RHSA-2021:0781MediumCVSS 7.5

Red Hat Security Advisory: Red Hat Ansible Automation Platform 1.2.2 security and bug fix update

Published
March 9, 2021
Last Modified
November 6, 2026

🔗 CVE IDs covered (6)

CVE-2021-27291 →CVE-2020-7789 →CVE-2020-15366 →CVE-2021-3281 →CVE-2021-20270 →CVE-2021-23980 →

📋 Description

CVE-2020-7789 — nodejs-node-notifier: command injection due to the options params not being sanitised when being passed an array CVE-2020-15366 — nodejs-ajv: prototype pollution via crafted JSON schema in ajv.validate function CVE-2021-3281 — django: Potential directory-traversal via archive.extract() CVE-2021-20270 — python-pygments: Infinite loop in SML lexer may lead to DoS CVE-2021-23980 — python-bleach: Mutation cross-site scripting in bleach.clean CVE-2021-27291 — python-pygments: ReDoS in multiple lexers

🎯 Affected products28

  • Red Hat Automation Hub 4.2 for RHEL 7
  • Red Hat Automation Hub 4.2 for RHEL 8
  • automation-hub-0:4.2.2-1.el7pc.noarch as a component of Red Hat Automation Hub 4.2 for RHEL 7
  • automation-hub-0:4.2.2-1.el7pc.src as a component of Red Hat Automation Hub 4.2 for RHEL 7
  • automation-hub-0:4.2.2-1.el8pc.noarch as a component of Red Hat Automation Hub 4.2 for RHEL 8
  • automation-hub-0:4.2.2-1.el8pc.src as a component of Red Hat Automation Hub 4.2 for RHEL 8
  • python-bleach-0:3.3.0-1.el7pc.src as a component of Red Hat Automation Hub 4.2 for RHEL 7
  • python-bleach-0:3.3.0-1.el8pc.src as a component of Red Hat Automation Hub 4.2 for RHEL 8
  • python-bleach-allowlist-0:1.0.3-1.el7pc.src as a component of Red Hat Automation Hub 4.2 for RHEL 7
  • python-bleach-allowlist-0:1.0.3-1.el8pc.src as a component of Red Hat Automation Hub 4.2 for RHEL 8
  • python-galaxy-importer-0:0.2.15-1.el7pc.src as a component of Red Hat Automation Hub 4.2 for RHEL 7
  • python-galaxy-importer-0:0.2.15-1.el8pc.src as a component of Red Hat Automation Hub 4.2 for RHEL 8
  • python-galaxy-ng-0:4.2.2-1.el7pc.src as a component of Red Hat Automation Hub 4.2 for RHEL 7
  • python-galaxy-ng-0:4.2.2-1.el8pc.src as a component of Red Hat Automation Hub 4.2 for RHEL 8
  • python-pulp-ansible-1:0.5.6-1.el7pc.src as a component of Red Hat Automation Hub 4.2 for RHEL 7
  • python-pulp-ansible-1:0.5.6-1.el8pc.src as a component of Red Hat Automation Hub 4.2 for RHEL 8
  • python3-bleach-0:3.3.0-1.el7pc.noarch as a component of Red Hat Automation Hub 4.2 for RHEL 7
  • python3-bleach-0:3.3.0-1.el8pc.noarch as a component of Red Hat Automation Hub 4.2 for RHEL 8
  • python3-bleach-allowlist-0:1.0.3-1.el7pc.noarch as a component of Red Hat Automation Hub 4.2 for RHEL 7
  • python3-bleach-allowlist-0:1.0.3-1.el8pc.noarch as a component of Red Hat Automation Hub 4.2 for RHEL 8
  • python3-django-0:2.2.18-1.el7pc.noarch as a component of Red Hat Automation Hub 4.2 for RHEL 7
  • python3-django-0:2.2.18-1.el8pc.noarch as a component of Red Hat Automation Hub 4.2 for RHEL 8
  • python3-galaxy-importer-0:0.2.15-1.el7pc.noarch as a component of Red Hat Automation Hub 4.2 for RHEL 7
  • python3-galaxy-importer-0:0.2.15-1.el8pc.noarch as a component of Red Hat Automation Hub 4.2 for RHEL 8
  • python3-galaxy-ng-0:4.2.2-1.el7pc.noarch as a component of Red Hat Automation Hub 4.2 for RHEL 7
  • python3-galaxy-ng-0:4.2.2-1.el8pc.noarch as a component of Red Hat Automation Hub 4.2 for RHEL 8
  • python3-pulp-ansible-1:0.5.6-1.el7pc.noarch as a component of Red Hat Automation Hub 4.2 for RHEL 7
  • python3-pulp-ansible-1:0.5.6-1.el8pc.noarch as a component of Red Hat Automation Hub 4.2 for RHEL 8

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (7)