Red Hat Security Advisory

RHSA-2024:0733

Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

Released 2024-02-07 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Ansible Automation Platform 2.4 for RHEL 8 ansible-core-1:2.15.9-1.el8ap, automation-controller-venv-tower-4.5.1-1.el8ap
Red Hat Ansible Automation Platform 2.4 for RHEL 9 ansible-core-1:2.15.9-1.el9ap, automation-controller-venv-tower-4.5.1-1.el9ap

TI-2023-23495 CVE-2023-43804 · GHSA-v845-jxx5-vc9f

LOW 38

urllib3 is a user-friendly HTTP client library for Python.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0136 Published 2023-10-04 Partial fix · 2.0.6, 1.26.17 CWE-200

TI-2024-00636 CVE-2024-0690 · GHSA-h24r-m9qc-pvpg

LOW 25

An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00304 Published 2024-02-06 Fixed in 2.14.4, 2.15.9 +6 CWE-117