Skip to content
OpenAdvisories
High RHSA-2023:4692 2 CVEs

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

Published Sep 18, 2024 · Updated Aug 20, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el8 automation-controller 0:4.4.2-1.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el8 automation-controller-venv-tower 0:4.4.2-1.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el9 automation-controller 0:4.4.2-1.el9ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el9 automation-controller-venv-tower 0:4.4.2-1.el9ap

Vulnerabilities 2

  • High 7.5
    CVE-2023-24580 EPSS 63%

    Resource exhaustion in Django

    An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7. Passing certain inputs (e.g., an excessive number of parts) to multipart forms could result in too many open files or memory exhausti…

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI
  • High 7.5
    CVE-2023-36053

    Django has regular expression denial of service vulnerability in EmailValidator/URLValidator

    In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS (regular expression denial of service) attack via a very large number of domain name labels of emails and URLs.

    python-django django python-django Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2169402
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2218004
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4692.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-24580
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-24580
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-24580
  • article
    https://www.djangoproject.com/weblog/2023/feb/14/security-releases/
  • report
    https://access.redhat.com/security/cve/CVE-2023-36053
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-36053
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-36053
  • article
    https://www.djangoproject.com/weblog/2023/jul/03/security-releases/