Red Hat Security AdvisoryRHSA-2025:0721
Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update
Released 2025-01-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Ansible Automation Platform 2.4 for RHEL 8 automation-controller-venv-tower-4.5.17-1.el8ap, python39-jinja2-3.1.5-1.el8ap, python3x-jinja2-3.1.5-1.el8ap
- Red Hat Ansible Automation Platform 2.4 for RHEL 9 automation-controller-venv-tower-4.5.17-1.el9ap, python-jinja2-3.1.5-1.el9ap, python3-jinja2-3.1.5-1.el9ap
Fixes 3 records
Priority MEDIUM 52
An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01415 · Published 2024-12-06 · Partial fix · 5.0.10, 5.1.4 +1 CWE-89
Priority LOW 27
Jinja is an extensible templating engine.
CVSS 4.0MEDIUM 5.4· Local · Low privileges · User interaction · EPSS 0.00522 · Published 2024-12-23 · Partial fix · 3.1.5 CWE-1336
Priority LOW 26
Jinja is an extensible templating engine.
CVSS 4.0MEDIUM 5.4· Local · Low privileges · User interaction · EPSS 0.00307 · Published 2024-12-23 · Partial fix · 3.1.5 CWE-150