rhsa-2025:0777
Vulnerability from csaf_redhat
Published
2025-01-28 19:20
Modified
2025-02-13 21:33
Summary
Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
Notes
Topic
An update is now available for Red Hat Ansible Automation Platform 2.5
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language.
Security Fix(es):
* automation-controller: Jinja has a sandbox breakout through indirect reference to format method (CVE-2024-56326)
* automation-controller: Jinja has a sandbox breakout through malicious filenames (CVE-2024-56201)
* automation-controller: Django: potential denial-of-service vulnerability in IPv6 validation (CVE-2024-56374)
* python3.11-django: potential denial-of-service vulnerability in IPv6 validation (CVE-2024-56374)
* python3.11-django: Potential denial-of-service in django.utils.html.strip_tags() (CVE-2024-53907)
* python3.11-jinja2: Jinja has a sandbox breakout through indirect reference to format method (CVE-2024-56326)
* python3.11-jinja2: Jinja has a sandbox breakout through malicious filenames (CVE-2024-56201)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updates and fixes included:
Automation controller
* Fixed an issue where the order of source inventories was not respected by the ansible.controller collection (AAP-38524)
* Fixed an issue where an actively running job on an execution node may have had its folder deleted by a system task (AAP-38137)
* automation-controller has been updated to 4.6.7
Event-Driven Ansible:
* Fixed an issue where users were unable to filter Rule Audits by rulebook activation name (AAP-39253)
* Users are now able to create a new Event-Driven Ansible credential by copying an existing one (AAP-39249)
* Added support for file and env injectors for Credentials (AAP-39091)
* Fixed an issue where the input field of the injector configuration could not be empty (AAP-39086)
* Fixed an issue where the application version in the openapi spec was incorrectly set (AAP-38392)
* Fixed an issue where activations were not properly updated in some scenarios with a high load of the system (AAP-38374)
* automation-eda-controller has been updated to 1.1.4
Container-based Ansible Automation Platform
* Allow user to not provide the Postgresql admin account with external database (AAP-39077)
* Using PostgreSQL TLS certificate authentication with an external database is now available (AAP-38400)
* containerized installer setup has been updated to 2.5-9
RPM-based Ansible Automation Platform
* Fixed an issue where gateway could not be setup with custom SSL certificates (AAP-38985)
* Fixed an issue where the gateway services are not restarted when a dependency changes (AAP-38918)
* Fixed an issue where setting automationedacontroller_max_running_activations could cause the installer to fail (AAP-38708)
* ansible-automation-platform-installer and installer setup have been updated to 2.5-8
Additional changes:
* python3.11-django has been updated to 4.2.18
* python3.11-jinja2 has been updated to 3.1.5
* python3.11-pulpcore has been updated to 3.49.30
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update is now available for Red Hat Ansible Automation Platform 2.5\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language.\n\nSecurity Fix(es):\n\n* automation-controller: Jinja has a sandbox breakout through indirect reference to format method (CVE-2024-56326)\n* automation-controller: Jinja has a sandbox breakout through malicious filenames (CVE-2024-56201)\n* automation-controller: Django: potential denial-of-service vulnerability in IPv6 validation (CVE-2024-56374)\n* python3.11-django: potential denial-of-service vulnerability in IPv6 validation (CVE-2024-56374)\n* python3.11-django: Potential denial-of-service in django.utils.html.strip_tags() (CVE-2024-53907)\n* python3.11-jinja2: Jinja has a sandbox breakout through indirect reference to format method (CVE-2024-56326)\n* python3.11-jinja2: Jinja has a sandbox breakout through malicious filenames (CVE-2024-56201)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nUpdates and fixes included:\n\nAutomation controller\n* Fixed an issue where the order of source inventories was not respected by the ansible.controller collection (AAP-38524)\n* Fixed an issue where an actively running job on an execution node may have had its folder deleted by a system task (AAP-38137)\n* automation-controller has been updated to 4.6.7\n\nEvent-Driven Ansible:\n* Fixed an issue where users were unable to filter Rule Audits by rulebook activation name (AAP-39253)\n* Users are now able to create a new Event-Driven Ansible credential by copying an existing one (AAP-39249)\n* Added support for file and env injectors for Credentials (AAP-39091)\n* Fixed an issue where the input field of the injector configuration could not be empty (AAP-39086)\n* Fixed an issue where the application version in the openapi spec was incorrectly set (AAP-38392)\n* Fixed an issue where activations were not properly updated in some scenarios with a high load of the system (AAP-38374)\n* automation-eda-controller has been updated to 1.1.4\n\nContainer-based Ansible Automation Platform\n* Allow user to not provide the Postgresql admin account with external database (AAP-39077)\n* Using PostgreSQL TLS certificate authentication with an external database is now available (AAP-38400)\n* containerized installer setup has been updated to 2.5-9\n\nRPM-based Ansible Automation Platform\n* Fixed an issue where gateway could not be setup with custom SSL certificates (AAP-38985)\n* Fixed an issue where the gateway services are not restarted when a dependency changes (AAP-38918)\n* Fixed an issue where setting automationedacontroller_max_running_activations could cause the installer to fail (AAP-38708)\n* ansible-automation-platform-installer and installer setup have been updated to 2.5-8\n\nAdditional changes:\n* python3.11-django has been updated to 4.2.18\n* python3.11-jinja2 has been updated to 3.1.5\n* python3.11-pulpcore has been updated to 3.49.30", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2025:0777", "url": "https://access.redhat.com/errata/RHSA-2025:0777" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "2329288", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2329288" }, { "category": "external", "summary": "2333854", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2333854" }, { "category": "external", "summary": "2333856", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2333856" }, { "category": "external", "summary": "2337996", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2337996" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0777.json" } ], "title": "Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update", "tracking": { "current_release_date": "2025-02-13T21:33:08+00:00", "generator": { "date": "2025-02-13T21:33:08+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.3.1" } }, "id": "RHSA-2025:0777", "initial_release_date": "2025-01-28T19:20:06+00:00", "revision_history": [ { "date": "2025-01-28T19:20:06+00:00", "number": "1", "summary": "Initial version" }, { "date": "2025-01-28T19:20:06+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-02-13T21:33:08+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product": { "name": "Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_automation_platform:2.5::el9" } } }, { "category": "product_name", "name": "Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product": { "name": "Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5-Inside-1.3", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9" } } }, { "category": "product_name", "name": "Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product": { "name": "Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9" } } }, { "category": "product_name", "name": "Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product": { "name": "Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_automation_platform:2.5::el8" } } }, { "category": "product_name", "name": "Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product": { "name": "Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5-Inside-1.3", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8" } } }, { "category": "product_name", "name": "Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product": { "name": "Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8" } } } ], "category": "product_family", "name": "Red Hat Ansible Automation Platform" }, { "branches": [ { "category": "product_version", "name": "python3.11-jinja2-0:3.1.5-1.el9ap.src", "product": { "name": "python3.11-jinja2-0:3.1.5-1.el9ap.src", "product_id": "python3.11-jinja2-0:3.1.5-1.el9ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.11-jinja2@3.1.5-1.el9ap?arch=src" } } }, { "category": "product_version", "name": "python3.11-django-0:4.2.18-1.el9ap.src", "product": { "name": "python3.11-django-0:4.2.18-1.el9ap.src", "product_id": "python3.11-django-0:4.2.18-1.el9ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.11-django@4.2.18-1.el9ap?arch=src" } } }, { "category": "product_version", "name": "python3.11-pulpcore-0:3.49.30-1.el9ap.src", "product": { "name": "python3.11-pulpcore-0:3.49.30-1.el9ap.src", "product_id": "python3.11-pulpcore-0:3.49.30-1.el9ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.11-pulpcore@3.49.30-1.el9ap?arch=src" } } }, { "category": "product_version", "name": "automation-eda-controller-0:1.1.4-1.el9ap.src", "product": { "name": "automation-eda-controller-0:1.1.4-1.el9ap.src", "product_id": "automation-eda-controller-0:1.1.4-1.el9ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-eda-controller@1.1.4-1.el9ap?arch=src" } } }, { "category": "product_version", "name": "automation-controller-0:4.6.7-1.el9ap.src", "product": { "name": "automation-controller-0:4.6.7-1.el9ap.src", "product_id": "automation-controller-0:4.6.7-1.el9ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller@4.6.7-1.el9ap?arch=src" } } }, { "category": "product_version", "name": "ansible-automation-platform-installer-0:2.5-8.el9ap.src", "product": { "name": "ansible-automation-platform-installer-0:2.5-8.el9ap.src", "product_id": "ansible-automation-platform-installer-0:2.5-8.el9ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/ansible-automation-platform-installer@2.5-8.el9ap?arch=src" } } }, { "category": "product_version", "name": "python3.11-jinja2-0:3.1.5-1.el8ap.src", "product": { "name": "python3.11-jinja2-0:3.1.5-1.el8ap.src", "product_id": "python3.11-jinja2-0:3.1.5-1.el8ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.11-jinja2@3.1.5-1.el8ap?arch=src" } } }, { "category": "product_version", "name": "python3.11-django-0:4.2.18-1.el8ap.src", "product": { "name": "python3.11-django-0:4.2.18-1.el8ap.src", "product_id": "python3.11-django-0:4.2.18-1.el8ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.11-django@4.2.18-1.el8ap?arch=src" } } }, { "category": "product_version", "name": "python3.11-pulpcore-0:3.49.30-1.el8ap.src", "product": { "name": "python3.11-pulpcore-0:3.49.30-1.el8ap.src", "product_id": "python3.11-pulpcore-0:3.49.30-1.el8ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.11-pulpcore@3.49.30-1.el8ap?arch=src" } } }, { "category": "product_version", "name": "automation-eda-controller-0:1.1.4-1.el8ap.src", "product": { "name": "automation-eda-controller-0:1.1.4-1.el8ap.src", "product_id": "automation-eda-controller-0:1.1.4-1.el8ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-eda-controller@1.1.4-1.el8ap?arch=src" } } }, { "category": "product_version", "name": "automation-controller-0:4.6.7-1.el8ap.src", "product": { "name": "automation-controller-0:4.6.7-1.el8ap.src", "product_id": "automation-controller-0:4.6.7-1.el8ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller@4.6.7-1.el8ap?arch=src" } } }, { "category": "product_version", "name": "ansible-automation-platform-installer-0:2.5-8.el8ap.src", "product": { "name": "ansible-automation-platform-installer-0:2.5-8.el8ap.src", "product_id": "ansible-automation-platform-installer-0:2.5-8.el8ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/ansible-automation-platform-installer@2.5-8.el8ap?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "product": { "name": "python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "product_id": "python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.11-jinja2@3.1.5-1.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "python3.11-django-0:4.2.18-1.el9ap.noarch", "product": { "name": "python3.11-django-0:4.2.18-1.el9ap.noarch", "product_id": "python3.11-django-0:4.2.18-1.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.11-django@4.2.18-1.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "python3.11-pulpcore-0:3.49.30-1.el9ap.noarch", "product": { "name": "python3.11-pulpcore-0:3.49.30-1.el9ap.noarch", "product_id": "python3.11-pulpcore-0:3.49.30-1.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.11-pulpcore@3.49.30-1.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "automation-eda-controller-0:1.1.4-1.el9ap.noarch", "product": { "name": "automation-eda-controller-0:1.1.4-1.el9ap.noarch", "product_id": "automation-eda-controller-0:1.1.4-1.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-eda-controller@1.1.4-1.