansible-runner (Red Hat package)
python3.11-bracex (Red Hat package)
ansible-dev-tools (Red Hat package)
ansible-automation-platform-installer (Red Hat package)
python3.11-pygtrie (Red Hat package)
python3.11-django-ansible-base (Red Hat package)
automation-gateway (Red Hat package)
automation-platform-ui (Red Hat package)
python3.11-pyjwt (Red Hat package)
python3.11-django-rq (Red Hat package)
python3.11-dateutil (Red Hat package)
python3.11-psycopg2 (Red Hat package)
python3.11-semantic-version (Red Hat package)
bindep (Red Hat package)
python3.11-pycodestyle (Red Hat package)
python3.11-pulp-container (Red Hat package)
ansible-core (Red Hat package)
python3.11-pygments (Red Hat package)
python3.11-google-auth (Red Hat package)
python3.11-requests (Red Hat package)
python3.11-watchdog (Red Hat package)
ansible-builder (Red Hat package)
python3.11-django-ipware (Red Hat package)
python3.11-pyflakes (Red Hat package)
python3.11-django-picklefield (Red Hat package)
python3.11-pyparsing (Red Hat package)
python3.11-aiodns (Red Hat package)
python3.11-openpyxl (Red Hat package)
python3.11-jinja2 (Red Hat package)
python3.11-dynaconf (Red Hat package)
python3.11-psycopg (Red Hat package)
python3.11-gitpython (Red Hat package)
python3.11-python3-openid (Red Hat package)
python3.11-oauthlib (Red Hat package)
python3.11-bleach (Red Hat package)
python3.11-django-import-export (Red Hat package)
python3.11-django-guid (Red Hat package)
ansible-navigator (Red Hat package)
python3.11-ldap (Red Hat package)
python3.11-tablib (Red Hat package)
python3.11-markdown (Red Hat package)
python3.11-asgiref (Red Hat package)
python3.11-pytest-xdist (Red Hat package)
python3.11-aiohttp (Red Hat package)
python3.11-filelock (Red Hat package)
python3.11-djangorestframework (Red Hat package)
python3.11-zipp (Red Hat package)
python3.11-pycryptodomex (Red Hat package)
python3.11-marshmallow (Red Hat package)
python3.11-pulpcore (Red Hat package)
python3.11-django-auth-ldap (Red Hat package)
python3.11-channels (Red Hat package)
python3.11-daphne (Red Hat package)
python3.11-async-timeout (Red Hat package)
python3.11-gitdb (Red Hat package)
python3.11-uritemplate (Red Hat package)
python3.11-ansible-compat (Red Hat package)
python3.11-platformdirs (Red Hat package)
supervisor (Red Hat package)
python3.11-django (Red Hat package)
python3.11-pycares (Red Hat package)
python3.11-social-auth-core (Red Hat package)
automation-controller (Red Hat package)
python3.11-redis (Red Hat package)
python3.11-typing-extensions (Red Hat package)
python3.11-pexpect (Red Hat package)
python3.11-rsa (Red Hat package)
python3.11-galaxy-ng (Red Hat package)
automation-hub (Red Hat package)
python3.11-jsonschema (Red Hat package)
python3.11-protobuf (Red Hat package)
python3.11-smmap (Red Hat package)
python3.11-chardet (Red Hat package)
python3.11-djangorestframework-simplejwt (Red Hat package)
python3.11-cachetools (Red Hat package)
python3.11-podman (Red Hat package)
python3.11-social-auth-app-django (Red Hat package)
python3.11-pbr (Red Hat package)
python3.11-importlib-metadata (Red Hat package)
molecule (Red Hat package)
python3.11-multidict (Red Hat package)
python3.11-flake8 (Red Hat package)
python3.11-zope-interface (Red Hat package)
python3.11-whitenoise (Red Hat package)
ansible-lint (Red Hat package)
python3.11-click (Red Hat package)
python3.11-wcmatch (Red Hat package)
python3.11-pytest (Red Hat package)
python3.11-pillow (Red Hat package)
python3.11-websockets (Red Hat package)
python3.11-azure-storage-blob (Red Hat package)
python3.11-rich (Red Hat package)
python3.11-constantly (Red Hat package)
python3.11-hyperlink (Red Hat package)
python3.11-service-identity (Red Hat package)
python3.11-gunicorn (Red Hat package)
python3.11-attrs (Red Hat package)
python3.11-Automat (Red Hat package)
python3.11-black (Red Hat package)
python3.11-txaio (Red Hat package)
python3.11-packaging (Red Hat package)
python3.11-aiofiles (Red Hat package)
python3.11-django-filter (Red Hat package)
python3.11-autobahn (Red Hat package)
python3.11-pyOpenSSL (Red Hat package)
python3.11-twisted (Red Hat package)
python3.11-incremental (Red Hat package)
ansible-creator (Red Hat package)
python3.11-pytest-ansible (Red Hat package)
python3.11-tox-ansible (Red Hat package)
ansible-dev-environment (Red Hat package)
python3.11-kubernetes (Red Hat package)
python3.11-cryptography (Red Hat package)
python3.11-certifi (Red Hat package)
python3.11-pytz (Red Hat package)
python3.11-uuid6 (Red Hat package)
python3.11-diff-match-patch (Red Hat package)

Install updates from vendor's website.

