Red Hat Security Advisory

RHSA-2025:0777

Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

Released 2025-01-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Ansible Automation Platform 2.5 for RHEL 8 automation-controller-venv-tower-4.6.7-1.el8ap, python3.11-django-4.2.18-1.el8ap, python3.11-jinja2-3.1.5-1.el8ap
Red Hat Ansible Automation Platform 2.5 for RHEL 9 automation-controller-venv-tower-4.6.7-1.el9ap, python3.11-django-4.2.18-1.el9ap, python3.11-jinja2-3.1.5-1.el9ap

TI-2024-36078 CVE-2024-53907 · GHSA-8498-2h75-472j

MEDIUM 42

An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01388 Published 2024-12-06 Partial fix · 5.1.4, 4.2.17 +1 CWE-770

TI-2024-37331 CVE-2024-56374 · GHSA-qcgg-j2x8-h9g8

MEDIUM 41

An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01277 Published 2025-01-14 Partial fix · 4.2.18, 5.0.11 +1 CWE-770

TI-2024-37287 CVE-2024-56326 · GHSA-q2x7-8rv6-6q7h

LOW 27

Jinja is an extensible templating engine.

CVSS 4.0MEDIUM 5.4 Local Low privileges User interaction EPSS 0.00522 Published 2024-12-23 Partial fix · 3.1.5 CWE-1336

TI-2024-37171 CVE-2024-56201 · GHSA-gmj6-6f8f-6699

LOW 26

Jinja is an extensible templating engine.

CVSS 4.0MEDIUM 5.4 Local Low privileges User interaction EPSS 0.00307 Published 2024-12-23 Partial fix · 3.1.5 CWE-150