Skip to content
OpenAdvisories
Unscored RHSA-2023:7517 2 CVEs

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

Published Sep 30, 2024 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 6

ReleasePackageFixed in
Red Hat · Ansible Automation Platform Developer 2 ansible_automation_platform_developer:2.4::el8 receptor 0:1.4.3-1.el8ap
Red Hat · Ansible Automation Platform Developer 2 ansible_automation_platform_developer:2.4::el9 receptor 0:1.4.3-1.el9ap
Red Hat · Ansible Automation Platform Inside 2 ansible_automation_platform_inside:2.4::el8 receptor 0:1.4.3-1.el8ap
Red Hat · Ansible Automation Platform Inside 2 ansible_automation_platform_inside:2.4::el9 receptor 0:1.4.3-1.el9ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el8 receptor 0:1.4.3-1.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el9 receptor 0:1.4.3-1.el9ap

Vulnerabilities 2

  • Unscored —
    CVE-2023-39321

    Panic when processing post-handshake message on QUIC connections in crypto/tls

    Processing an incomplete post-handshake message for a QUIC connection can cause a panic.

    Go standard library crypto/tls go stdlib Alpine Wolfi Go
  • Unscored —
    CVE-2023-39322

    Memory exhaustion in QUIC connection handling in crypto/tls

    QUIC connections do not set an upper bound on the amount of data buffered when reading post-handshake messages, allowing a malicious QUIC connection to cause unbounded memory growth. With fix, connections now consistently reject messages larger than 65KiB in …

    Go standard library crypto/tls go stdlib Alpine Wolfi Go

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2237777
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2237778
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7517.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-39321
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-39321
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-39321
  • article
    https://go.dev/cl/523039
  • article
    https://go.dev/issue/62266
  • article
    https://groups.google.com/g/golang-dev/c/2C5vbR-UNkI/m/L1hdrPhfBAAJ
  • article
    https://vuln.go.dev/ID/GO-2023-2044.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-39322
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-39322
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-39322
  • article
    https://vuln.go.dev/ID/GO-2023-2045.json