quic-go - addressed in versions 0.49.1, 0.54.1, 0.55.0
Ansible Automation Platform - addressed in versions 2.4, 2.5, 2.6
ansible-sign (Red Hat package) - addressed in versions 0.1.1-2.el8ap, 0.1.1-2.el9ap, 0.1.4-1.el8ap, 0.1.4-1.el9ap
python3.11-requirements-parser (Red Hat package) - addressed in versions 0.2.0-5.el8ap, 0.2.0-5.el9ap
python3.11-ruamel-yaml-clib (Red Hat package) - addressed in versions 0.2.8-1.el8ap, 0.2.8-1.el9ap, 0.2.15-1.el8ap, 0.2.15-1.el9ap
python3.11-pyasn1-modules (Red Hat package) - addressed in versions 0.3.0-1.el8ap, 0.3.0-1.el9ap
python3.11-insights-analytics-collector (Red Hat package) - addressed in versions 0.3.2-2.el8ap, 0.3.2-2.el9ap
python3.11-distlib (Red Hat package) - addressed in versions 0.3.8-1.el8ap, 0.3.8-1.el9ap, 0.4.0-1.el8ap, 0.4.0-1.el9ap
python3.11-drools-jpy (Red Hat package) - addressed in versions 0.3.9-2.el8ap, 0.3.9-2.el9ap
aap-metrics-utility (Red Hat package) - addressed in versions 0.4.1-1.1.el8ap, 0.4.1-1.1.el9ap
python3.11-subprocess-tee (Red Hat package) - addressed in versions 0.4.1-2.el8ap, 0.4.1-2.el9ap, 0.4.2-1.el8ap, 0.4.2-1.el9ap
python3.11-galaxy-importer (Red Hat package) - addressed in versions 0.4.18-2.el8ap, 0.4.18-2.el9ap, 0.4.36-2.el8ap, 0.4.36-2.el9ap
python3.11-pyasn1 (Red Hat package) - addressed in versions 0.5.1-1.el8ap, 0.5.1-1.el9ap
python3.11-inflection (Red Hat package) - addressed in versions 0.5.1-4.el8ap, 0.5.1-4.el9ap
python3.11-webencodings (Red Hat package) - addressed in versions 0.5.1-4.el8ap, 0.5.1-4.el9ap
python3.11-gnupg (Red Hat package) - addressed in versions 0.5.2-1.el8ap, 0.5.2-1.el9ap
python3.11-sqlparse (Red Hat package) - addressed in versions 0.5.3-2.el8ap, 0.5.3-2.el9ap
python3.11-isodate (Red Hat package) - addressed in versions 0.6.1-2.el8ap, 0.6.1-2.el9ap
python3.11-ptyprocess (Red Hat package) - addressed in versions 0.7.0-1.el8ap, 0.7.0-1.el9ap
python3.11-mccabe (Red Hat package) - addressed in versions 0.7.0-2.el8ap, 0.7.0-2.el9ap
python3.11-defusedxml (Red Hat package) - addressed in versions 0.7.1-4.el8ap, 0.7.1-4.el9ap
python3.11-django-crum (Red Hat package) - addressed in versions 0.7.9-2.el8ap, 0.7.9-2.el9ap
python3.11-tabulate (Red Hat package) - addressed in versions 0.9.0-3.el8ap, 0.9.0-3.el9ap
python3.11-commonmark (Red Hat package) - addressed in versions 0.9.1-6.el8ap, 0.9.1-6.el9ap
python3.11-click-help-colors (Red Hat package) - addressed in versions 0.9.4-1.el8ap, 0.9.4-1.el9ap
python3.11-s3transfer (Red Hat package) - addressed in versions 0.10.0-1.el8ap, 0.10.0-1.el9ap
python3.11-rq-scheduler (Red Hat package) - addressed in versions 0.10.0-3.el8ap, 0.10.0-3.el9ap
python3.11-pathspec (Red Hat package) - addressed in versions 0.12.1-1.el8ap, 0.12.1-1.el9ap
python3.11-lockfile (Red Hat package) - addressed in versions 0.12.2-2.el8ap, 0.12.2-2.el9ap
python3.11-jpy (Red Hat package) - addressed in versions 0.15.0-1.el8ap, 0.15.0-1.el9ap
python3.11-ruamel-yaml (Red Hat package) - addressed in versions 0.17.40-2.el8ap, 0.17.40-2.el9ap
python3.11-future (Red Hat package) - addressed in versions 0.18.3-2.el8ap, 0.18.3-2.el9ap
