Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2023-41040
Vulnerability from cvelistv5
Vendor | Product | Version | |
---|---|---|---|
▼ | gitpython-developers | GitPython |
Version: < 3.1.37 |
|
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-02T18:46:11.452Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "name": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-cwvm-v4w8-q58c", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-cwvm-v4w8-q58c" }, { "name": "https://github.com/gitpython-developers/GitPython/blob/1c8310d7cae144f74a671cbe17e51f63a830adbf/git/refs/symbolic.py#L174-L175", "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://github.com/gitpython-developers/GitPython/blob/1c8310d7cae144f74a671cbe17e51f63a830adbf/git/refs/symbolic.py#L174-L175" }, { "tags": [ "x_transferred" ], "url": "https://lists.debian.org/debian-lts-announce/2023/09/msg00036.html" } ], "title": "CVE Program Container" }, { "metrics": [ { "other": { "content": { "id": "CVE-2023-41040", "options": [ { "Exploitation": "poc" }, { "Automatable": "no" }, { "Technical Impact": "partial" } ], "role": "CISA Coordinator", "timestamp": "2024-10-01T18:04:46.833039Z", "version": "2.0.3" }, "type": "ssvc" } } ], "providerMetadata": { "dateUpdated": "2024-10-01T18:04:56.017Z", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP" }, "title": "CISA ADP Vulnrichment" } ], "cna": { "affected": [ { "product": "GitPython", "vendor": "gitpython-developers", "versions": [ { "status": "affected", "version": "\u003c 3.1.37" } ] } ], "descriptions": [ { "lang": "en", "value": "GitPython is a python library used to interact with Git repositories. In order to resolve some git references, GitPython reads files from the `.git` directory, in some places the name of the file being read is provided by the user, GitPython doesn\u0027t check if this file is located outside the `.git` directory. This allows an attacker to make GitPython read any file from the system. This vulnerability is present in https://github.com/gitpython-developers/GitPython/blob/1c8310d7cae144f74a671cbe17e51f63a830adbf/git/refs/symbolic.py#L174-L175. That code joins the base directory with a user given string without checking if the final path is located outside the base directory. This vulnerability cannot be used to read the contents of files but could in theory be used to trigger a denial of service for the program. This issue has been addressed in version 3.1.37." } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" } } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-22", "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2024-11-19T19:31:08.000Z", "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M" }, "references": [ { "name": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-cwvm-v4w8-q58c", "tags": [ "x_refsource_CONFIRM" ], "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-cwvm-v4w8-q58c" }, { "name": "https://github.com/gitpython-developers/GitPython/pull/1672", "tags": [ "x_refsource_MISC" ], "url": "https://github.com/gitpython-developers/GitPython/pull/1672" }, { "name": "https://github.com/gitpython-developers/GitPython/commit/74e55ee4544867e1bd976b7df5a45869ee397b0b", "tags": [ "x_refsource_MISC" ], "url": "https://github.com/gitpython-developers/GitPython/commit/74e55ee4544867e1bd976b7df5a45869ee397b0b" }, { "name": "https://github.com/gitpython-developers/GitPython/commit/e98f57b81f792f0f5e18d33ee658ae395f9aa3c4", "tags": [ "x_refsource_MISC" ], "url": "https://github.com/gitpython-developers/GitPython/commit/e98f57b81f792f0f5e18d33ee658ae395f9aa3c4" }, { "name": "https://github.com/gitpython-developers/GitPython/blob/1c8310d7cae144f74a671cbe17e51f63a830adbf/git/refs/symbolic.py#L174-L175", "tags": [ "x_refsource_MISC" ], "url": "https://github.com/gitpython-developers/GitPython/blob/1c8310d7cae144f74a671cbe17e51f63a830adbf/git/refs/symbolic.py#L174-L175" }, { "name": "https://github.com/gitpython-developers/GitPython/releases/tag/3.1.37", "tags": [ "x_refsource_MISC" ], "url": "https://github.com/gitpython-developers/GitPython/releases/tag/3.1.37" }, { "name": "https://github.com/pypa/advisory-database/tree/main/vulns/gitpython/PYSEC-2023-165.yaml", "tags": [ "x_refsource_MISC" ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/gitpython/PYSEC-2023-165.yaml" }, { "name": "https://lists.debian.org/debian-lts-announce/2023/09/msg00036.html", "tags": [ "x_refsource_MISC" ], "url": "https://lists.debian.org/debian-lts-announce/2023/09/msg00036.html" } ], "source": { "advisory": "GHSA-cwvm-v4w8-q58c", "discovery": "UNKNOWN" }, "title": "GitPython blind local file inclusion" } }, "cveMetadata": { "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "assignerShortName": "GitHub_M", "cveId": "CVE-2023-41040", "datePublished": "2023-08-30T21:07:42.263Z", "dateReserved": "2023-08-22T16:57:23.932Z", "dateUpdated": "2024-11-19T19:31:08.000Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2023-41040\",\"sourceIdentifier\":\"security-advisories@github.com\",\"published\":\"2023-08-30T22:15:09.857\",\"lastModified\":\"2024-11-21T08:20:26.217\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"GitPython is a python library used to interact with Git repositories. In order to resolve some git references, GitPython reads files from the `.git` directory, in some places the name of the file being read is provided by the user, GitPython doesn\u0027t check if this file is located outside the `.git` directory. This allows an attacker to make GitPython read any file from the system. This vulnerability is present in https://github.com/gitpython-developers/GitPython/blob/1c8310d7cae144f74a671cbe17e51f63a830adbf/git/refs/symbolic.py#L174-L175. That code joins the base directory with a user given string without checking if the final path is located outside the base directory. This vulnerability cannot be used to read the contents of files but could in theory be used to trigger a denial of service for the program. This issue has been addressed in version 3.1.37.