Skip to content
OpenAdvisories
Medium RHSA-2024:10766 2 CVEs

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

Published Dec 4, 2024 · Updated Oct 16, 2026

Ecosystem: Red Hat

Fixed packages 18

ReleasePackageFixed in
Red Hat · Ansible Automation Platform Developer 2 ansible_automation_platform_developer:2.5::el8 receptor 0:1.5.1-2.el8ap
Red Hat · Ansible Automation Platform Developer 2 ansible_automation_platform_developer:2.5::el8 receptorctl 0:1.5.1-2.el8ap
Red Hat · Ansible Automation Platform Developer 2 ansible_automation_platform_developer:2.5::el9 receptor 0:1.5.1-2.el9ap
Red Hat · Ansible Automation Platform Developer 2 ansible_automation_platform_developer:2.5::el9 receptorctl 0:1.5.1-2.el9ap
Red Hat · Ansible Automation Platform Inside 2 ansible_automation_platform_inside:2.5::el8 receptor 0:1.5.1-2.el8ap
Red Hat · Ansible Automation Platform Inside 2 ansible_automation_platform_inside:2.5::el8 receptorctl 0:1.5.1-2.el8ap
Red Hat · Ansible Automation Platform Inside 2 ansible_automation_platform_inside:2.5::el9 receptor 0:1.5.1-2.el9ap
Red Hat · Ansible Automation Platform Inside 2 ansible_automation_platform_inside:2.5::el9 receptorctl 0:1.5.1-2.el9ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.5::el8 automation-controller-venv-tower 0:4.6.3-1.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.5::el8 receptor 0:1.5.1-2.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.5::el8 receptor-debuginfo 0:1.5.1-2.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.5::el8 receptor-debugsource 0:1.5.1-2.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.5::el8 receptorctl 0:1.5.1-2.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.5::el9 automation-controller-venv-tower 0:4.6.3-1.el9ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.5::el9 receptor 0:1.5.1-2.el9ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.5::el9 receptor-debuginfo 0:1.5.1-2.el9ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.5::el9 receptor-debugsource 0:1.5.1-2.el9ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.5::el9 receptorctl 0:1.5.1-2.el9ap

Vulnerabilities 2

  • Medium 6.5
    CVE-2024-53259 Public exploit

    quic-go affected by an ICMP Packet Too Large Injection Attack on Linux

    quic-go is an implementation of the QUIC protocol in Go. An off-path attacker can inject an ICMP Packet Too Large packet. Since affected quic-go versions used IP_PMTUDISC_DO, the kernel would then return a "message too large" error on sendmsg, i.e. when quic-…

    quic-go quic-go k3s k3s-static Debian Ubuntu Azure Linux Wolfi Go
  • Medium 6.3
    CVE-2024-52304

    aiohttp vulnerable to request smuggling due to incorrect parsing of chunk extensions

    aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.10.11, the Python parser parses newlines in chunk extensions incorrectly which can lead to request smuggling vulnerabilities under certain conditions. If a pure…

    aio-libs aiohttp kserve-storage-controller py3-cassandra-medusa Debian Ubuntu Azure Linux Wolfi PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2327130
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10766.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-52304
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-52304
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-52304
  • article
    https://github.com/aio-libs/aiohttp/commit/259edc369075de63e6f3a4eaade058c62af0df71
  • article
    https://github.com/aio-libs/aiohttp/security/advisories/GHSA-8495-4g3g-x7pr
  • report
    https://access.redhat.com/security/cve/CVE-2024-53259
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2329991
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-53259
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-53259
  • article
    https://github.com/quic-go/quic-go/commit/ca31dd355cbe5fc6c5807992d9d1149c66c96a50
  • article
    https://github.com/quic-go/quic-go/pull/4729
  • article
    https://github.com/quic-go/quic-go/releases/tag/v0.48.2
  • article
    https://github.com/quic-go/quic-go/security/advisories/GHSA-px8v-pp82-rcvr