Skip to content
OpenAdvisories
Medium RHSA-2024:0322 2 CVEs

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

Published Sep 16, 2024 · Updated Aug 7, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el8 python39-gitpython 0:3.1.40-1.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el8 python39-twisted 0:23.10.0-1.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el8 python39-twisted+tls 0:23.10.0-1.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el8 python3x-gitpython 0:3.1.40-1.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el8 python3x-twisted 0:23.10.0-1.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el9 python-gitpython 0:3.1.40-1.el9ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el9 python-twisted 0:23.10.0-1.el9ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el9 python3-gitpython 0:3.1.40-1.el9ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el9 python3-twisted 0:23.10.0-1.el9ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.4::el9 python3-twisted+tls 0:23.10.0-1.el9ap

Vulnerabilities 2

  • Medium 5.3
    CVE-2023-46137

    twisted.web has disordered HTTP pipeline response

    Twisted is an event-based framework for internet applications. Prior to version 23.10.0rc1, when sending multiple HTTP requests in one TCP packet, twisted.web will process the requests asynchronously without guaranteeing the response order. If one of the endp…

    twisted twisted twisted twisted Debian Ubuntu Azure Linux PyPI
  • Medium 4.0
    CVE-2023-41040

    GitPython blind local file inclusion

    GitPython is a python library used to interact with Git repositories. In order to resolve some git references, GitPython reads files from the `.git` directory, in some places the name of the file being read is provided by the user, GitPython doesn't check if …

    gitpython-developers GitPython gitpython python-git Debian Ubuntu Alpine PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2246264
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2247040
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0322.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-41040
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-41040
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-41040
  • article
    https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-cwvm-v4w8-q58c
  • report
    https://access.redhat.com/security/cve/CVE-2023-46137
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-46137
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-46137