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L\",\"baseScore\":4.0,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":2.5,\"impactScore\":1.4},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":3.9,\"impactScore\":2.5}]},\"weaknesses\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-22\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-22\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gitpython_project:gitpython:*:*:*:*:*:python:*:*\",\"versionEndIncluding\":\"3.1.34\",\"matchCriteriaId\":\"AC6BBB91-00CE-4AAE-9B5F-B66261632464\"}]}]}],\"references\":[{\"url\":\"https://github.com/gitpython-developers/GitPython/blob/1c8310d7cae144f74a671cbe17e51f63a830adbf/git/refs/symbolic.py#L174-L175\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Product\"]},{\"url\":\"https://github.com/gitpython-developers/GitPython/commit/74e55ee4544867e1bd976b7df5a45869ee397b0b\",\"source\":\"security-advisories@github.com\"},{\"url\":\"https://github.com/gitpython-developers/GitPython/commit/e98f57b81f792f0f5e18d33ee658ae395f9aa3c4\",\"source\":\"security-advisories@github.com\"},{\"url\":\"https://github.com/gitpython-developers/GitPython/pull/1672\",\"source\":\"security-advisories@github.com\"},{\"url\":\"https://github.com/gitpython-developers/GitPython/releases/tag/3.1.37\",\"source\":\"security-advisories@github.com\"},{\"url\":\"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-cwvm-v4w8-q58c\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Exploit\",\"Vendor Advisory\"]},{\"url\":\"https://github.com/pypa/advisory-database/tree/main/vulns/gitpython/PYSEC-2023-165.yaml\",\"source\":\"security-advisories@github.com\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2023/09/msg00036.html\",\"source\":\"security-advisories@github.com\"},{\"url\":\"https://github.com/gitpython-developers/GitPython/blob/1c8310d7cae144f74a671cbe17e51f63a830adbf/git/refs/symbolic.py#L174-L175\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Product\"]},{\"url\":\"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-cwvm-v4w8-q58c\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Vendor Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2023/09/msg00036.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}" } }
WID-SEC-W-2023-2428
Vulnerability from csaf_certbund
Notes
{ "document": { "aggregate_severity": { "text": "hoch" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "Salt bietet Infrastrukturverwaltung auf der Grundlage eines dynamischen Kommunikationsbusses.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein Angreifer kann eine Schwachstelle in SaltStack Salt ausnutzen, um beliebigen Programmcode auszuf\u00fchren.", "title": "Angriff" }, { "category": "general", "text": "- Linux", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2023-2428 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2428.json" }, { "category": "self", "summary": "WID-SEC-2023-2428 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2428" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0190 vom 2024-01-17", "url": "https://access.redhat.com/errata/RHSA-2024:0190" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0215 vom 2024-01-17", "url": "https://access.redhat.com/errata/RHSA-2024:0215" }, { "category": "external", "summary": "Salt Security Advisory vom 2023-09-21", "url": "https://docs.saltproject.io/en/3005/topics/releases/3005.3.html" }, { "category": "external", "summary": "Proof of Concept (PoC) f\u00fcr CVE-2023-40590", "url": "https://github.com/advisories/GHSA-wfm5-v35h-vwf4" }, { "category": "external", "summary": "Proof of Concept (PoC) f\u00fcr CVE-2023-41040", "url": "https://github.com/advisories/GHSA-cwvm-v4w8-q58c" }, { "category": "external", "summary": "Debian Security Advisory DLA-3589 vom 2023-09-29", "url": "https://lists.debian.org/debian-lts-announce/2023/09/msg00036.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0322 vom 2024-01-22", "url": "https://access.redhat.com/errata/RHSA-2024:0322" }, { "category": "external", "summary": "Fedora Security Advisory FEDORA-2023-7B78427A7D vom 2023-11-09", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2023-7b78427a7d" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:1640 vom 2024-04-02", "url": "https://access.redhat.com/errata/RHSA-2024:1640" } ], "source_lang": "en-US", "title": "SaltStack Salt: Mehre Schwachstellen", "tracking": { "current_release_date": "2024-04-02T22:00:00.000+00:00", "generator": { "date": "2024-04-03T08:08:01.389+00:00", "engine": { "name": "BSI-WID", "version": "1.3.0" } }, "id": "WID-SEC-W-2023-2428", "initial_release_date": "2023-09-21T22:00:00.000+00:00", "revision_history": [ { "date": "2023-09-21T22:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" }, { "date": "2023-10-01T22:00:00.000+00:00", "number": "2", "summary": "Neue Updates von Debian aufgenommen" }, { "date": "2023-11-08T23:00:00.000+00:00", "number": "3", "summary": "Neue Updates von Fedora aufgenommen" }, { "date": "2024-01-16T23:00:00.000+00:00", "number": "4", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2024-01-22T23:00:00.000+00:00", "number": "5", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2024-04-02T22:00:00.000+00:00", "number": "6", "summary": "Neue Updates von Red Hat aufgenommen" } ], "status": "final", "version": "6" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "Debian Linux", "product": { "name": "Debian Linux", "product_id": "2951", "product_identification_helper": { "cpe": "cpe:/o:debian:debian_linux:-" } } } ], "category": "vendor", "name": "Debian" }, { "branches": [ { "category": "product_name", "name": "Fedora Linux", "product": { "name": "Fedora Linux", "product_id": "74185", "product_identification_helper": { "cpe": "cpe:/o:fedoraproject:fedora:-" } } } ], "category": "vendor", "name": "Fedora" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "2.4", "product": { "name": "Red Hat Ansible Automation Platform 2.4", "product_id": "1496312", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_automation_platform:2.4" } } } ], "category": "product_name", "name": "Ansible Automation Platform" }, { "category": "product_name", "name": "Red Hat Enterprise Linux", "product": { "name": "Red Hat Enterprise Linux", "product_id": "67646", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:-" } } }, { "branches": [ { "category": "product_version_range", "name": "\u003c 17.1", "product": { "name": "Red Hat OpenStack \u003c 17.1", "product_id": "T029321", "product_identification_helper": { "cpe": "cpe:/a:redhat:openstack:17.1" } } } ], "category": "product_name", "name": "OpenStack" } ], "category": "vendor", "name": "Red Hat" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "gitpython \u003c 3.1.36", "product": { "name": "SaltStack Salt gitpython \u003c 3.1.36", "product_id": "T030045", "product_identification_helper": { "cpe": "cpe:/a:saltstack:salt:gitpython__3.1.36" } } } ], "category": "product_name", "name": "Salt" } ], "category": "vendor", "name": "SaltStack" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-40590", "notes": [ { "category": "description", "text": "Es besteht eine Schwachstelle in SaltStack Salt. Dieser Fehler besteht in der gitpython Komponente aufgrund eines nicht vertrauensw\u00fcrdigen Suchpfades. Ein entfernter, anonymer Angreifer kann diese Schwachstelle zur Ausf\u00fchrung von beliebigem Code ausnutzen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "T029321", "2951", "67646", "1496312", "74185" ] }, "release_date": "2023-09-21T22:00:00Z", "title": "CVE-2023-40590" }, { "cve": "CVE-2023-41040", "notes": [ { "category": "description", "text": "Es besteht eine Schwachstelle in SaltStack Salt. Dieser Fehler besteht in der Komponente gitpython aufgrund einer blinden lokalen Dateieinbindung. Ein lokaler Angreifer kann diese Sicherheitsl\u00fccke ausnutzen, um vertrauliche Informationen offenzulegen." } ], "product_status": { "known_affected": [ "T029321", "2951", "67646", "1496312", "74185" ] }, "release_date": "2023-09-21T22:00:00Z", "title": "CVE-2023-41040" } ] }