python3.11-prometheus-client (Red Hat package) - addressed in versions 0.19.0-1.el8ap, 0.19.0-1.el9ap
python3.11-pyrsistent (Red Hat package) - addressed in versions 0.20.0-1.el8ap, 0.20.0-1.el9ap
python3.11-docutils (Red Hat package) - addressed in versions 0.20.1-2.el8ap, 0.20.1-2.el9ap
python3.11-pulp-ansible (Red Hat package) - addressed in versions 0.20.11-2.el8ap, 0.20.11-2.el9ap
python3.11-pulp-glue (Red Hat package) - addressed in versions 0.23.2-1.el8ap, 0.23.2-1.el9ap
python3.11-drf-spectacular (Red Hat package) - addressed in versions 0.26.5-2.el8ap, 0.26.5-2.el9ap
python3.11-drf-nested-routers (Red Hat package) - addressed in versions 0.93.5-1.el8ap, 0.93.5-1.el9ap
python3.11-mypy-extensions (Red Hat package) - addressed in versions 1.0.0-1.el8ap, 1.0.0-1.el9ap
python3.11-ansible-sdk (Red Hat package) - addressed in versions 1.0.0-2.el8ap, 1.0.0-2.el9ap
python3.11-janus (Red Hat package) - addressed in versions 1.0.0-2.el8ap, 1.0.0-2.el9ap
python3.11-resolvelib (Red Hat package) - addressed in versions 1.0.1-1.el8ap, 1.0.1-1.el9ap
python3.11-jmespath (Red Hat package) - addressed in versions 1.0.1-2.el8ap, 1.0.1-2.el9ap
python3.11-asyncio-throttle (Red Hat package) - addressed in versions 1.0.2-4.el8ap, 1.0.2-4.el9ap
python3.11-bleach-allowlist (Red Hat package) - addressed in versions 1.0.3-4.el8ap, 1.0.3-4.el9ap
automation-controller-fapolicyd (Red Hat package) - addressed in versions 1.0-5.el8ap, 1.0-5.el9ap
automation-eda-controller (Red Hat package) - addressed in versions 1.0.8-1.el8ap, 1.0.8-1.el9ap, 1.1.14-1.el8ap, 1.1.14-1.el9ap, 1.2.2-1.el9ap
ansible-rulebook (Red Hat package) - addressed in versions 1.0.8-4.el8ap, 1.0.8-4.el9ap
python3.11-djangorestframework-queryfields (Red Hat package) - addressed in versions 1.1.0-1.el8ap, 1.1.0-1.el9ap
python3.11-brotli (Red Hat package) - addressed in versions 1.1.0-1.el8ap, 1.1.0-1.el9ap
python3.11-et-xmlfile (Red Hat package) - addressed in versions 1.1.0-3.el8ap, 1.1.0-3.el9ap
python3.11-naya (Red Hat package) - addressed in versions 1.1.1-2.el8ap, 1.1.1-2.el9ap
python3.11-django-lifecycle (Red Hat package) - addressed in versions 1.1.2-1.el8ap, 1.1.2-1.el9ap
python3.11-django-split-settings (Red Hat package) - addressed in versions 1.2.0-2.el8ap, 1.2.0-2.el9ap
python3.11-ansible-pylibssh (Red Hat package) - addressed in versions 1.2.2-1.el8ap, 1.2.2-1.el9ap
python3.11-enrich (Red Hat package) - addressed in versions 1.2.7-2.el8ap, 1.2.7-2.el9ap
python3.11-deprecated (Red Hat package) - addressed in versions 1.2.14-1.el8ap, 1.2.14-1.el9ap
python3.11-onigurumacffi (Red Hat package) - addressed in versions 1.3.0-1.el8ap, 1.3.0-1.el9ap
python3.11-xlwt (Red Hat package) - addressed in versions 1.3.0-4.el8ap, 1.3.0-4.el9ap
python3.11-aiosignal (Red Hat package) - addressed in versions 1.3.1-1.el8ap, 1.3.1-1.el9ap
python3.11-requests-oauthlib (Red Hat package) - addressed in versions 1.3.1-1.el8ap, 1.3.1-1.el9ap
python3.11-parsley (Red Hat package) - addressed in versions 1.3-3.el8ap, 1.3-3.el9ap