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "automation-eda-controller-base-0:1.1.4-1.el9ap.noarch", "product": { "name": "automation-eda-controller-base-0:1.1.4-1.el9ap.noarch", "product_id": "automation-eda-controller-base-0:1.1.4-1.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-eda-controller-base@1.1.4-1.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "automation-eda-controller-base-services-0:1.1.4-1.el9ap.noarch", "product": { "name": "automation-eda-controller-base-services-0:1.1.4-1.el9ap.noarch", "product_id": "automation-eda-controller-base-services-0:1.1.4-1.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-eda-controller-base-services@1.1.4-1.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "automation-eda-controller-event-stream-services-0:1.1.4-1.el9ap.noarch", "product": { "name": "automation-eda-controller-event-stream-services-0:1.1.4-1.el9ap.noarch", "product_id": "automation-eda-controller-event-stream-services-0:1.1.4-1.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-eda-controller-event-stream-services@1.1.4-1.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "automation-eda-controller-worker-services-0:1.1.4-1.el9ap.noarch", "product": { "name": "automation-eda-controller-worker-services-0:1.1.4-1.el9ap.noarch", "product_id": "automation-eda-controller-worker-services-0:1.1.4-1.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-eda-controller-worker-services@1.1.4-1.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "automation-controller-cli-0:4.6.7-1.el9ap.noarch", "product": { "name": "automation-controller-cli-0:4.6.7-1.el9ap.noarch", "product_id": "automation-controller-cli-0:4.6.7-1.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-cli@4.6.7-1.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "automation-controller-server-0:4.6.7-1.el9ap.noarch", "product": { "name": "automation-controller-server-0:4.6.7-1.el9ap.noarch", "product_id": "automation-controller-server-0:4.6.7-1.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-server@4.6.7-1.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "automation-controller-ui-0:4.6.7-1.el9ap.noarch", "product": { "name": "automation-controller-ui-0:4.6.7-1.el9ap.noarch", "product_id": "automation-controller-ui-0:4.6.7-1.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-ui@4.6.7-1.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "ansible-automation-platform-installer-0:2.5-8.el9ap.noarch", "product": { "name": "ansible-automation-platform-installer-0:2.5-8.el9ap.noarch", "product_id": "ansible-automation-platform-installer-0:2.5-8.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/ansible-automation-platform-installer@2.5-8.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "product": { "name": "python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "product_id": "python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.11-jinja2@3.1.5-1.el8ap?arch=noarch" } } }, { "category": "product_version", "name": "python3.11-django-0:4.2.18-1.el8ap.noarch", "product": { "name": "python3.11-django-0:4.2.18-1.el8ap.noarch", "product_id": "python3.11-django-0:4.2.18-1.el8ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.11-django@4.2.18-1.el8ap?arch=noarch" } } }, { "category": "product_version", "name": "python3.11-pulpcore-0:3.49.30-1.el8ap.noarch", "product": { "name": "python3.11-pulpcore-0:3.49.30-1.el8ap.noarch", "product_id": "python3.11-pulpcore-0:3.49.30-1.el8ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.11-pulpcore@3.49.30-1.el8ap?arch=noarch" } } }, { "category": "product_version", "name": "automation-eda-controller-0:1.1.4-1.el8ap.noarch", "product": { "name": "automation-eda-controller-0:1.1.4-1.el8ap.noarch", "product_id": "automation-eda-controller-0:1.1.4-1.el8ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-eda-controller@1.1.4-1.el8ap?arch=noarch" } } }, { "category": "product_version", "name": "automation-eda-controller-base-0:1.1.4-1.el8ap.noarch", "product": { "name": "automation-eda-controller-base-0:1.1.4-1.el8ap.noarch", "product_id": "automation-eda-controller-base-0:1.1.4-1.el8ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-eda-controller-base@1.1.4-1.el8ap?arch=noarch" } } }, { "category": "product_version", "name": "automation-eda-controller-base-services-0:1.1.4-1.el8ap.noarch", "product": { "name": "automation-eda-controller-base-services-0:1.1.4-1.el8ap.noarch", "product_id": "automation-eda-controller-base-services-0:1.1.4-1.el8ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-eda-controller-base-services@1.1.4-1.el8ap?arch=noarch" } } }, { "category": "product_version", "name": "automation-eda-controller-event-stream-services-0:1.1.4-1.el8ap.noarch", "product": { "name": "automation-eda-controller-event-stream-services-0:1.1.4-1.el8ap.noarch", "product_id": "automation-eda-controller-event-stream-services-0:1.1.4-1.el8ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-eda-controller-event-stream-services@1.1.4-1.el8ap?arch=noarch" } } }, { "category": "product_version", "name": "automation-eda-controller-worker-services-0:1.1.4-1.el8ap.noarch", "product": { "name": "automation-eda-controller-worker-services-0:1.1.4-1.el8ap.noarch", "product_id": "automation-eda-controller-worker-services-0:1.1.4-1.el8ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-eda-controller-worker-services@1.1.4-1.el8ap?arch=noarch" } } }, { "category": "product_version", "name": "automation-controller-cli-0:4.6.7-1.el8ap.noarch", "product": { "name": "automation-controller-cli-0:4.6.7-1.el8ap.noarch", "product_id": "automation-controller-cli-0:4.6.7-1.el8ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-cli@4.6.7-1.el8ap?arch=noarch" } } }, { "category": "product_version", "name": "automation-controller-server-0:4.6.7-1.el8ap.noarch", "product": { "name": "automation-controller-server-0:4.6.7-1.el8ap.noarch", "product_id": "automation-controller-server-0:4.6.7-1.el8ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-server@4.6.7-1.el8ap?arch=noarch" } } }, { "category": "product_version", "name": "automation-controller-ui-0:4.6.7-1.el8ap.noarch", "product": { "name": "automation-controller-ui-0:4.6.7-1.el8ap.noarch", "product_id": "automation-controller-ui-0:4.6.7-1.el8ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-ui@4.6.7-1.el8ap?arch=noarch" } } }, { "category": "product_version", "name": "ansible-automation-platform-installer-0:2.5-8.el8ap.noarch", "product": { "name": "ansible-automation-platform-installer-0:2.5-8.el8ap.noarch", "product_id": "ansible-automation-platform-installer-0:2.5-8.el8ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/ansible-automation-platform-installer@2.5-8.el8ap?arch=noarch" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "automation-controller-0:4.6.7-1.el9ap.x86_64", "product": { "name": "automation-controller-0:4.6.7-1.el9ap.x86_64", "product_id": "automation-controller-0:4.6.7-1.el9ap.