Red Hat Security Advisory

RHSA-2025:3160

Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

Released 2025-03-25 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Ansible Automation Platform 2.5 for RHEL 8 automation-controller-venv-tower-4.6.10-1.el8ap, python3.11-django-4.2.20-1.el8ap, python3.11-jinja2-3.1.6-1.el8ap
Red Hat Ansible Automation Platform 2.5 for RHEL 9 automation-controller-venv-tower-4.6.10-1.el9ap, python3.11-django-4.2.20-1.el9ap, python3.11-jinja2-3.1.6-1.el9ap

TI-2025-19633 CVE-2025-26699 · GHSA-p3fp-8748-vqfq

LOW 34

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0083 Published 2025-03-06 Partial fix · 4.2.20, 5.0.13 +1 CWE-770

TI-2025-20348 CVE-2025-27516 · GHSA-cpwx-vrp4-4pq7

LOW 27

Jinja is an extensible templating engine.

CVSS 4.0MEDIUM 5.4 Local Low privileges User interaction EPSS 0.00507 Published 2025-03-05 Partial fix · 3.1.6 CWE-1336