wid-sec-w-2023-2428
Vulnerability from csaf_certbund
Notes
{ "document": { "aggregate_severity": { "text": "hoch" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "Salt bietet Infrastrukturverwaltung auf der Grundlage eines dynamischen Kommunikationsbusses.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein Angreifer kann eine Schwachstelle in SaltStack Salt ausnutzen, um beliebigen Programmcode auszuf\u00fchren.", "title": "Angriff" }, { "category": "general", "text": "- Linux", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2023-2428 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2428.json" }, { "category": "self", "summary": "WID-SEC-2023-2428 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2428" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0190 vom 2024-01-17", "url": "https://access.redhat.com/errata/RHSA-2024:0190" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0215 vom 2024-01-17", "url": "https://access.redhat.com/errata/RHSA-2024:0215" }, { "category": "external", "summary": "Salt Security Advisory vom 2023-09-21", "url": "https://docs.saltproject.io/en/3005/topics/releases/3005.3.html" }, { "category": "external", "summary": "Proof of Concept (PoC) f\u00fcr CVE-2023-40590", "url": "https://github.com/advisories/GHSA-wfm5-v35h-vwf4" }, { "category": "external", "summary": "Proof of Concept (PoC) f\u00fcr CVE-2023-41040", "url": "https://github.com/advisories/GHSA-cwvm-v4w8-q58c" }, { "category": "external", "summary": "Debian Security Advisory DLA-3589 vom 2023-09-29", "url": "https://lists.debian.org/debian-lts-announce/2023/09/msg00036.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:0322 vom 2024-01-22", "url": "https://access.redhat.com/errata/RHSA-2024:0322" }, { "category": "external", "summary": "Fedora Security Advisory FEDORA-2023-7B78427A7D vom 2023-11-09", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2023-7b78427a7d" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2024:1640 vom 2024-04-02", "url": "https://access.redhat.com/errata/RHSA-2024:1640" } ], "source_lang": "en-US", "title": "SaltStack Salt: Mehre Schwachstellen", "tracking": { "current_release_date": "2024-04-02T22:00:00.000+00:00", "generator": { "date": "2024-04-03T08:08:01.389+00:00", "engine": { "name": "BSI-WID", "version": "1.3.0" } }, "id": "WID-SEC-W-2023-2428", "initial_release_date": "2023-09-21T22:00:00.000+00:00", "revision_history": [ { "date": "2023-09-21T22:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" }, { "date": "2023-10-01T22:00:00.000+00:00", "number": "2", "summary": "Neue Updates von Debian aufgenommen" }, { "date": "2023-11-08T23:00:00.000+00:00", "number": "3", "summary": "Neue Updates von Fedora aufgenommen" }, { "date": "2024-01-16T23:00:00.000+00:00", "number": "4", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2024-01-22T23:00:00.000+00:00", "number": "5", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2024-04-02T22:00:00.000+00:00", "number": "6", "summary": "Neue Updates von Red Hat aufgenommen" } ], "status": "final", "version": "6" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "Debian Linux", "product": { "name": "Debian Linux", "product_id": "2951", "product_identification_helper": { "cpe": "cpe:/o:debian:debian_linux:-" } } } ], "category": "vendor", "name": "Debian" }, { "branches": [ { "category": "product_name", "name": "Fedora Linux", "product": { "name": "Fedora Linux", "product_id": "74185", "product_identification_helper": { "cpe": "cpe:/o:fedoraproject:fedora:-" } } } ], "category": "vendor", "name": "Fedora" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "2.4", "product": { "name": "Red Hat Ansible Automation Platform 2.4", "product_id": "1496312", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_automation_platform:2.4" } } } ], "category": "product_name", "name": "Ansible Automation Platform" }, { "category": "product_name", "name": "Red Hat Enterprise Linux", "product": { "name": "Red Hat Enterprise Linux", "product_id": "67646", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:-" } } }, { "branches": [ { "category": "product_version_range", "name": "\u003c 17.1", "product": { "name": "Red Hat OpenStack \u003c 17.1", "product_id": "T029321", "product_identification_helper": { "cpe": "cpe:/a:redhat:openstack:17.1" } } } ], "category": "product_name", "name": "OpenStack" } ], "category": "vendor", "name": "Red Hat" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "gitpython \u003c 3.1.36", "product": { "name": "SaltStack Salt gitpython \u003c 3.1.36", "product_id": "T030045", "product_identification_helper": { "cpe": "cpe:/a:saltstack:salt:gitpython__3.1.36" } } } ], "category": "product_name", "name": "Salt" } ], "category": "vendor", "name": "SaltStack" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-40590", "notes": [ { "category": "description", "text": "Es besteht eine Schwachstelle in SaltStack Salt. Dieser Fehler besteht in der gitpython Komponente aufgrund eines nicht vertrauensw\u00fcrdigen Suchpfades. Ein entfernter, anonymer Angreifer kann diese Schwachstelle zur Ausf\u00fchrung von beliebigem Code ausnutzen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "T029321", "2951", "67646", "1496312", "74185" ] }, "release_date": "2023-09-21T22:00:00Z", "title": "CVE-2023-40590" }, { "cve": "CVE-2023-41040", "notes": [ { "category": "description", "text": "Es besteht eine Schwachstelle in SaltStack Salt. Dieser Fehler besteht in der Komponente gitpython aufgrund einer blinden lokalen Dateieinbindung. Ein lokaler Angreifer kann diese Sicherheitsl\u00fccke ausnutzen, um vertrauliche Informationen offenzulegen." } ], "product_status": { "known_affected": [ "T029321", "2951", "67646", "1496312", "74185" ] }, "release_date": "2023-09-21T22:00:00Z", "title": "CVE-2023-41040" } ] }
rhsa-2023_7851
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated Satellite 6.14 packages that fixes Important security bugs and several\nregular bugs are now available for Red Hat Satellite.", "title": "Topic" }, { "category": "general", "text": "Red Hat Satellite is a system management solution that allows organizations\nto configure and maintain their systems without the necessity to provide\npublic Internet access to their servers or other client systems. It\nperforms provisioning and configuration management of predefined standard\noperating environments.\n\nSecurity fix(es):\n\n* rubygem-actionpack: actionpack: Possible XSS via User Supplied Values to redirect_to [rhn_satellite_6.14] (CVE-2023-28362)\n\n* foreman: World readable file containing secrets [rhn_satellite_6.14] (CVE-2023-4886)\n\n* python-urllib3: urllib3: Request body not stripped after redirect from 303 status changes request method to GET [rhn_satellite_6-default] (CVE-2023-45803 )\n\n* python-gitpython: GitPython: Blind local file inclusion [rhn_satellite_6-default] (CVE-2023-41040)\n\nThis update fixes the following bugs:\n\n2250342 - REX job finished with exit code 0 but the script failed on client side due to no space.