Skip to content
OpenAdvisories
Medium RHSA-2023:5208 1 CVE

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

Published Sep 18, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el8 python39-django 0:3.2.21-1.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el8 python3x-django 0:3.2.21-1.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el9 python-django 0:3.2.21-1.el9ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el9 python3-django 0:3.2.21-1.el9ap

Vulnerabilities 1

  • Medium 5.3
    CVE-2023-41164

    Django Denial of service vulnerability in django.utils.encoding.uri_to_iri

    In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uri_to_iri() is subject to a potential DoS (denial of service) attack via certain inputs with a very large number of Unicode characters.

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2237258
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5208.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-41164
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-41164
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-41164
  • article
    https://www.djangoproject.com/weblog/2023/sep/04/security-releases/