python3.11-xmlsec (Red Hat package) - addressed in versions 1.3.13-2.el8ap, 1.3.13-2.el9ap
python3.11-frozenlist (Red Hat package) - addressed in versions 1.4.0-1.el8ap, 1.4.0-1.el9ap
python3.11-pluggy (Red Hat package) - addressed in versions 1.4.0-1.el8ap, 1.4.0-1.el9ap, 1.6.0-1.el8ap, 1.6.0-1.el9ap
python3.11-odfpy (Red Hat package) - addressed in versions 1.4.1-8.el8ap, 1.4.1-8.el9ap
python3.11-pyjwkest (Red Hat package) - addressed in versions 1.4.2-7.el8ap, 1.4.2-7.el9ap
python3.11-url-normalize (Red Hat package) - addressed in versions 1.4.3-5.el8ap, 1.4.3-5.el9ap
python3.11-drf-access-policy (Red Hat package) - addressed in versions 1.5.0-1.el8ap, 1.5.0-1.el9ap
python3.11-nginx (Red Hat package) - update to 1.5.7-2.el8ap
receptor (Red Hat package) - addressed in versions 1.6.2-1.el8ap, 1.6.2-1.el9ap, 1.6.2-2.el9ap
python3.11-uamqp (Red Hat package) - addressed in versions 1.6.8-1.el8ap, 1.6.8-1.el9ap
python3.11-websocket-client (Red Hat package) - addressed in versions 1.7.0-2.el8ap, 1.7.0-2.el9ap
python3.11-distro (Red Hat package) - addressed in versions 1.9.0-1.el8ap, 1.9.0-1.el9ap
python3.11-yarl (Red Hat package) - addressed in versions 1.9.2-1.el8ap, 1.9.2-1.el9ap
python3.11-pydantic (Red Hat package) - addressed in versions 1.10.15-1.el8ap, 1.10.15-1.el9ap
python3.11-rq (Red Hat package) - addressed in versions 1.13.0-3.el8ap, 1.13.0-3.el9ap
python3.11-django-storages (Red Hat package) - update to 1.14.2-2.el8ap
python3.11-markuppy (Red Hat package) - addressed in versions 1.14-4.el8ap, 1.14-4.el9ap
python3.11-wrapt (Red Hat package) - addressed in versions 1.16.0-1.el8ap, 1.16.0-1.el9ap
python3.11-python3-saml (Red Hat package) - addressed in versions 1.16.0-2.el8ap, 1.16.0-2.el9ap
python3.11-opentelemetry (Red Hat package) - addressed in versions 1.18.0-2.el8ap, 1.18.0-2.el9ap
python3.11-opentelemetry-contrib (Red Hat package) - addressed in versions 1.18.0-6.el8ap, 1.18.0-6.el9ap
python3.11-urllib3 (Red Hat package) - addressed in versions 1.26.20-1.el8ap, 1.26.20-1.el9ap
python3.11-azure-core (Red Hat package) - update to 1.29.7-1.el8ap
python3.11-boto3 (Red Hat package) - addressed in versions 1.34.30-1.el8ap, 1.34.30-1.el9ap
python3.11-botocore (Red Hat package) - addressed in versions 1.34.30-1.el8ap, 1.34.30-1.el9ap
yamllint (Red Hat package) - addressed in versions 1.35.1-1.el8ap, 1.35.1-1.el9ap
python3.11-grpcio (Red Hat package) - addressed in versions 1.58.3-1.el8ap, 1.58.3-1.el9ap
python3.11-googleapis-common-protos (Red Hat package) - addressed in versions 1.59.1-2.el8ap, 1.59.1-2.el9ap
python3.11-croniter (Red Hat package) - addressed in versions 2.0.1-1.el8ap, 2.0.1-1.el9ap
pulpcore-selinux (Red Hat package) - addressed in versions 2.0.1-1.el8ap, 2.0.1-1.el9ap
python3.11-xlrd (Red Hat package) - addressed in versions 2.0.1-6.el8ap, 2.0.1-6.el9ap
python3.11-async-lru (Red Hat package) - addressed in versions 2.0.4-1.el8ap, 2.0.4-1.el9ap
python3.11-execnet (Red Hat package) - addressed in versions 2.1.2-1.el8ap, 2.1.2-1.el9ap
python3.11-markupsafe (Red Hat package) - addressed in versions 2.1.5-1.el8ap, 2.1.5-1.el9ap