\n2250343 - Selinux denials are reported after following \"Chapter 13. Managing Custom File Type Content\" chapter step by step\n2250344 - Long running postgres threads during content-export\n2250345 - Upgrade django-import-export package to at least 3.1.0\n2250349 - After upstream repo switched to zst compression, Satellite 6.12.5.1 unable to sync\n2250350 - Slow generate applicability for Hosts with multiple modulestreams installed\n2250352 - Recalculate button for Errata is not available on Satellite 6.13/ Satellite 6.14 if no errata is present\n2250351 - Actions::ForemanLeapp::PreupgradeJob fails with null value in column \"preupgrade_report_id\" violates not-null constraint when run with non-admin user\n2251799 - REX Template for \u0027convert2rhel analyze\u0027 command\n2254085 - Getting \u0027/usr/sbin/foreman-rake db:migrate\u0027 returned 1 instead of one of [0] ERROR while trying to upgrade Satellite 6.13 to 6.14 \n2254080 - satellite-convert2rhel-toolkit rpm v1.0.0 in 6.14.z\n\nUsers of Red Hat Satellite are advised to upgrade to these updated\npackages, which fix these bugs.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2023:7851", "url": "https://access.redhat.com/errata/RHSA-2023:7851" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "https://access.redhat.com/documentation/en-us/red_hat_satellite/6.14/html/upgrading_red_hat_satellite_to_6.14/index", "url": "https://access.redhat.com/documentation/en-us/red_hat_satellite/6.14/html/upgrading_red_hat_satellite_to_6.14/index" }, { "category": "external", "summary": "2217785", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2217785" }, { "category": "external", "summary": "2230135", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2230135" }, { "category": "external", "summary": "2246840", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2246840" }, { "category": "external", "summary": "2247040", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2247040" }, { "category": "external", "summary": "2250342", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2250342" }, { "category": "external", "summary": "2250343", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2250343" }, { "category": "external", "summary": "2250344", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2250344" }, { "category": "external", "summary": "2250345", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2250345" }, { "category": "external", "summary": "2250349", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2250349" }, { "category": "external", "summary": "2250350", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2250350" }, { "category": "external", "summary": "2250351", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2250351" }, { "category": "external", "summary": "2250352", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2250352" }, { "category": "external", "summary": "2251799", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2251799" }, { "category": "external", "summary": "2254080", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2254080" }, { "category": "external", "summary": "2254085", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2254085" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7851.json" } ], "title": "Red Hat Security Advisory: Satellite 6.14.1 Async Security Update", "tracking": { "current_release_date": "2024-11-23T03:39:40+00:00", "generator": { "date": "2024-11-23T03:39:40+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2023:7851", "initial_release_date": "2023-12-14T16:30:08+00:00", "revision_history": [ { "date": "2023-12-14T16:30:08+00:00", "number": "1", "summary": "Initial version" }, { "date": "2023-12-14T16:30:08+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-23T03:39:40+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Satellite 6.14 for RHEL 8", "product": { "name": "Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14", "product_identification_helper": { "cpe": "cpe:/a:redhat:satellite:6.14::el8" } } }, { "category": "product_name", "name": "Red Hat Satellite 6.14 for RHEL 8", "product": { "name": "Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule", "product_identification_helper": { "cpe": "cpe:/a:redhat:satellite_capsule:6.14::el8" } } }, { "category": "product_name", "name": "Red Hat Satellite 6.14 for RHEL 8", "product": { "name": "Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-utils", "product_identification_helper": { "cpe": "cpe:/a:redhat:satellite_utils:6.14::el8" } } } ], "category": "product_family", "name": "Red Hat Satellite 6" }, { "branches": [ { "category": "product_version", "name": "createrepo_c-0:1.0.2-2.el8pc.src", "product": { "name": "createrepo_c-0:1.0.2-2.el8pc.src", "product_id": "createrepo_c-0:1.0.2-2.el8pc.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/createrepo_c@1.0.2-2.el8pc?arch=src" } } }, { "category": "product_version", "name": "foreman-0:3.7.0.10-1.el8sat.src", "product": { "name": "foreman-0:3.7.0.10-1.el8sat.src", "product_id": "foreman-0:3.7.0.10-1.el8sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman@3.7.0.10-1.el8sat?arch=src" } } }, { "category": "product_version", "name": "foreman-installer-1:3.7.0.5-1.el8sat.src", "product": { "name": "foreman-installer-1:3.7.0.5-1.el8sat.src", "product_id": "foreman-installer-1:3.7.0.5-1.el8sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-installer@3.7.0.5-1.el8sat?arch=src\u0026epoch=1" } } }, { "category": "product_version", "name": "python-django-import-export-0:3.1.0-1.el8pc.src", "product": { "name": "python-django-import-export-0:3.1.0-1.el8pc.src", "product_id": "python-django-import-export-0:3.1.0-1.el8pc.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-django-import-export@3.1.0-1.el8pc?arch=src" } } }, { "category": "product_version", "name": "python-gitpython-0:3.1.40-0.1.el8pc.src", "product": { "name": "python-gitpython-0:3.1.40-0.1.el8pc.src", "product_id": "python-gitpython-0:3.1.40-0.1.el8pc.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-gitpython@3.1.40-0.1.el8pc?arch=src" } } }, { "category": "product_version", "name": "python-pulpcore-0:3.22.19-1.el8pc.src", "product": { "name": "python-pulpcore-0:3.22.19-1.el8pc.src", "product_id": "python-pulpcore-0:3.22.19-1.el8pc.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-pulpcore@3.22.19-1.el8pc?arch=src" } } }, { "category": "product_version", "name": "python-pulp-rpm-0:3.19.11-2.el8pc.src", "product": { "name": "python-pulp-rpm-0:3.19.11-2.el8pc.src", "product_id": "python-pulp-rpm-0:3.19.11-2.el8pc.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-pulp-rpm@3.19.11-2.el8pc?arch=src" } } }, { "category": "product_version", "name": "python-urllib3-0:1.26.18-0.1.el8pc.src", "product": { "name": "python-urllib3-0:1.26.18-0.1.el8pc.src", "product_id": "python-urllib3-0:1.26.18-0.1.el8pc.