RHSA-2024:11146HighCVSS 9.1

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update

Published
December 17, 2024
Last Modified
August 7, 2026

🔗 CVE IDs covered (2)

CVE-2024-53907 →CVE-2024-53908 →

📋 Description

CVE-2024-53907 — django: Potential denial-of-service in django.utils.html.strip_tags() CVE-2024-53908 — django: Potential SQL injection in HasKey(lhs, rhs) on Oracle

🎯 Affected products142

  • Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/aap-cloud-billing-rhel8-operator@sha256:b1158b4a30d39d586649a7c84da7401066e18215830be5620af7361f56af704e_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-cloud-billing-rhel8@sha256:159cc4472620ca6d25e955d734505d45ad0d7e1d0edaa011b32ce3537b597843_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-cloud-metrics-collector-rhel8@sha256:03cc71456bb3eb0ef7ac6453a4e49cfa01fbeb8c32f88aed82edc6d85d77dfc8_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-cloud-ui-rhel8-operator@sha256:47759f45bf7aab05480bf0997a575c55a8e1a6feb1f09a5540d638ddbe7ff72f_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-cloud-ui-rhel8@sha256:a5013308883f1ecd5425aec16e2cd20e1cebe125285a9cac6c8ff46e78a42756_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-must-gather-rhel8@sha256:6f1c00a1a9f5e78d39454bdd82b28d7c9573bbaee8c3c91b093ffc434340aecc_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-must-gather-rhel8@sha256:85663192b3901765db3fc0b9b11d36d30c6a309fb9ad2cc6723abd3011aee1fc_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-must-gather-rhel8@sha256:a3a991b923a7acc6801a90099fdfa808b44c3557b50f03b14f2f48e23dd0fc93_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-must-gather-rhel8@sha256:fad5f6b3aa84223a414f735a1c825b241f85412cedc19e0e23a7e42655e157ac_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-builder-rhel8@sha256:767a5f631b8463feea88e7372bd4923ce454f046d44b12b483532d7287376b34_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-builder-rhel8@sha256:8a4700b738a3102b994eeb79038ae180a8e3e9a1c72e54247ff77d73cfce1829_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-builder-rhel8@sha256:9dd42c8164ac6a671135f29772c898f8b93253fb427bbf11f698164d5ebb5c9b_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-builder-rhel8@sha256:9f69b3ef57e7d4990b0e3b90c66a7315d5ec6e516f8c995778429932f885ea1c_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-builder-rhel9@sha256:4a4041a1b7bd5c03ae04a572a967b4c3f29d897f6d92bb228232e887acb8f33c_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-builder-rhel9@sha256:56277bfc797b154bd747ccdd89cff0efc2f5aff0ca6ac45a289799c3f65cf44c_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-builder-rhel9@sha256:8e5a96407229a39325f39af7c5f3d97b0915e8c4e97843ea8580dc6759c142df_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-builder-rhel9@sha256:f1262e906dcbf846bf630a21a28812e5acde432555ebd888e4676d27e5e5ba5d_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:24c4c967ef4be37c0c4f147e5876aab045f5ca8ad03bae85d7b1fa2ec65b51b1_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:40cf046690495b728a250b12ada302267f66394482d6450991e34af4cce1141a_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:51f60967b7cc0735486d7ae4d6749de5b9d039c132394ea388dd6ab4bca93f20_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:dc4bcd915d494bb01efce035595d370217c1152bcfa26abb873d1aa372035ca4_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-python-base-rhel8@sha256:401d816a153ddaa78d1f219309c69ce608bc60a8b2a01d424f7a12a0350d4a5d_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-python-base-rhel8@sha256:54520e09c7d949932c04508f21c673f44e3f71d00122b0cb24d08ce4936cfc24_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-python-base-rhel8@sha256:6c23dc056b24d0e825668b423aa5d48754c791671527b5798668d806cc712b87_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-python-base-rhel8@sha256:cc174d582944fd5d9783dafd3f581a81f7f39c3d8883c60273b4a753ab307a44_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-python-base-rhel9@sha256:225262142bbac68a712e0c59ee3fb2bbdf082fc0417b56e0bebc6d9c149cd100_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-python-base-rhel9@sha256:7a81b226c84cde8b2d316bf9b69b70dac8f6930f72227d4fa7409e21a78b26ad_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-python-base-rhel9@sha256:84e35441cfc6053d5c95c9be9effb1134e874118bff7bfa41ea9efc643668aa9_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • +112 more not shown

✅ Remediation

Red Hat Ansible Automation Platform Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (5)