Red Hat Security AdvisoryRHSA-2025:0340
Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
Released 2025-01-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Ansible Automation Platform 2.5 for RHEL 8 automation-controller-venv-tower-4.6.6-1.el8ap, automation-gateway-server-2.5.20250115-1.el8ap, python3.11-aiohttp-3.10.11-1.el8ap
- Red Hat Ansible Automation Platform 2.5 for RHEL 9 automation-controller-venv-tower-4.6.6-1.el9ap, automation-gateway-server-2.5.20250115-1.el9ap, python3.11-aiohttp-3.10.11-1.el9ap
Fixes 5 records
Priority MEDIUM 52
An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01415 · Published 2024-12-06 · Partial fix · 5.0.10, 5.1.4 +1 CWE-89
Priority MEDIUM 42
An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01388 · Published 2024-12-06 · Partial fix · 5.1.4, 4.2.17 +1 CWE-770
Priority LOW 35
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00563 · Published 2024-11-18 · Partial fix · 3.10.11 CWE-444
Priority LOW 31
There exists a denial of service through Data corruption in gRPC-C++ - gRPC-C++ servers with transmit zero copy enabled through the channel arg GRPC_ARG_TCP_TX_ZEROCOPY_ENABLED can experience data corruption issues.
CVSS 4.0MEDIUM 6.9· Network · Low privileges · User interaction · EPSS 0.00572 · Published 2024-11-26 · Partial fix CWE-682
Priority LOW 21
nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00665 · Published 2024-12-09 · Partial fix · 5.0.9, 3.3.8 CWE-835
THREATIST.IORead the docs