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-urllib3@1.26.18-0.1.el8pc?arch=src" } } }, { "category": "product_version", "name": "rubygem-actioncable-0:6.1.7.4-1.el8sat.src", "product": { "name": "rubygem-actioncable-0:6.1.7.4-1.el8sat.src", "product_id": "rubygem-actioncable-0:6.1.7.4-1.el8sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-actioncable@6.1.7.4-1.el8sat?arch=src" } } }, { "category": "product_version", "name": "rubygem-actionmailbox-0:6.1.7.4-1.el8sat.src", "product": { "name": "rubygem-actionmailbox-0:6.1.7.4-1.el8sat.src", "product_id": "rubygem-actionmailbox-0:6.1.7.4-1.el8sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-actionmailbox@6.1.7.4-1.el8sat?arch=src" } } }, { "category": "product_version", "name": "rubygem-actionmailer-0:6.1.7.4-1.el8sat.src", "product": { "name": "rubygem-actionmailer-0:6.1.7.4-1.el8sat.src", "product_id": "rubygem-actionmailer-0:6.1.7.4-1.el8sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-actionmailer@6.1.7.4-1.el8sat?arch=src" } } }, { "category": "product_version", "name": "rubygem-actionpack-0:6.1.7.4-1.el8sat.src", "product": { "name": "rubygem-actionpack-0:6.1.7.4-1.el8sat.src", "product_id": "rubygem-actionpack-0:6.1.7.4-1.el8sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-actionpack@6.1.7.4-1.el8sat?arch=src" } } }, { "category": "product_version", "name": "rubygem-actiontext-0:6.1.7.4-1.el8sat.src", "product": { "name": "rubygem-actiontext-0:6.1.7.4-1.el8sat.src", "product_id": "rubygem-actiontext-0:6.1.7.4-1.el8sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-actiontext@6.1.7.4-1.el8sat?arch=src" } } }, { "category": "product_version", "name": "rubygem-actionview-0:6.1.7.4-1.el8sat.src", "product": { "name": "rubygem-actionview-0:6.1.7.4-1.el8sat.src", "product_id": "rubygem-actionview-0:6.1.7.4-1.el8sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-actionview@6.1.7.4-1.el8sat?arch=src" } } }, { "category": "product_version", "name": "rubygem-activejob-0:6.1.7.4-1.el8sat.src", "product": { "name": "rubygem-activejob-0:6.1.7.4-1.el8sat.src", "product_id": "rubygem-activejob-0:6.1.7.4-1.el8sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-activejob@6.1.7.4-1.el8sat?arch=src" } } }, { "category": "product_version", "name": "rubygem-activemodel-0:6.1.7.4-1.el8sat.src", "product": { "name": "rubygem-activemodel-0:6.1.7.4-1.el8sat.src", "product_id": "rubygem-activemodel-0:6.1.7.4-1.el8sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-activemodel@6.1.7.4-1.el8sat?arch=src" } } }, { "category": "product_version", "name": "rubygem-activerecord-0:6.1.7.4-1.el8sat.src", "product": { "name": "rubygem-activerecord-0:6.1.7.4-1.el8sat.src", "product_id": "rubygem-activerecord-0:6.1.7.4-1.el8sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-activerecord@6.1.7.4-1.el8sat?arch=src" } } }, { "category": "product_version", "name": "rubygem-activestorage-0:6.1.7.4-1.el8sat.src", "product": { "name": "rubygem-activestorage-0:6.1.7.4-1.el8sat.src", "product_id": "rubygem-activestorage-0:6.1.7.4-1.el8sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-activestorage@6.1.7.4-1.el8sat?arch=src" } } }, { "category": "product_version", "name": "rubygem-activesupport-0:6.1.7.4-1.el8sat.src", "product": { "name": "rubygem-activesupport-0:6.1.7.4-1.el8sat.src", "product_id": "rubygem-activesupport-0:6.1.7.4-1.el8sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-activesupport@6.1.7.4-1.el8sat?arch=src" } } }, { "category": "product_version", "name": "rubygem-rails-0:6.1.7.4-1.el8sat.src", "product": { "name": "rubygem-rails-0:6.1.7.4-1.el8sat.src", "product_id": "rubygem-rails-0:6.1.7.4-1.el8sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-rails@6.1.7.4-1.el8sat?arch=src" } } }, { "category": "product_version", "name": "rubygem-railties-0:6.1.7.4-1.el8sat.src", "product": { "name": "rubygem-railties-0:6.1.7.4-1.el8sat.src", "product_id": "rubygem-railties-0:6.1.7.4-1.el8sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-railties@6.1.7.4-1.el8sat?arch=src" } } }, { "category": "product_version", "name": "rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.src", "product": { "name": "rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.src", "product_id": "rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-smart_proxy_remote_execution_ssh@0.10.2-2.el8sat?arch=src" } } }, { "category": "product_version", "name": "satellite-0:6.14.1-1.el8sat.src", "product": { "name": "satellite-0:6.14.1-1.el8sat.src", "product_id": "satellite-0:6.14.1-1.el8sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/satellite@6.14.1-1.el8sat?arch=src" } } }, { "category": "product_version", "name": "rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.src", "product": { "name": "rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.src", "product_id": "rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-foreman_remote_execution@10.1.2-1.el8sat?arch=src" } } }, { "category": "product_version", "name": "rubygem-katello-0:4.9.0.18-1.el8sat.src", "product": { "name": "rubygem-katello-0:4.9.0.18-1.el8sat.src", "product_id": "rubygem-katello-0:4.9.0.18-1.el8sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-katello@4.9.0.18-1.el8sat?arch=src" } } }, { "category": "product_version", "name": "pulpcore-selinux-0:2.0.0-1.el8pc.src", "product": { "name": "pulpcore-selinux-0:2.0.0-1.el8pc.src", "product_id": "pulpcore-selinux-0:2.0.0-1.el8pc.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/pulpcore-selinux@2.0.0-1.el8pc?arch=src" } } }, { "category": "product_version", "name": "rubygem-foreman_leapp-0:1.1.0-1.el8sat.src", "product": { "name": "rubygem-foreman_leapp-0:1.1.0-1.el8sat.src", "product_id": "rubygem-foreman_leapp-0:1.1.0-1.el8sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-foreman_leapp@1.1.0-1.el8sat?arch=src" } } }, { "category": "product_version", "name": "satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.src", "product": { "name": "satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.src", "product_id": "satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/satellite-convert2rhel-toolkit@1.0.0-1.el8sat?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "createrepo_c-0:1.0.2-2.el8pc.x86_64", "product": { "name": "createrepo_c-0:1.0.2-2.el8pc.x86_64", "product_id": "createrepo_c-0:1.0.2-2.el8pc.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/createrepo_c@1.0.2-2.el8pc?arch=x86_64" } } }, { "category": "product_version", "name": "createrepo_c-libs-0:1.0.2-2.el8pc.x86_64", "product": { "name": "createrepo_c-libs-0:1.0.2-2.el8pc.x86_64", "product_id": "createrepo_c-libs-0:1.0.2-2.el8pc.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/createrepo_c-libs@1.0.2-2.el8pc?arch=x86_64" } } }, { "category": "product_version", "name": "python3-createrepo_c-0:1.0.2-2.el8pc.x86_64", "product": { "name": "python3-createrepo_c-0:1.0.2-2.el8pc.x86_64", "product_id": "python3-createrepo_c-0:1.0.2-2.el8pc.