Skip to content
OpenAdvisories
Medium RHSA-2025:8609 1 CVE

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

Published Jun 6, 2025 · Updated Jul 19, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el8 python39-django 0:4.2.21-1.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el8 python3x-django 0:4.2.21-1.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el9 python-django 0:4.2.21-1.el9ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el9 python3-django 0:4.2.21-1.el9ap

Vulnerabilities 1

  • Medium 5.0
    CVE-2025-26699

    Django Vulnerable to Allocation of Resources Without Limits or Throttling

    An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap() method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings.

    djangoproject Django python-django django Debian Ubuntu Alpine PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2348993
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8609.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-26699
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-26699
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-26699
  • advisory
    https://github.com/advisories/GHSA-p3fp-8748-vqfq
  • article
    https://www.djangoproject.com/security/