Red Hat Security Advisory

RHSA-2024:4522

Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

Released 2024-07-12 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Ansible Automation Platform 2.4 for RHEL 8 automation-controller-venv-tower-4.5.8-1.el8ap
Red Hat Ansible Automation Platform 2.4 for RHEL 9 automation-controller-venv-tower-4.5.8-1.el9ap

TI-2024-18683 CVE-2024-28102 · GHSA-j857-7rvv-vj97

MEDIUM 63

JWCrypto implements JWK, JWS, and JWE specifications using python-cryptography.

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.0098 Published 2024-03-06 Partial fix · 1.5.6 CWE-770

TI-2024-23267 CVE-2024-35195 · GHSA-9wx4-h78v-vm56

LOW 27

Requests is a HTTP library.

CVSS 3.1MEDIUM 5.6 Local High privileges User interaction EPSS 0.0034 Published 2024-05-20 Partial fix · 2.32.0 CWE-670

TI-2024-22522 CVE-2024-34064 · GHSA-h75v-3vvj-5mfj

LOW 26

Jinja is an extensible templating engine.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00979 Published 2024-05-06 Partial fix · 3.1.4 CWE-79