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-createrepo_c@1.0.2-2.el8pc?arch=x86_64" } } }, { "category": "product_version", "name": "python39-createrepo_c-0:1.0.2-2.el8pc.x86_64", "product": { "name": "python39-createrepo_c-0:1.0.2-2.el8pc.x86_64", "product_id": "python39-createrepo_c-0:1.0.2-2.el8pc.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python39-createrepo_c@1.0.2-2.el8pc?arch=x86_64" } } }, { "category": "product_version", "name": "createrepo_c-debugsource-0:1.0.2-2.el8pc.x86_64", "product": { "name": "createrepo_c-debugsource-0:1.0.2-2.el8pc.x86_64", "product_id": "createrepo_c-debugsource-0:1.0.2-2.el8pc.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/createrepo_c-debugsource@1.0.2-2.el8pc?arch=x86_64" } } }, { "category": "product_version", "name": "createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "product": { "name": "createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "product_id": "createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/createrepo_c-debuginfo@1.0.2-2.el8pc?arch=x86_64" } } }, { "category": "product_version", "name": "createrepo_c-libs-debuginfo-0:1.0.2-2.el8pc.x86_64", "product": { "name": "createrepo_c-libs-debuginfo-0:1.0.2-2.el8pc.x86_64", "product_id": "createrepo_c-libs-debuginfo-0:1.0.2-2.el8pc.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/createrepo_c-libs-debuginfo@1.0.2-2.el8pc?arch=x86_64" } } }, { "category": "product_version", "name": "python3-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "product": { "name": "python3-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "product_id": "python3-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-createrepo_c-debuginfo@1.0.2-2.el8pc?arch=x86_64" } } }, { "category": "product_version", "name": "python39-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "product": { "name": "python39-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "product_id": "python39-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python39-createrepo_c-debuginfo@1.0.2-2.el8pc?arch=x86_64" } } }, { "category": "product_version", "name": "pulpcore-selinux-0:2.0.0-1.el8pc.x86_64", "product": { "name": "pulpcore-selinux-0:2.0.0-1.el8pc.x86_64", "product_id": "pulpcore-selinux-0:2.0.0-1.el8pc.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/pulpcore-selinux@2.0.0-1.el8pc?arch=x86_64" } } }, { "category": "product_version", "name": "satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.x86_64", "product": { "name": "satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.x86_64", "product_id": "satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/satellite-convert2rhel-toolkit@1.0.0-1.el8sat?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "foreman-cli-0:3.7.0.10-1.el8sat.noarch", "product": { "name": "foreman-cli-0:3.7.0.10-1.el8sat.noarch", "product_id": "foreman-cli-0:3.7.0.10-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-cli@3.7.0.10-1.el8sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-debug-0:3.7.0.10-1.el8sat.noarch", "product": { "name": "foreman-debug-0:3.7.0.10-1.el8sat.noarch", "product_id": "foreman-debug-0:3.7.0.10-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-debug@3.7.0.10-1.el8sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-0:3.7.0.10-1.el8sat.noarch", "product": { "name": "foreman-0:3.7.0.10-1.el8sat.noarch", "product_id": "foreman-0:3.7.0.10-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman@3.7.0.10-1.el8sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "product": { "name": "foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "product_id": "foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-dynflow-sidekiq@3.7.0.10-1.el8sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "product": { "name": "foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "product_id": "foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-ec2@3.7.0.10-1.el8sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-journald-0:3.7.0.10-1.el8sat.noarch", "product": { "name": "foreman-journald-0:3.7.0.10-1.el8sat.noarch", "product_id": "foreman-journald-0:3.7.0.10-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-journald@3.7.0.10-1.el8sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "product": { "name": "foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "product_id": "foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-libvirt@3.7.0.10-1.el8sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "product": { "name": "foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "product_id": "foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-openstack@3.7.0.10-1.el8sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "product": { "name": "foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "product_id": "foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-ovirt@3.7.0.10-1.el8sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "product": { "name": "foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "product_id": "foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-postgresql@3.7.0.10-1.el8sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-redis-0:3.7.0.10-1.el8sat.noarch", "product": { "name": "foreman-redis-0:3.7.0.10-1.el8sat.noarch", "product_id": "foreman-redis-0:3.7.0.10-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-redis@3.7.0.10-1.el8sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-service-0:3.7.0.10-1.el8sat.noarch", "product": { "name": "foreman-service-0:3.7.0.10-1.el8sat.noarch", "product_id": "foreman-service-0:3.7.0.10-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-service@3.7.0.10-1.el8sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "product": { "name": "foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "product_id": "foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-telemetry@3.7.0.10-1.el8sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "product": { "name": "foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "product_id": "foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-vmware@3.7.0.10-1.el8sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-installer-1:3.7.0.5-1.el8sat.noarch", "product": { "name": "foreman-installer-1:3.7.0.5-1.el8sat.noarch", "product_id": "foreman-installer-1:3.7.0.5-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-installer@3.7.0.5-1.el8sat?arch=noarch\u0026epoch=1" } } }, { "category": "product_version", "name": "foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch", "product": { "name": "foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch", "product_id": "foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-installer-katello@3.7.0.5-1.el8sat?arch=noarch\u0026epoch=1" } } }, { "category": "product_version", "name": "python39-django-import-export-0:3.1.0-1.el8pc.noarch", "product": { "name": "python39-django-import-export-0:3.1.0-1.el8pc.noarch", "product_id": "python39-django-import-export-0:3.1.0-1.el8pc.