Skip to content
OpenAdvisories
Critical RHSA-2023:4991 1 CVE

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.3 Product Security and Bug Fix Update

Published Sep 30, 2024 · Updated Jul 31, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.3::el8 automation-controller-venv-tower 0:4.3.13-1.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.3::el9 automation-controller-venv-tower 0:4.3.13-1.el9ap

Vulnerabilities 1

  • Critical 9.8
    CVE-2023-40267

    GitPython vulnerable to remote code execution due to insufficient sanitization of input arguments

    GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from. NOTE: this issue exists because of an incomplete fix for CVE-2022-24439.

    gitpython python-git python-git Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2231474
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4991.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-40267
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-40267
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-40267
  • advisory
    https://github.com/advisories/GHSA-pr76-5cm5-w9cj