python3.11-dpath (Red Hat package) - addressed in versions 2.1.6-1.el8ap, 2.1.6-1.el9ap
python3.11-backoff (Red Hat package) - addressed in versions 2.2.1-1.el8ap, 2.2.1-1.el9ap
python3.11-django-prometheus (Red Hat package) - addressed in versions 2.3.1-2.el8ap, 2.3.1-2.el9ap
python3.11-daemon (Red Hat package) - addressed in versions 2.3.2-1.el8ap, 2.3.2-1.el9ap
ansible-runner (Red Hat package) - addressed in versions 2.3.7-1.el8ap, 2.3.7-1.el9ap, 2.4.2-1.el8ap, 2.4.2-1.el9ap, 2.4.2-2.el9ap
python3.11-bracex (Red Hat package) - addressed in versions 2.4-1.el8ap, 2.4-1.el9ap
ansible-dev-tools (Red Hat package) - addressed in versions 2.4-2.el8ap, 2.4-2.el9ap, 25.12.0-1.el8ap, 25.12.0-1.el9ap
ansible-automation-platform-installer (Red Hat package) - addressed in versions 2.4-14.el8ap, 2.4-14.el9ap, 2.5-20.el8ap, 2.5-20.el9ap, 2.6-3.1.el9ap
python3.11-pygtrie (Red Hat package) - addressed in versions 2.5.0-2.el8ap, 2.5.0-2.el9ap
python3.11-django-ansible-base (Red Hat package) - addressed in versions 2.5.20251210-1.el8ap, 2.5.20251210-1.el9ap, 2.6.20251119-1.el9ap, 2024.1.31-3.el8ap, 2024.1.31-3.el9ap
automation-gateway (Red Hat package) - addressed in versions 2.5.20251210-1.el8ap, 2.5.20251210-1.el9ap, 2.6.20251119-1.el9ap
automation-platform-ui (Red Hat package) - update to 2.6.3-1.el9ap
python3.11-pyjwt (Red Hat package) - addressed in versions 2.7.0-2.el8ap, 2.7.0-2.el9ap
python3.11-django-rq (Red Hat package) - addressed in versions 2.8.0-1.el8ap, 2.8.0-1.el9ap
python3.11-dateutil (Red Hat package) - addressed in versions 2.8.2-2.el8ap, 2.8.2-2.el9ap
python3.11-psycopg2 (Red Hat package) - addressed in versions 2.9.3-4.el8ap, 2.9.3-4.el9ap
python3.11-semantic-version (Red Hat package) - addressed in versions 2.10.0-2.el8ap, 2.10.0-2.el9ap
bindep (Red Hat package) - addressed in versions 2.11.0-2.el8ap, 2.11.0-2.el9ap, 2.13.0-1.el8ap, 2.13.0-1.el9ap
python3.11-pycodestyle (Red Hat package) - addressed in versions 2.11.1-1.el8ap, 2.11.1-1.el9ap
python3.11-pulp-container (Red Hat package) - addressed in versions 2.15.5-2.el8ap, 2.15.5-2.el9ap
ansible-core (Red Hat package) - addressed in versions 2.15.13-2.el8ap, 2.15.13-2.el9ap
python3.11-pygments (Red Hat package) - addressed in versions 2.17.2-2.el8ap, 2.17.2-2.el9ap
python3.11-google-auth (Red Hat package) - addressed in versions 2.27.0-1.el8ap, 2.27.0-1.el9ap
python3.11-requests (Red Hat package) - addressed in versions 2.31.0-2.el8ap, 2.31.0-2.el9ap
python3.11-watchdog (Red Hat package) - addressed in versions 3.0.0-3.el8ap, 3.0.0-3.el9ap
ansible-builder (Red Hat package) - addressed in versions 3.0.1-2.el8ap, 3.0.1-2.el9ap, 3.1.1-1.el8ap, 3.1.1-1.el9ap
python3.11-django-ipware (Red Hat package) - addressed in versions 3.0.7-3.el8ap, 3.0.7-3.el9ap
python3.11-pyflakes (Red Hat package) - addressed in versions 3.1.0-1.el8ap, 3.1.0-1.el9ap
python3.11-django-picklefield (Red Hat package) - addressed in versions 3.1-1.el8ap, 3.1-1.el9ap
python3.11-pyparsing (Red Hat package) - addressed in versions 3.1.1-1.el8ap, 3.1.1-1.el9ap
python3.11-aiodns (Red Hat package) - addressed in versions 3.1.1-1.el8ap, 3.1.1-1.el9ap