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python39-django-import-export@3.1.0-1.el8pc?arch=noarch" } } }, { "category": "product_version", "name": "python39-gitpython-0:3.1.40-0.1.el8pc.noarch", "product": { "name": "python39-gitpython-0:3.1.40-0.1.el8pc.noarch", "product_id": "python39-gitpython-0:3.1.40-0.1.el8pc.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python39-gitpython@3.1.40-0.1.el8pc?arch=noarch" } } }, { "category": "product_version", "name": "python39-pulpcore-0:3.22.19-1.el8pc.noarch", "product": { "name": "python39-pulpcore-0:3.22.19-1.el8pc.noarch", "product_id": "python39-pulpcore-0:3.22.19-1.el8pc.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python39-pulpcore@3.22.19-1.el8pc?arch=noarch" } } }, { "category": "product_version", "name": "python39-pulp-rpm-0:3.19.11-2.el8pc.noarch", "product": { "name": "python39-pulp-rpm-0:3.19.11-2.el8pc.noarch", "product_id": "python39-pulp-rpm-0:3.19.11-2.el8pc.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python39-pulp-rpm@3.19.11-2.el8pc?arch=noarch" } } }, { "category": "product_version", "name": "python39-urllib3-0:1.26.18-0.1.el8pc.noarch", "product": { "name": "python39-urllib3-0:1.26.18-0.1.el8pc.noarch", "product_id": "python39-urllib3-0:1.26.18-0.1.el8pc.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python39-urllib3@1.26.18-0.1.el8pc?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-actioncable-0:6.1.7.4-1.el8sat.noarch", "product": { "name": "rubygem-actioncable-0:6.1.7.4-1.el8sat.noarch", "product_id": "rubygem-actioncable-0:6.1.7.4-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-actioncable@6.1.7.4-1.el8sat?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-actionmailbox-0:6.1.7.4-1.el8sat.noarch", "product": { "name": "rubygem-actionmailbox-0:6.1.7.4-1.el8sat.noarch", "product_id": "rubygem-actionmailbox-0:6.1.7.4-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-actionmailbox@6.1.7.4-1.el8sat?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-actionmailer-0:6.1.7.4-1.el8sat.noarch", "product": { "name": "rubygem-actionmailer-0:6.1.7.4-1.el8sat.noarch", "product_id": "rubygem-actionmailer-0:6.1.7.4-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-actionmailer@6.1.7.4-1.el8sat?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-actionpack-0:6.1.7.4-1.el8sat.noarch", "product": { "name": "rubygem-actionpack-0:6.1.7.4-1.el8sat.noarch", "product_id": "rubygem-actionpack-0:6.1.7.4-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-actionpack@6.1.7.4-1.el8sat?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-actiontext-0:6.1.7.4-1.el8sat.noarch", "product": { "name": "rubygem-actiontext-0:6.1.7.4-1.el8sat.noarch", "product_id": "rubygem-actiontext-0:6.1.7.4-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-actiontext@6.1.7.4-1.el8sat?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-actionview-0:6.1.7.4-1.el8sat.noarch", "product": { "name": "rubygem-actionview-0:6.1.7.4-1.el8sat.noarch", "product_id": "rubygem-actionview-0:6.1.7.4-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-actionview@6.1.7.4-1.el8sat?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-activejob-0:6.1.7.4-1.el8sat.noarch", "product": { "name": "rubygem-activejob-0:6.1.7.4-1.el8sat.noarch", "product_id": "rubygem-activejob-0:6.1.7.4-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-activejob@6.1.7.4-1.el8sat?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-activemodel-0:6.1.7.4-1.el8sat.noarch", "product": { "name": "rubygem-activemodel-0:6.1.7.4-1.el8sat.noarch", "product_id": "rubygem-activemodel-0:6.1.7.4-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-activemodel@6.1.7.4-1.el8sat?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-activerecord-0:6.1.7.4-1.el8sat.noarch", "product": { "name": "rubygem-activerecord-0:6.1.7.4-1.el8sat.noarch", "product_id": "rubygem-activerecord-0:6.1.7.4-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-activerecord@6.1.7.4-1.el8sat?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-activestorage-0:6.1.7.4-1.el8sat.noarch", "product": { "name": "rubygem-activestorage-0:6.1.7.4-1.el8sat.noarch", "product_id": "rubygem-activestorage-0:6.1.7.4-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-activestorage@6.1.7.4-1.el8sat?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-activesupport-0:6.1.7.4-1.el8sat.noarch", "product": { "name": "rubygem-activesupport-0:6.1.7.4-1.el8sat.noarch", "product_id": "rubygem-activesupport-0:6.1.7.4-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-activesupport@6.1.7.4-1.el8sat?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-rails-0:6.1.7.4-1.el8sat.noarch", "product": { "name": "rubygem-rails-0:6.1.7.4-1.el8sat.noarch", "product_id": "rubygem-rails-0:6.1.7.4-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-rails@6.1.7.4-1.el8sat?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-railties-0:6.1.7.4-1.el8sat.noarch", "product": { "name": "rubygem-railties-0:6.1.7.4-1.el8sat.noarch", "product_id": "rubygem-railties-0:6.1.7.4-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-railties@6.1.7.4-1.el8sat?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.noarch", "product": { "name": "rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.noarch", "product_id": "rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-smart_proxy_remote_execution_ssh@0.10.2-2.el8sat?arch=noarch" } } }, { "category": "product_version", "name": "satellite-cli-0:6.14.1-1.el8sat.noarch", "product": { "name": "satellite-cli-0:6.14.1-1.el8sat.noarch", "product_id": "satellite-cli-0:6.14.1-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/satellite-cli@6.14.1-1.el8sat?arch=noarch" } } }, { "category": "product_version", "name": "satellite-capsule-0:6.14.1-1.el8sat.noarch", "product": { "name": "satellite-capsule-0:6.14.1-1.el8sat.noarch", "product_id": "satellite-capsule-0:6.14.1-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/satellite-capsule@6.14.1-1.el8sat?arch=noarch" } } }, { "category": "product_version", "name": "satellite-common-0:6.14.1-1.el8sat.noarch", "product": { "name": "satellite-common-0:6.14.1-1.el8sat.noarch", "product_id": "satellite-common-0:6.14.1-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/satellite-common@6.14.1-1.el8sat?arch=noarch" } } }, { "category": "product_version", "name": "satellite-0:6.14.1-1.el8sat.noarch", "product": { "name": "satellite-0:6.14.1-1.el8sat.noarch", "product_id": "satellite-0:6.14.1-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/satellite@6.14.1-1.el8sat?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.noarch", "product": { "name": "rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.noarch", "product_id": "rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-foreman_remote_execution@10.1.2-1.el8sat?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-foreman_remote_execution-cockpit-0:10.1.2-1.el8sat.noarch", "product": { "name": "rubygem-foreman_remote_execution-cockpit-0:10.1.2-1.el8sat.noarch", "product_id": "rubygem-foreman_remote_execution-cockpit-0:10.1.2-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-foreman_remote_execution-cockpit@10.1.2-1.el8sat?