Red Hat Security Advisory

RHSA-2023:4971

Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

Released 2023-09-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Ansible Automation Platform 2.4 for RHEL 8 automation-controller-venv-tower-4.4.3-1.el8ap, python39-gitpython-3.1.32-1.el8ap, python3x-gitpython-3.1.32-1.el8ap
Red Hat Ansible Automation Platform 2.4 for RHEL 9 automation-controller-venv-tower-4.4.3-1.el9ap, python-gitpython-3.1.32-1.el9ap, python3-gitpython-3.1.32-1.el9ap

TI-2023-09729 CVE-2023-23931 · GHSA-w7pp-m8wf-vj6r

MEDIUM 62

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01301 Published 2023-02-07 Partial fix · 39.0.1 CWE-754

TI-2023-21112 CVE-2023-40267 · GHSA-pr76-5cm5-w9cj

MEDIUM 51

GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01182 Published 2023-08-11 Partial fix · 3.1.32 CWE-78