python3.11-openpyxl (Red Hat package) - addressed in versions 3.1.2-1.el8ap, 3.1.2-1.el9ap
python3.11-jinja2 (Red Hat package) - addressed in versions 3.1.6-1.el8ap, 3.1.6-1.el9ap
python3.11-dynaconf (Red Hat package) - addressed in versions 3.1.12-4.el8ap, 3.1.12-4.el9ap
python3.11-psycopg (Red Hat package) - addressed in versions 3.1.17-3.el8ap, 3.1.17-3.el9ap
python3.11-gitpython (Red Hat package) - addressed in versions 3.1.41-1.el8ap, 3.1.41-1.el9ap
python3.11-python3-openid (Red Hat package) - addressed in versions 3.2.0-3.el8ap, 3.2.0-3.el9ap
python3.11-oauthlib (Red Hat package) - addressed in versions 3.2.2-1.el8ap, 3.2.2-1.el9ap
python3.11-bleach (Red Hat package) - addressed in versions 3.3.1-3.el8ap, 3.3.1-3.el9ap
python3.11-django-import-export (Red Hat package) - addressed in versions 3.3.6-2.el8ap, 3.3.6-2.el9ap
python3.11-django-guid (Red Hat package) - addressed in versions 3.4.0-1.el8ap, 3.4.0-1.el9ap
ansible-navigator (Red Hat package) - addressed in versions 3.4.1-3.el8ap, 3.4.1-3.el9ap, 25.12.0-1.el8ap, 25.12.0-1.el9ap
python3.11-ldap (Red Hat package) - addressed in versions 3.4.4-1.el8ap, 3.4.4-1.el9ap
python3.11-tablib (Red Hat package) - addressed in versions 3.5.0-1.el8ap, 3.5.0-1.el9ap
python3.11-markdown (Red Hat package) - addressed in versions 3.5.2-1.el8ap, 3.5.2-1.el9ap
python3.11-asgiref (Red Hat package) - addressed in versions 3.7.2-1.el8ap, 3.7.2-1.el9ap
python3.11-pytest-xdist (Red Hat package) - addressed in versions 3.8.0-1.el8ap, 3.8.0-1.el9ap
python3.11-aiohttp (Red Hat package) - addressed in versions 3.9.5-1.el8ap, 3.9.5-1.el9ap
python3.11-filelock (Red Hat package) - addressed in versions 3.13.1-1.el8ap, 3.13.1-1.el9ap
python3.11-djangorestframework (Red Hat package) - addressed in versions 3.14.0-2.el8ap, 3.14.0-2.el9ap
python3.11-zipp (Red Hat package) - addressed in versions 3.19.2-1.el8ap, 3.19.2-1.el9ap
python3.11-pycryptodomex (Red Hat package) - addressed in versions 3.20.0-2.el8ap, 3.20.0-2.el9ap
python3.11-marshmallow (Red Hat package) - addressed in versions 3.20.2-1.el8ap, 3.20.2-1.el9ap
python3.11-pulpcore (Red Hat package) - addressed in versions 3.28.37-2.el8ap, 3.28.37-2.el9ap
python3.11-django-auth-ldap (Red Hat package) - addressed in versions 4.0.0-2.el8ap, 4.0.0-2.el9ap
python3.11-channels (Red Hat package) - addressed in versions 4.0.0-3.el8ap, 4.0.0-3.el9ap
python3.11-daphne (Red Hat package) - addressed in versions 4.0.0-3.el8ap, 4.0.0-3.el9ap
python3.11-async-timeout (Red Hat package) - addressed in versions 4.0.3-2.el8ap, 4.0.3-2.el9ap
python3.11-gitdb (Red Hat package) - addressed in versions 4.0.11-1.el8ap, 4.0.11-1.el9ap
python3.11-uritemplate (Red Hat package) - addressed in versions 4.1.1-3.el8ap, 4.1.1-3.el9ap
python3.11-ansible-compat (Red Hat package) - addressed in versions 4.1.11-2.el8ap, 4.1.11-2.el9ap, 25.12.0-1.el8ap, 25.12.0-1.el9ap
python3.11-platformdirs (Red Hat package) - addressed in versions 4.2.0-1.el8ap, 4.2.0-1.el9ap
supervisor (Red Hat package) - addressed in versions 4.2.5-1.el8ap, 4.2.5-1.el9ap