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller@4.6.7-1.el9ap?arch=x86_64" } } }, { "category": "product_version", "name": "automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64", "product": { "name": "automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64", "product_id": "automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.7-1.el9ap?arch=x86_64" } } }, { "category": "product_version", "name": "automation-controller-0:4.6.7-1.el8ap.x86_64", "product": { "name": "automation-controller-0:4.6.7-1.el8ap.x86_64", "product_id": "automation-controller-0:4.6.7-1.el8ap.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller@4.6.7-1.el8ap?arch=x86_64" } } }, { "category": "product_version", "name": "automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64", "product": { "name": "automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64", "product_id": "automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.7-1.el8ap?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "automation-controller-0:4.6.7-1.el9ap.ppc64le", "product": { "name": "automation-controller-0:4.6.7-1.el9ap.ppc64le", "product_id": "automation-controller-0:4.6.7-1.el9ap.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller@4.6.7-1.el9ap?arch=ppc64le" } } }, { "category": "product_version", "name": "automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le", "product": { "name": "automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le", "product_id": "automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.7-1.el9ap?arch=ppc64le" } } }, { "category": "product_version", "name": "automation-controller-0:4.6.7-1.el8ap.ppc64le", "product": { "name": "automation-controller-0:4.6.7-1.el8ap.ppc64le", "product_id": "automation-controller-0:4.6.7-1.el8ap.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller@4.6.7-1.el8ap?arch=ppc64le" } } }, { "category": "product_version", "name": "automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le", "product": { "name": "automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le", "product_id": "automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.7-1.el8ap?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "automation-controller-0:4.6.7-1.el9ap.s390x", "product": { "name": "automation-controller-0:4.6.7-1.el9ap.s390x", "product_id": "automation-controller-0:4.6.7-1.el9ap.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller@4.6.7-1.el9ap?arch=s390x" } } }, { "category": "product_version", "name": "automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x", "product": { "name": "automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x", "product_id": "automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.7-1.el9ap?arch=s390x" } } }, { "category": "product_version", "name": "automation-controller-0:4.6.7-1.el8ap.s390x", "product": { "name": "automation-controller-0:4.6.7-1.el8ap.s390x", "product_id": "automation-controller-0:4.6.7-1.el8ap.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller@4.6.7-1.el8ap?arch=s390x" } } }, { "category": "product_version", "name": "automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x", "product": { "name": "automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x", "product_id": "automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.7-1.el8ap?arch=s390x" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "automation-controller-0:4.6.7-1.el9ap.aarch64", "product": { "name": "automation-controller-0:4.6.7-1.el9ap.aarch64", "product_id": "automation-controller-0:4.6.7-1.el9ap.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller@4.6.7-1.el9ap?arch=aarch64" } } }, { "category": "product_version", "name": "automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64", "product": { "name": "automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64", "product_id": "automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.7-1.el9ap?arch=aarch64" } } }, { "category": "product_version", "name": "automation-controller-0:4.6.7-1.el8ap.aarch64", "product": { "name": "automation-controller-0:4.6.7-1.el8ap.aarch64", "product_id": "automation-controller-0:4.6.7-1.el8ap.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller@4.6.7-1.el8ap?arch=aarch64" } } }, { "category": "product_version", "name": "automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64", "product": { "name": "automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64", "product_id": "automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.7-1.el8ap?arch=aarch64" } } } ], "category": "architecture", "name": "aarch64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.6.7-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.aarch64" }, "product_reference": "automation-controller-0:4.6.7-1.el8ap.aarch64", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.6.7-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.ppc64le" }, "product_reference": "automation-controller-0:4.6.7-1.el8ap.ppc64le", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.6.7-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.s390x" }, "product_reference": "automation-controller-0:4.6.7-1.el8ap.s390x", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.6.7-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.src" }, "product_reference": "automation-controller-0:4.6.7-1.el8ap.src", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.6.7-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.x86_64" }, "product_reference": "automation-controller-0:4.6.7-1.el8ap.x86_64", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-cli-0:4.6.7-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.7-1.el8ap.noarch" }, "product_reference": "automation-controller-cli-0:4.6.7-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-server-0:4.6.7-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.7-1.el8ap.noarch" }, "product_reference": "automation-controller-server-0:4.6.7-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-ui-0:4.6.7-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.7-1.el8ap.noarch" }, "product_reference": "automation-controller-ui-0:4.6.7-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64" }, "product_reference": "automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le" }, "product_reference": "automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x" }, "product_reference