RHSA-2024:11144HighCVSS 9.1

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Container Release Update

Published
December 16, 2024
Last Modified
September 1, 2026

🔗 CVE IDs covered (2)

CVE-2024-53907 →CVE-2024-53908 →

📋 Description

CVE-2024-53907 — django: Potential denial-of-service in django.utils.html.strip_tags() CVE-2024-53908 — django: Potential SQL injection in HasKey(lhs, rhs) on Oracle

🎯 Affected products124

  • Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/aap-cloud-billing-rhel8-operator@sha256:c393119138a55f9fc021cc871853250dccaac1f5ebfe17ea25490a83e677e598_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/aap-cloud-billing-rhel8@sha256:1676b5fc51c806047ac3be39a878e5ce2b61654b40c0caba67942ac5001b019d_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/aap-cloud-metrics-collector-rhel8@sha256:51056b354a5c4f828085bc94f99377445d1820958b1af311912d009925d14138_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/aap-cloud-ui-rhel8-operator@sha256:0e7368f0ee868958f46371504c6d41f943120546ab5d79ddcc490f438924e3ad_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/aap-cloud-ui-rhel8@sha256:7a519ba56fc0172fcee2ce92908b3393488250082d51e45e6f790f36226842d6_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/aap-must-gather-rhel8@sha256:0102e055ce1218eee9cea916f15f411e0c34feb8291b44b8b2e7d893c00be2a6_arm64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/aap-must-gather-rhel8@sha256:2ed000027f180c8d8cf62a02eff12d480d5962e79865094c2d556c633cb885de_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/aap-must-gather-rhel8@sha256:42844c87f55855832c5bdf4677c7028dffae1a0d811be4539ad4b00f90d0d1ac_ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/aap-must-gather-rhel8@sha256:66dee3f64d97eedc72c65937662ea390e322f48417d38bf7edfd0732847e5c11_s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-builder-rhel8@sha256:2a5196497c58f63d7fe5ebbe50932e08c7e7fd70299c666b9e95d4428f5eba99_arm64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-builder-rhel8@sha256:527faf46f93da5a7c8b5b895ed3456169957314e89eb5560419510d7355fc544_s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-builder-rhel8@sha256:82fe92b86e73009ead7ab30fc06c704377f0bc02fcf63cd784dd814446cefa31_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-builder-rhel8@sha256:c68fa85a9da99dd5b314b8d876d666b3dfa59ae3ad10415600e5f58b83bf7f0f_ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-builder-rhel9@sha256:7d119fcf3b44a5724d71a05ee2628b2bc8e18f5deb9bfb605cf05627868c886c_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/ansible-builder-rhel9@sha256:816a30c2e05ff1c5e4d4fa2a97f54e724620bedb11ed8311a08c9c3f0268f5a7_s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/ansible-builder-rhel9@sha256:89d7602ac5118914ee71f744e9ec8a903ac21b677d5b1d084f1ae617b8d9f69b_arm64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/ansible-builder-rhel9@sha256:dcb08b4419ff62e3f9e714763fde79e8e33e9f2232cdc48939f15a247eb680cb_ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/ansible-python-base-rhel8@sha256:0ddbd90e839d279223a519ecb82cc77e2badf9551007e147073853c652d0fe7f_s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-python-base-rhel8@sha256:2a16dd7343439f4952890d6a5ad01b248d2782ecce03171e2d4f1d06c80d4674_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-python-base-rhel8@sha256:7dc16a8b0e63269e7fa8a2a12067301debf6cc1ac2ff4df12b72205c25c8f08b_arm64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-python-base-rhel8@sha256:da3bfa216855d03e8804262bf40a7e7fc6bbd28e73927de5a4704caf4560d130_ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-python-base-rhel9@sha256:043c04d30fcc9855bdd01ec561578218124ccac96ae989667c3df7ed76303659_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/ansible-python-base-rhel9@sha256:18efdcb955685f9cca6968c8618c557424268b6e00275241a1ef328c01c9cafd_s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/ansible-python-base-rhel9@sha256:457c3853e03f498c7fb9b6eca7a1d38fac2bb44a86c4917bd783e6b531908898_ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/ansible-python-base-rhel9@sha256:593319a5bf8d1edd9a1907d43f2d65ee43b993d951ace359118238b960651f39_arm64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/ansible-python-toolkit-rhel8@sha256:012d09d45262d21d588d3a2c4761ec4839723c6399b0ce7545747133c1ec36b9_ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-python-toolkit-rhel8@sha256:0bd94796bdadd2747f0f603449e87bb221398edd80ccd129a1b8c753535c6c54_arm64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-python-toolkit-rhel8@sha256:2ce87ebb8606f62d930675a9b412409640db391437f43fce5fd368fbbdec42de_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • +94 more not shown

✅ Remediation

Red Hat Ansible Automation Platform Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (5)