RHSA-2023:5758MediumCVSS 7.5
Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update
🔗 CVE IDs covered (3)
📋 Description
CVE-2023-5115 — Ansible: malicious role archive can cause ansible-galaxy to overwrite arbitrary files
CVE-2023-41164 — python-django: Potential denial of service vulnerability in django.utils.encoding.uri_to_iri()
CVE-2023-43665 — python-django: Denial-of-service possibility in django.utils.text.Truncator
🎯 Affected products36
- Red Hat Ansible Automation Platform 2.4 for RHEL 8
- Red Hat Ansible Automation Platform 2.4 for RHEL 9
- ansible-core-0:2.15.5-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
- ansible-core-0:2.15.5-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
- ansible-core-0:2.15.5-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
- ansible-core-0:2.15.5-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
- ansible-test-0:2.15.5-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
- ansible-test-0:2.15.5-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
- automation-controller-0:4.4.6-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
- automation-controller-0:4.4.6-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
- automation-controller-0:4.4.6-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
- automation-controller-0:4.4.6-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
- automation-controller-0:4.4.6-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
- automation-controller-0:4.4.6-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
- automation-controller-0:4.4.6-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
- automation-controller-0:4.4.6-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
- automation-controller-0:4.4.6-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
- automation-controller-0:4.4.6-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
- automation-controller-cli-0:4.4.6-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
- automation-controller-cli-0:4.4.6-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
- automation-controller-server-0:4.4.6-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
- automation-controller-server-0:4.4.6-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
- automation-controller-ui-0:4.4.6-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
- automation-controller-ui-0:4.4.6-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
- automation-controller-venv-tower-0:4.4.6-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
- automation-controller-venv-tower-0:4.4.6-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
- automation-controller-venv-tower-0:4.4.6-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
- automation-controller-venv-tower-0:4.4.6-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
- automation-controller-venv-tower-0:4.4.6-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
- automation-controller-venv-tower-0:4.4.6-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
- +6 more not shown
✅ Remediation
Red Hat Ansible Automation Platform
🔗 References (6)
- selfhttps://access.redhat.com/errata/RHSA-2023:5758
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2233810
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2237258
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2241046
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5758.json