Skip to content
OpenAdvisories
Medium RHSA-2023:6158 2 CVEs

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

Published Sep 18, 2024 · Updated Aug 8, 2026

Ecosystem: Red Hat

Fixed packages 6

ReleasePackageFixed in
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el8 automation-controller-venv-tower 0:4.4.7-1.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el8 python39-urllib3 0:1.26.18-1.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el8 python3x-urllib3 0:1.26.18-1.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el9 automation-controller-venv-tower 0:4.4.7-1.el9ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el9 python-urllib3 0:1.26.18-1.el9ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el9 python3-urllib3 0:1.26.18-1.el9ap

Vulnerabilities 2

  • Medium 5.9
    CVE-2023-43665

    Django Denial-of-service in django.utils.text.Truncator

    In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the django.utils.text.Truncator chars() and words() methods (when used with html=True) are subject to a potential DoS (denial of service) attack via certain inputs with very long, potential…

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI
  • Medium 5.9
    CVE-2023-43804 Public exploit

    `Cookie` HTTP header isn't stripped on cross-origin redirects

    urllib3 is a user-friendly HTTP client library for Python. urllib3 doesn't treat the `Cookie` HTTP header special or provide any helpers for managing cookies over HTTP, that is the responsibility of the user. However, it is possible for a user to specify a `C…

    urllib3 urllib3 python3 dask-gateway Debian Ubuntu Azure Linux Alpine Wolfi PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2241046
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2242493
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6158.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-43665
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-43665
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-43665
  • article
    https://www.djangoproject.com/weblog/2023/oct/04/security-releases/
  • report
    https://access.redhat.com/security/cve/CVE-2023-43804
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-43804
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-43804