": "automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64" }, "product_reference": "automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "python3.11-django-0:4.2.18-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el8ap.noarch" }, "product_reference": "python3.11-django-0:4.2.18-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "python3.11-django-0:4.2.18-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el8ap.src" }, "product_reference": "python3.11-django-0:4.2.18-1.el8ap.src", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "python3.11-jinja2-0:3.1.5-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el8ap.noarch" }, "product_reference": "python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "python3.11-jinja2-0:3.1.5-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el8ap.src" }, "product_reference": "python3.11-jinja2-0:3.1.5-1.el8ap.src", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "python3.11-jinja2-0:3.1.5-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el8ap.noarch" }, "product_reference": "python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Inside-1.3" }, { "category": "default_component_of", "full_product_name": { "name": "python3.11-jinja2-0:3.1.5-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el8ap.src" }, "product_reference": "python3.11-jinja2-0:3.1.5-1.el8ap.src", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Inside-1.3" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform-installer-0:2.5-8.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el8ap.noarch" }, "product_reference": "ansible-automation-platform-installer-0:2.5-8.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform-installer-0:2.5-8.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el8ap.src" }, "product_reference": "ansible-automation-platform-installer-0:2.5-8.el8ap.src", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.6.7-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.aarch64" }, "product_reference": "automation-controller-0:4.6.7-1.el8ap.aarch64", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.6.7-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.ppc64le" }, "product_reference": "automation-controller-0:4.6.7-1.el8ap.ppc64le", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.6.7-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.s390x" }, "product_reference": "automation-controller-0:4.6.7-1.el8ap.s390x", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.6.7-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.src" }, "product_reference": "automation-controller-0:4.6.7-1.el8ap.src", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.6.7-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.x86_64" }, "product_reference": "automation-controller-0:4.6.7-1.el8ap.x86_64", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-cli-0:4.6.7-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.7-1.el8ap.noarch" }, "product_reference": "automation-controller-cli-0:4.6.7-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-server-0:4.6.7-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.7-1.el8ap.noarch" }, "product_reference": "automation-controller-server-0:4.6.7-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-ui-0:4.6.7-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.7-1.el8ap.noarch" }, "product_reference": "automation-controller-ui-0:4.6.7-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64" }, "product_reference": "automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le" }, "product_reference": "automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x" }, "product_reference": "automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64" }, "product_reference": "automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-eda-controller-0:1.1.4-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el8ap.noarch" }, "product_reference": "automation-eda-controller-0:1.1.4-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-eda-controller-0:1.1.4-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el8ap.src" }, "product_reference": "automation-eda-controller-0:1.1.4-1.el8ap.src", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-eda-controller-base-0:1.1.4-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.4-1.el8ap.noarch" }, "product_reference": "automation-eda-controller-base-0:1.1.4-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-eda-controller-base-services-0:1.1.4-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.4-1.el8ap.noarch" }, "product_reference": "automation-eda-controller-base-services-0:1.1.4-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-eda-controller-event-stream-services-0:1.1.4-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.4-1.el8ap.noarch" }, "product_reference": "automation-eda-controller-event-stream-services-0:1.1.4-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-eda-controller-worker-services-0:1.1.4-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.4-1.el8ap.noarch" }, "product_reference": "automation-eda-controller-worker-services-0:1.1.4-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "python3.11-django-0:4.2.18-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el8ap.noarch" }, "product_reference": "python3.11-django-0:4.2.18-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "python3.11-django-0:4.2.18-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el8ap.src" }, "product_reference": "python3.11-django-0:4.2.18-1.el8ap.src", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "python3.11-jinja2-0:3.1.5-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el8ap.noarch" }, "product_reference": "python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "python3.11-jinja2-0:3.1.5-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el8ap.src" }, "product_reference": "python3.11-jinja2-0:3.1.5-1.el8ap.src", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "python3.11-pulpcore-0:3.49.30-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el8ap.noarch" }, "product_reference": "python3.11-pulpcore-0:3.49.30-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "python3.11-pulpcore-0:3.49.30-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el8ap.src" }, "product_reference": "python3.11-pulpcore-0:3.49.30-1.el8ap.src", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.6.7-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.aarch64" }, "product_reference": "automation-controller-0:4.6.7-1.el9ap.aarch64", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.6.7-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.ppc64le" }, "product_reference": "automation-controller-0:4.6.7-1.el9ap.ppc64le", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.6.7-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.s390x" }, "product_reference": "automation-controller-0:4.6.7-1.el9ap.s390x", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.6.7-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.src" }, "product_reference": "automation-controller-0:4.6.7-1.