Red Hat Security Advisory

RHSA-2024:8534

Red Hat Ansible Automation Platform 2.5 Product Release Update

Released 2024-10-28 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Ansible Automation Platform 2.5 for RHEL 8 automation-controller-venv-tower-4.6.2-1.el8ap, automation-gateway-server-2.5.3-1.el8ap, receptor-1.4.9-2.el8ap +1
Red Hat Ansible Automation Platform 2.5 for RHEL 9 automation-controller-venv-tower-4.6.2-1.el9ap, automation-gateway-server-2.5.3-1.el9ap, receptor-1.4.9-2.el9ap +1

TI-2024-30307 CVE-2024-45230 · GHSA-5hgc-2vfp-mqvc

MEDIUM 60

An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.25773 Published 2024-10-08 Partial fix · 5.1.1, 5.0.9 +1 CWE-120

TI-2024-28009 CVE-2024-41989 · GHSA-jh75-99hh-qvx9

MEDIUM 41

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.012 Published 2024-08-07 Partial fix · 5.0.8, 4.2.15 CWE-400

TI-2024-14782 CVE-2024-22189 · GHSA-c33x-xqrf-c478

MEDIUM 41

quic-go is an implementation of the QUIC protocol in Go.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01109 Published 2024-04-04 Partial fix · 0.42.0 CWE-770

TI-2024-09312 CVE-2024-10033 · GHSA-h596-hg59-cxrq

LOW 27

A vulnerability was found in aap-gateway.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00395 Published 2024-10-16 Fixed in 2.5.3, 2.5.3-1.el8ap +1 CWE-79