python3.11-django (Red Hat package) - addressed in versions 4.2.25-1.el8ap, 4.2.25-1.el9ap, 4.2.26-1.el8ap, 4.2.26-1.el9ap
python3.11-pycares (Red Hat package) - addressed in versions 4.4.0-2.el8ap, 4.4.0-2.el9ap
python3.11-social-auth-core (Red Hat package) - addressed in versions 4.5.4-1.el8ap, 4.5.4-1.el9ap
automation-controller (Red Hat package) - addressed in versions 4.5.27-1.el8ap, 4.5.27-1.el9ap, 4.6.23-1.el8ap, 4.6.23-1.el9ap, 4.7.5-1.el9ap
python3.11-redis (Red Hat package) - addressed in versions 4.6.0-2.el8ap, 4.6.0-2.el9ap
python3.11-typing-extensions (Red Hat package) - addressed in versions 4.9.0-1.el8ap, 4.9.0-1.el9ap, 4.15.0-1.el8ap, 4.15.0-1.el9ap
python3.11-pexpect (Red Hat package) - addressed in versions 4.9.0-1.el8ap, 4.9.0-1.el9ap
python3.11-rsa (Red Hat package) - addressed in versions 4.9-2.el8ap, 4.9-2.el9ap
python3.11-galaxy-ng (Red Hat package) - addressed in versions 4.9.5-2.el8ap, 4.9.5-2.el9ap, 4.10.10-1.el8ap, 4.10.10-1.el9ap, 4.11.3-1.el9ap
automation-hub (Red Hat package) - addressed in versions 4.9.5-2.el8ap, 4.9.5-2.el9ap, 4.10.10-1.el8ap, 4.10.10-1.el9ap, 4.11.3-1.el9ap
python3.11-jsonschema (Red Hat package) - addressed in versions 4.17.3-1.el8ap, 4.17.3-1.el9ap
python3.11-protobuf (Red Hat package) - addressed in versions 4.21.12-2.el8ap, 4.21.12-2.el9ap
python3.11-smmap (Red Hat package) - addressed in versions 5.0.1-1.el8ap, 5.0.1-1.el9ap
python3.11-chardet (Red Hat package) - addressed in versions 5.2.0-2.el8ap, 5.2.0-2.el9ap
python3.11-djangorestframework-simplejwt (Red Hat package) - addressed in versions 5.3.1-2.el8ap, 5.3.1-2.el9ap
python3.11-cachetools (Red Hat package) - addressed in versions 5.3.2-1.el8ap, 5.3.2-1.el9ap
python3.11-podman (Red Hat package) - addressed in versions 5.4.0.1-1.el8ap, 5.4.0.1-1.el9ap
python3.11-social-auth-app-django (Red Hat package) - addressed in versions 5.4.1-1.el8ap, 5.4.1-1.el9ap
python3.11-pbr (Red Hat package) - addressed in versions 6.0.0-2.el8ap, 6.0.0-2.el9ap
python3.11-importlib-metadata (Red Hat package) - addressed in versions 6.0.1-2.el8ap, 6.0.1-2.el9ap
molecule (Red Hat package) - addressed in versions 6.0.2-3.el8ap, 6.0.2-3.el9ap, 25.12.0-1.el8ap, 25.12.0-1.el9ap
python3.11-multidict (Red Hat package) - addressed in versions 6.0.4-1.el8ap, 6.0.4-1.el9ap
python3.11-flake8 (Red Hat package) - addressed in versions 6.1.0-2.el8ap, 6.1.0-2.el9ap
python3.11-zope-interface (Red Hat package) - addressed in versions 6.1-1.el8ap, 6.1-1.el9ap
python3.11-whitenoise (Red Hat package) - addressed in versions 6.6.0-1.el8ap, 6.6.0-1.el9ap
ansible-lint (Red Hat package) - addressed in versions 6.14.3-5.el8ap, 6.14.3-5.el9ap, 25.12.0-1.el8ap, 25.12.0-1.el9ap
python3.11-click (Red Hat package) - addressed in versions 8.1.7-1.el8ap, 8.1.7-1.el9ap
python3.11-wcmatch (Red Hat package) - addressed in versions 8.5-1.el8ap, 8.5-1.el9ap
python3.11-pytest (Red Hat package) - addressed in versions 9.0.1-1.el8ap, 9.0.1-1.el9ap
python3.11-pillow (Red Hat package) - addressed in versions 10.3.0-1.el8ap, 10.3.0-1.el9ap
