RHSA-2025:0777
- Source
- https://access.redhat.com/errata/RHSA-2025:0777
- Import Source
- https://security.access.redhat.com/data/osv/RHSA-2025:0777.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/RHSA-2025:0777
- Related
- Published
- 2025-01-29T10:04:09Z
- Modified
- 2025-01-29T10:04:09Z
- Severity
-
- 7.3 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
- Details
- References
-
- https://access.redhat.com/errata/RHSA-2025:0777
- https://access.redhat.com/security/updates/classification/#important
- https://bugzilla.redhat.com/show_bug.cgi?id=2329288
- https://bugzilla.redhat.com/show_bug.cgi?id=2333854
- https://bugzilla.redhat.com/show_bug.cgi?id=2333856
- https://bugzilla.redhat.com/show_bug.cgi?id=2337996
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0777.json
- https://access.redhat.com/security/cve/CVE-2024-53907
- https://www.cve.org/CVERecord?id=CVE-2024-53907
- https://nvd.nist.gov/vuln/detail/CVE-2024-53907
- https://www.djangoproject.com/weblog/2024/dec/04/security-releases/
- https://access.redhat.com/security/cve/CVE-2024-56201
- https://www.cve.org/CVERecord?id=CVE-2024-56201
- https://nvd.nist.gov/vuln/detail/CVE-2024-56201
- https://github.com/pallets/jinja/commit/767b23617628419ae3709ccfb02f9602ae9fe51f
- https://github.com/pallets/jinja/issues/1792
- https://github.com/pallets/jinja/releases/tag/3.1.5
- https://github.com/pallets/jinja/security/advisories/GHSA-gmj6-6f8f-6699
- https://access.redhat.com/security/cve/CVE-2024-56326
- https://www.cve.org/CVERecord?id=CVE-2024-56326
- https://nvd.nist.gov/vuln/detail/CVE-2024-56326
- https://github.com/pallets/jinja/commit/48b0687e05a5466a91cd5812d604fa37ad0943b4
- https://github.com/pallets/jinja/security/advisories/GHSA-q2x7-8rv6-6q7h
- https://access.redhat.com/security/cve/CVE-2024-56374
- https://www.cve.org/CVERecord?id=CVE-2024-56374
- https://nvd.nist.gov/vuln/detail/CVE-2024-56374
- http://www.openwall.com/lists/oss-security/2025/01/14/2
- https://docs.djangoproject.com/en/dev/releases/security/
- https://groups.google.com/g/django-announce
- https://www.djangoproject.com/weblog/2025/jan/14/security-releases/
Affected packages
Red Hat:ansible_automation_platform_developer:2.5::el8 / python3.11-django
Package
- Name
- python3.11-django
- Purl
- pkg:rpm/redhat/python3.11-django
Red Hat:ansible_automation_platform:2.5::el8 / python3.11-django
Package
- Name
- python3.11-django
- Purl
- pkg:rpm/redhat/python3.11-django
Red Hat:ansible_automation_platform_developer:2.5::el9 / python3.11-django
Package
- Name
- python3.11-django
- Purl
- pkg:rpm/redhat/python3.11-django
Red Hat:ansible_automation_platform:2.5::el9 / python3.11-django
Package
- Name
- python3.11-django
- Purl
- pkg:rpm/redhat/python3.11-django
Red Hat:ansible_automation_platform_developer:2.5::el8 / automation-controller-venv-tower
Package
- Name
- automation-controller-venv-tower
- Purl
- pkg:rpm/redhat/automation-controller-venv-tower
Red Hat:ansible_automation_platform_developer:2.5::el8 / python3.11-jinja2
Package
- Name
- python3.11-jinja2
- Purl
- pkg:rpm/redhat/python3.11-jinja2
Red Hat:ansible_automation_platform_inside:2.5::el8 / python3.11-jinja2
Package
- Name
- python3.11-jinja2
- Purl
- pkg:rpm/redhat/python3.11-jinja2
Red Hat:ansible_automation_platform:2.5::el8 / automation-controller-venv-tower
Package
- Name
- automation-controller-venv-tower
- Purl
- pkg:rpm/redhat/automation-controller-venv-tower
Red Hat:ansible_automation_platform:2.5::el8 / python3.11-jinja2
Package
- Name
- python3.11-jinja2
- Purl
- pkg:rpm/redhat/python3.11-jinja2
Red Hat:ansible_automation_platform_developer:2.5::el9 / automation-controller-venv-tower
Package
- Name
- automation-controller-venv-tower
- Purl
- pkg:rpm/redhat/automation-controller-venv-tower
Red Hat:ansible_automation_platform_developer:2.5::el9 / python3.11-jinja2
Package
- Name
- python3.11-jinja2
- Purl
- pkg:rpm/redhat/python3.11-jinja2
Red Hat:ansible_automation_platform_inside:2.5::el9 / python3.11-jinja2
Package
- Name
- python3.11-jinja2
- Purl
- pkg:rpm/redhat/python3.11-jinja2
Red Hat:ansible_automation_platform:2.5::el9 / automation-controller-venv-tower
Package
- Name
- automation-controller-venv-tower
- Purl
- pkg:rpm/redhat/automation-controller-venv-tower