Red Hat Security Advisory

RHSA-2025:16487

Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

Released 2025-09-23 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Ansible Automation Platform 2.5 for RHEL 8 automation-controller-venv-tower-4.6.20-1.el8ap, python3.11-django-4.2.24-1.el8ap
Red Hat Ansible Automation Platform 2.5 for RHEL 9 automation-controller-venv-tower-4.6.20-1.el9ap, python3.11-django-4.2.24-1.el9ap

TI-2025-35707 CVE-2025-57833 · GHSA-6w2r-r2m5-xq5w

HIGH 70

An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.28271 Published 2025-09-03 Partial fix · 4.2.24, 5.1.12 +1 CWE-89

TI-2025-30733 CVE-2025-48432 · GHSA-7xr5-9hcq-chf9

LOW 26

An issue was discovered in Django 5.2 before 5.2.3, 5.1 before 5.1.11, and 4.2 before 4.2.23.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00807 Published 2025-06-05 Partial fix · 4.2.23, 5.1.11 +4 CWE-117