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.6.7-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.x86_64" }, "product_reference": "automation-controller-0:4.6.7-1.el9ap.x86_64", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-cli-0:4.6.7-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.7-1.el9ap.noarch" }, "product_reference": "automation-controller-cli-0:4.6.7-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-server-0:4.6.7-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.7-1.el9ap.noarch" }, "product_reference": "automation-controller-server-0:4.6.7-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-ui-0:4.6.7-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.7-1.el9ap.noarch" }, "product_reference": "automation-controller-ui-0:4.6.7-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64" }, "product_reference": "automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le" }, "product_reference": "automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x" }, "product_reference": "automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64" }, "product_reference": "automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "python3.11-django-0:4.2.18-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el9ap.noarch" }, "product_reference": "python3.11-django-0:4.2.18-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "python3.11-django-0:4.2.18-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el9ap.src" }, "product_reference": "python3.11-django-0:4.2.18-1.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "python3.11-jinja2-0:3.1.5-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el9ap.noarch" }, "product_reference": "python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "python3.11-jinja2-0:3.1.5-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el9ap.src" }, "product_reference": "python3.11-jinja2-0:3.1.5-1.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "python3.11-jinja2-0:3.1.5-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el9ap.noarch" }, "product_reference": "python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Inside-1.3" }, { "category": "default_component_of", "full_product_name": { "name": "python3.11-jinja2-0:3.1.5-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el9ap.src" }, "product_reference": "python3.11-jinja2-0:3.1.5-1.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Inside-1.3" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform-installer-0:2.5-8.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el9ap.noarch" }, "product_reference": "ansible-automation-platform-installer-0:2.5-8.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform-installer-0:2.5-8.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el9ap.src" }, "product_reference": "ansible-automation-platform-installer-0:2.5-8.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.6.7-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.aarch64" }, "product_reference": "automation-controller-0:4.6.7-1.el9ap.aarch64", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.6.7-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.ppc64le" }, "product_reference": "automation-controller-0:4.6.7-1.el9ap.ppc64le", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.6.7-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.s390x" }, "product_reference": "automation-controller-0:4.6.7-1.el9ap.s390x", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.6.7-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.src" }, "product_reference": "automation-controller-0:4.6.7-1.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.6.7-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.x86_64" }, "product_reference": "automation-controller-0:4.6.7-1.el9ap.x86_64", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-cli-0:4.6.7-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.7-1.el9ap.noarch" }, "product_reference": "automation-controller-cli-0:4.6.7-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-server-0:4.6.7-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.7-1.el9ap.noarch" }, "product_reference": "automation-controller-server-0:4.6.7-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-ui-0:4.6.7-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.7-1.el9ap.noarch" }, "product_reference": "automation-controller-ui-0:4.6.7-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64" }, "product_reference": "automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le" }, "product_reference": "automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x" }, "product_reference": "automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64" }, "product_reference": "automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-eda-controller-0:1.1.4-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el9ap.noarch" }, "product_reference": "automation-eda-controller-0:1.1.4-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-eda-controller-0:1.1.4-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el9ap.src" }, "product_reference": "automation-eda-controller-0:1.1.4-1.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-eda-controller-base-0:1.1.4-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.4-1.el9ap.noarch" }, "product_reference": "automation-eda-controller-base-0:1.1.4-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-eda-controller-base-services-0:1.1.4-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.4-1.el9ap.noarch" }, "product_reference": "automation-eda-controller-base-services-0:1.1.4-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-eda-controller-event-stream-services-0:1.1.4-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.4-1.el9ap.noarch" }, "product_reference": "automation-eda-controller-event-stream-services-0:1.1.4-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "automation-eda-controller-worker-services-0:1.1.4-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.4-1.el9ap.noarch" }, "product_reference": "automation-eda-controller-worker-services-0:1.1.4-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "python3.11-django-0:4.2.18-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el9ap.noarch" }, "product_reference": "python3.11-django-0:4.2.18-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "python3.11-django-0:4.2.18-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el9ap.src" }, "product_reference": "python3.11-django-0:4.2.18-1.