Skip to content
OpenAdvisories
High RHSA-2021:3473 1 CVE

Red Hat Security Advisory: Red Hat Automation Platform 1.2.5 security and bugfixes update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 24

ReleasePackageFixed in
Red Hat · Ansible Automation Platform 4 ansible_automation_platform:4.2::el7 automation-hub 0:4.2.6-1.el7pc
Red Hat · Ansible Automation Platform 4 ansible_automation_platform:4.2::el7 python-galaxy-ng 0:4.2.6-1.el7pc
Red Hat · Ansible Automation Platform 4 ansible_automation_platform:4.2::el7 python-urllib3 0:1.26.5-1.el7pc
Red Hat · Ansible Automation Platform 4 ansible_automation_platform:4.2::el7 python3-chardet 0:3.0.4-3.el7pc
Red Hat · Ansible Automation Platform 4 ansible_automation_platform:4.2::el7 python3-click 0:7.1.2-3.el7pc
Red Hat · Ansible Automation Platform 4 ansible_automation_platform:4.2::el7 python3-galaxy-ng 0:4.2.6-1.el7pc
Red Hat · Ansible Automation Platform 4 ansible_automation_platform:4.2::el7 python3-gnupg 0:0.4.6-3.el7pc
Red Hat · Ansible Automation Platform 4 ansible_automation_platform:4.2::el7 python3-jinja2 0:2.11.2-3.el7pc
Red Hat · Ansible Automation Platform 4 ansible_automation_platform:4.2::el7 python3-markupsafe 0:1.1.1-4.el7pc
Red Hat · Ansible Automation Platform 4 ansible_automation_platform:4.2::el7 python3-markupsafe-debuginfo 0:1.1.1-4.el7pc
Red Hat · Ansible Automation Platform 4 ansible_automation_platform:4.2::el7 python3-semantic-version 0:2.8.5-3.el7pc
Red Hat · Ansible Automation Platform 4 ansible_automation_platform:4.2::el7 python3-urllib3 0:1.26.5-1.el7pc
Red Hat · Ansible Automation Platform 4 ansible_automation_platform:4.2::el8 automation-hub 0:4.2.6-1.el8pc
Red Hat · Ansible Automation Platform 4 ansible_automation_platform:4.2::el8 python-galaxy-ng 0:4.2.6-1.el8pc
Red Hat · Ansible Automation Platform 4 ansible_automation_platform:4.2::el8 python-urllib3 0:1.26.5-1.el8pc
Red Hat · Ansible Automation Platform 4 ansible_automation_platform:4.2::el8 python3-click 0:7.1.2-3.el8pc
Red Hat · Ansible Automation Platform 4 ansible_automation_platform:4.2::el8 python3-galaxy-ng 0:4.2.6-1.el8pc
Red Hat · Ansible Automation Platform 4 ansible_automation_platform:4.2::el8 python3-gnupg 0:0.4.6-3.el8pc
Red Hat · Ansible Automation Platform 4 ansible_automation_platform:4.2::el8 python3-jinja2 0:2.11.2-3.el8pc
Red Hat · Ansible Automation Platform 4 ansible_automation_platform:4.2::el8 python3-markupsafe 0:1.1.1-4.el8pc
Red Hat · Ansible Automation Platform 4 ansible_automation_platform:4.2::el8 python3-markupsafe-debuginfo 0:1.1.1-4.el8pc
Red Hat · Ansible Automation Platform 4 ansible_automation_platform:4.2::el8 python3-markupsafe-debugsource 0:1.1.1-4.el8pc
Red Hat · Ansible Automation Platform 4 ansible_automation_platform:4.2::el8 python3-semantic-version 0:2.8.5-3.el8pc
Red Hat · Ansible Automation Platform 4 ansible_automation_platform:4.2::el8 python3-urllib3 0:1.26.5-1.el8pc

Vulnerabilities 1

  • High 7.5
    CVE-2021-33503

    Catastrophic backtracking in URL authority parser when passed URL containing many @ characters

    An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in the authority component, the authority regular expression exhibits catastrophic backtracking, causing a denial of service if a URL were passed as a para…

    python-pip urllib3 python-urllib3 python-urllib3 Debian Ubuntu Azure Linux PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_ansible_automation_platform/1.2/html/red_hat_ansible_automation_platform_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1968074
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3473.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-33503
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-33503
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-33503
  • advisory
    https://github.com/advisories/GHSA-q2q7-5pp4-w6pg