python3.11-websockets (Red Hat package) - addressed in versions 10.4-2.el8ap, 10.4-2.el9ap
python3.11-azure-storage-blob (Red Hat package) - update to 12.19.0-1.el8ap
python3.11-rich (Red Hat package) - addressed in versions 13.1.0-1.el8ap, 13.1.0-1.el9ap
python3.11-constantly (Red Hat package) - addressed in versions 15.1.0-2.el8ap, 15.1.0-2.el9ap
python3.11-hyperlink (Red Hat package) - addressed in versions 21.0.0-2.el8ap, 21.0.0-2.el9ap
python3.11-service-identity (Red Hat package) - addressed in versions 21.1.0-2.el8ap, 21.1.0-2.el9ap
python3.11-gunicorn (Red Hat package) - addressed in versions 22.0.0-1.el8ap, 22.0.0-1.el9ap, 23.0.0-1.el8ap, 23.0.0-1.el9ap
python3.11-attrs (Red Hat package) - addressed in versions 22.2.0-1.el8ap, 22.2.0-1.el9ap
python3.11-Automat (Red Hat package) - addressed in versions 22.10.0-3.el8ap, 22.10.0-3.el9ap
python3.11-black (Red Hat package) - addressed in versions 22.12.0-2.el8ap, 22.12.0-2.el9ap
python3.11-txaio (Red Hat package) - addressed in versions 23.1.1-2.el8ap, 23.1.1-2.el9ap
python3.11-packaging (Red Hat package) - addressed in versions 23.2-1.el8ap, 23.2-1.el9ap
python3.11-aiofiles (Red Hat package) - addressed in versions 23.2.1-1.el8ap, 23.2.1-1.el9ap
python3.11-django-filter (Red Hat package) - addressed in versions 23.5-1.el8ap, 23.5-1.el9ap
python3.11-autobahn (Red Hat package) - addressed in versions 23.6.2-2.el8ap, 23.6.2-2.el9ap
python3.11-pyOpenSSL (Red Hat package) - addressed in versions 24.1.0-1.el8ap, 24.1.0-1.el9ap
python3.11-twisted (Red Hat package) - addressed in versions 24.7.0-1.el8ap, 24.7.0-1.el9ap
python3.11-incremental (Red Hat package) - addressed in versions 24.7.2-1.el8ap, 24.7.2-1.el9ap
ansible-creator (Red Hat package) - addressed in versions 25.8.0-2.el9ap, 25.12.0-1.el8ap, 25.12.0-1.el9ap
python3.11-pytest-ansible (Red Hat package) - addressed in versions 25.12.0-1.el8ap, 25.12.0-1.el9ap
python3.11-tox-ansible (Red Hat package) - addressed in versions 25.12.0-1.2.el8ap, 25.12.0-1.2.el9ap
ansible-dev-environment (Red Hat package) - addressed in versions 25.12.2-1.1.el8ap, 25.12.2-1.1.el9ap
python3.11-kubernetes (Red Hat package) - addressed in versions 26.1.0-2.el8ap, 26.1.0-2.el9ap
python3.11-cryptography (Red Hat package) - addressed in versions 42.0.5-1.el8ap, 42.0.5-1.el9ap
python3.11-certifi (Red Hat package) - addressed in versions 2023.5.7-1.el8ap, 2023.5.7-1.el9ap
python3.11-pytz (Red Hat package) - addressed in versions 2024.1-1.el8ap, 2024.1-1.el9ap
python3.11-uuid6 (Red Hat package) - addressed in versions 2024.1.12-1.el8ap, 2024.1.12-1.el9ap
python3.11-diff-match-patch (Red Hat package) - addressed in versions 20230430-1.el8ap, 20230430-1.el9ap

• https://github.com/quic-go/quic-go/security/advisories/GHSA-47m2-4cr7-mhcw

• Denial of service in quic-go
• Reachable assertion in Ansible Automation Platform 2.4 packages
• Reachable assertion in Ansible Automation Platform 2.6 packages
• Multiple vulnerabilities in Submariner
• Multiple vulnerabilities in Red Hat Ansible Automation Platform 2.6
• Multiple vulnerabilities in Ansible Automation Platform 2.5 packages