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "python3.11-jinja2-0:3.1.5-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el9ap.noarch" }, "product_reference": "python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "python3.11-jinja2-0:3.1.5-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el9ap.src" }, "product_reference": "python3.11-jinja2-0:3.1.5-1.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "python3.11-pulpcore-0:3.49.30-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el9ap.noarch" }, "product_reference": "python3.11-pulpcore-0:3.49.30-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5" }, { "category": "default_component_of", "full_product_name": { "name": "python3.11-pulpcore-0:3.49.30-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el9ap.src" }, "product_reference": "python3.11-pulpcore-0:3.49.30-1.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-53907", "cwe": { "id": "CWE-1169", "name": "CWE-1169" }, "discovery_date": "2024-11-28T02:48:36.215000+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el9ap.src" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2329288" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in the Django Web Framework. The strip_tags() and stripbtags template filter may be vulnerable to a potential denial of service (DoS) in cases of a large sequence of nested incomplete HTML entities.", "title": "Vulnerability description" }, { "category": "summary", "text": "django: Potential denial-of-service in django.utils.html.strip_tags()", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability is rated as a Moderate severity because it exposes the strip_tags() method and striptags template filter to a potential denial-of-service attack, malicious input containing large sequences of nested incomplete HTML entities could cause excessive processing, but it does not affect data confidentiality or integrity", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el9ap.src" ], "known_not_affected": [ "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el9ap.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-53907" }, { "category": "external", "summary": "RHBZ#2329288", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2329288" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-53907", "url": "https://www.cve.org/CVERecord?id=CVE-2024-53907" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-53907", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53907" }, { "category": "external", "summary": "https://www.djangoproject.com/weblog/2024/dec/04/security-releases/", "url": "https://www.djangoproject.com/weblog/2024/dec/04/security-releases/" } ], "release_date": "2024-12-04T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2025-01-28T19:20:06+00:00", "details": "Red Hat Ansible Automation Platform", "product_ids": [ "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el9ap.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2025:0777" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el9ap.src" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el9ap.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "django: Potential denial-of-service in django.utils.html.strip_tags()" }, { "cve": "CVE-2024-56201", "cwe": { "id": "CWE-150", "name": "Improper Neutralization of Escape, Meta, or Control Sequences" }, "discovery_date": "2024-12-23T16:00:38.768252+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el9ap.src" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2333854" } ], "notes": [ { "category": "description", "text": "A flaw was found in the Jinja2 package. A bug in the Jinja compiler allows an attacker that controls both the content and filename of a template to execute arbitrary Python code, regardless of Jinja\u0027s sandbox being used. An attacker needs to be able to control both the filename and the contents of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications that execute untrusted templates where the template author can also choose the template filename.", "title": "Vulnerability description" }, { "category": "summary", "text": "jinja2: Jinja has a sandbox breakout through malicious filenames", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability has rated as a IMPORTANT flaw because an attacker controlling both the template content and filename to execute arbitrary Python code, bypassing the sandbox.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el9ap.src" ], "known_not_affected": [ "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el9ap.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-56201" }, { "category": "external", "summary": "RHBZ#2333854", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2333854" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-56201", "url": "https://www.cve.org/CVERecord?id=CVE-2024-56201" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-56201", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56201" }, { "category": "external", "summary": "https://github.com/pallets/jinja/commit/767b23617628419ae3709ccfb02f9602ae9fe51f", "url": "https://github.com/pallets/jinja/commit/767b23617628419ae3709ccfb02f9602ae9fe51f" }, { "category": "external", "summary": "https://github.com/pallets/jinja/issues/1792", "url": "https://github.com/pallets/jinja/issues/1792" }, { "category": "external", "summary": "https://github.com/pallets/jinja/releases/tag/3.1.5", "url": "https://github.com/pallets/jinja/releases/tag/3.1.5" }, { "category": "external", "summary": "https://github.com/pallets/jinja/security/advisories/GHSA-gmj6-6f8f-6699", "url": "https://github.com/pallets/jinja/security/advisories/GHSA-gmj6-6f8f-6699" } ], "release_date": "2024-12-23T15:37:36.110000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2025-01-28T19:20:06+00:00", "details": "Red Hat Ansible Automation Platform", "product_ids": [ "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el9ap.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2025:0777" }, { "category": "workaround", "details": "To mitigate this vulnerabilty restrict user-controlled template filenames, ensuring they follow a predefined templates.", "product_ids": [ "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el9ap.src" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el9ap.src" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "jinja2: Jinja has a sandbox breakout through malicious filenames" }, { "cve": "CVE-2024-56326", "cwe": { "id": "CWE-693", "name": "Protection Mechanism Failure" }, "discovery_date": "2024-12-23T16:00:46.619763+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el9ap.src" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2333856" } ], "notes": [ { "category": "description", "text": "A flaw was found in the Jinja package. In affected versions of Jinja, an oversight in how the Jinja sandboxed environment detects calls to str.format allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the content of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications that execute untrusted templates. Jinja\u0027s sandbox does catch calls to str.format and ensures they don\u0027t escape the sandbox. However, storing a reference to a malicious string\u0027s format method is possible, then passing that to a filter that calls it. No such filters are built into Jinja but could be present through custom filters in an application. After the fix, such indirect calls are also handled by the sandbox.", "title": "Vulnerability description" }, { "category": "summary", "text": "jinja2: Jinja has a sandbox breakout through indirect reference to format method", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability is rated as Moderate due to an oversight in Jinja\u0027s sandbox environment, allowing attackers to execute arbitrary Python code through controlled template content. This requires control over template content, making exploitation possible only in specific applications, thus limiting its overall impact.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el9ap.src" ], "known_not_affected": [ "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el9ap.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-56326" }, { "category": "external", "summary": "RHBZ#2333856", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2333856" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-56326", "url": "https://www.cve.org/CVERecord?id=CVE-2024-56326" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-56326", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56326" }, { "category": "external", "summary": "https://github.com/pallets/jinja/commit/48b0687e05a5466a91cd5812d604fa37ad0943b4", "url": "https://github.com/pallets/jinja/commit/48b0687e05a5466a91cd5812d604fa37ad0943b4" }, { "category": "external", "summary": "https://github.com/pallets/jinja/releases/tag/3.1.5", "url": "https://github.com/pallets/jinja/releases/tag/3.1.5" }, { "category": "external", "summary": "https://github.com/pallets/jinja/security/advisories/GHSA-q2x7-8rv6-6q7h", "url": "https://github.com/pallets/jinja/security/advisories/GHSA-q2x7-8rv6-6q7h" } ], "release_date": "2024-12-23T15:43:49.400000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2025-01-28T19:20:06+00:00", "details": "Red Hat Ansible Automation Platform", "product_ids": [ "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el9ap.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2025:0777" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el9ap.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "jinja2: Jinja has a sandbox breakout through indirect reference to format method" }, { "cve": "CVE-2024-56374", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2025-01-14T20:01:09.167282+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el9ap.src" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2337996" } ], "notes": [ { "category": "description", "text": "A flaw was found in the Django framework. Lack of upper bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial of service attack. The undocumented and private functions `clean_ipv6_address` and `is_valid_ipv6_address` were vulnerable, as was the `django.forms.GenericIPAddressField` form field, which has now been updated to define a `max_length` of 39 characters.", "title": "Vulnerability description" }, { "category": "summary", "text": "django: potential denial-of-service vulnerability in IPv6 validation", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el9ap.src" ], "known_not_affected": [ "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el9ap.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-56374" }, { "category": "external", "summary": "RHBZ#2337996", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2337996" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-56374", "url": "https://www.cve.org/CVERecord?id=CVE-2024-56374" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-56374", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56374" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2025/01/14/2", "url": "http://www.openwall.com/lists/oss-security/2025/01/14/2" }, { "category": "external", "summary": "https://docs.djangoproject.com/en/dev/releases/security/", "url": "https://docs.djangoproject.com/en/dev/releases/security/" }, { "category": "external", "summary": "https://groups.google.com/g/django-announce", "url": "https://groups.google.com/g/django-announce" }, { "category": "external", "summary": "https://www.djangoproject.com/weblog/2025/jan/14/security-releases/", "url": "https://www.djangoproject.com/weblog/2025/jan/14/security-releases/" } ], "release_date": "2025-01-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2025-01-28T19:20:06+00:00", "details": "Red Hat Ansible Automation Platform", "product_ids": [ "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el9ap.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2025:0777" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L", "version": "3.1" }, "products": [ "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.7-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.4-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-server-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-ui-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-django-0:4.2.18-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-8.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.7-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.7-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.4-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.4-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-django-0:4.2.18-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-jinja2-0:3.1.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.5:python3.11-pulpcore-0:3.49.30-1.el9ap.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "django: potential denial-of-service vulnerability in IPv6 validation" } ] }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.