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-katello-0:4.9.0.18-1.el8sat.noarch", "product": { "name": "rubygem-katello-0:4.9.0.18-1.el8sat.noarch", "product_id": "rubygem-katello-0:4.9.0.18-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-katello@4.9.0.18-1.el8sat?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-foreman_leapp-0:1.1.0-1.el8sat.noarch", "product": { "name": "rubygem-foreman_leapp-0:1.1.0-1.el8sat.noarch", "product_id": "rubygem-foreman_leapp-0:1.1.0-1.el8sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-foreman_leapp@1.1.0-1.el8sat?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "createrepo_c-0:1.0.2-2.el8pc.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:createrepo_c-0:1.0.2-2.el8pc.src" }, "product_reference": "createrepo_c-0:1.0.2-2.el8pc.src", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "createrepo_c-0:1.0.2-2.el8pc.x86_64 as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:createrepo_c-0:1.0.2-2.el8pc.x86_64" }, "product_reference": "createrepo_c-0:1.0.2-2.el8pc.x86_64", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64 as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64" }, "product_reference": "createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "createrepo_c-debugsource-0:1.0.2-2.el8pc.x86_64 as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:createrepo_c-debugsource-0:1.0.2-2.el8pc.x86_64" }, "product_reference": "createrepo_c-debugsource-0:1.0.2-2.el8pc.x86_64", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "createrepo_c-libs-0:1.0.2-2.el8pc.x86_64 as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:createrepo_c-libs-0:1.0.2-2.el8pc.x86_64" }, "product_reference": "createrepo_c-libs-0:1.0.2-2.el8pc.x86_64", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "createrepo_c-libs-debuginfo-0:1.0.2-2.el8pc.x86_64 as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:createrepo_c-libs-debuginfo-0:1.0.2-2.el8pc.x86_64" }, "product_reference": "createrepo_c-libs-debuginfo-0:1.0.2-2.el8pc.x86_64", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:foreman-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-0:3.7.0.10-1.el8sat.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:foreman-0:3.7.0.10-1.el8sat.src" }, "product_reference": "foreman-0:3.7.0.10-1.el8sat.src", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-cli-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:foreman-cli-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-cli-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-debug-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:foreman-debug-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-debug-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-ec2-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:foreman-ec2-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-installer-1:3.7.0.5-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:foreman-installer-1:3.7.0.5-1.el8sat.noarch" }, "product_reference": "foreman-installer-1:3.7.0.5-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-installer-1:3.7.0.5-1.el8sat.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:foreman-installer-1:3.7.0.5-1.el8sat.src" }, "product_reference": "foreman-installer-1:3.7.0.5-1.el8sat.src", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch" }, "product_reference": "foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-journald-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:foreman-journald-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-journald-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-libvirt-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-openstack-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:foreman-openstack-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-ovirt-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-postgresql-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-redis-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:foreman-redis-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-redis-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-service-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:foreman-service-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-service-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-telemetry-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-vmware-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:foreman-vmware-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "pulpcore-selinux-0:2.0.0-1.el8pc.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:pulpcore-selinux-0:2.0.0-1.el8pc.src" }, "product_reference": "pulpcore-selinux-0:2.0.0-1.el8pc.src", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "pulpcore-selinux-0:2.0.0-1.el8pc.x86_64 as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:pulpcore-selinux-0:2.0.0-1.el8pc.x86_64" }, "product_reference": "pulpcore-selinux-0:2.0.0-1.el8pc.x86_64", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "python-django-import-export-0:3.1.0-1.el8pc.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:python-django-import-export-0:3.1.0-1.el8pc.src" }, "product_reference": "python-django-import-export-0:3.1.0-1.el8pc.src", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "python-gitpython-0:3.1.40-0.1.el8pc.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:python-gitpython-0:3.1.40-0.1.el8pc.src" }, "product_reference": "python-gitpython-0:3.1.40-0.1.el8pc.src", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "python-pulp-rpm-0:3.19.11-2.el8pc.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:python-pulp-rpm-0:3.19.11-2.el8pc.src" }, "product_reference": "python-pulp-rpm-0:3.19.11-2.el8pc.src", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "python-pulpcore-0:3.22.19-1.el8pc.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:python-pulpcore-0:3.22.19-1.el8pc.src" }, "product_reference": "python-pulpcore-0:3.22.19-1.el8pc.src", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "python-urllib3-0:1.26.18-0.1.el8pc.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:python-urllib3-0:1.26.18-0.1.el8pc.src" }, "product_reference": "python-urllib3-0:1.26.18-0.1.el8pc.src", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "python3-createrepo_c-0:1.0.2-2.el8pc.x86_64 as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:python3-createrepo_c-0:1.0.2-2.el8pc.x86_64" }, "product_reference": "python3-createrepo_c-0:1.0.2-2.el8pc.x86_64", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "python3-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64 as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:python3-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64" }, "product_reference": "python3-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "python39-createrepo_c-0:1.0.2-2.el8pc.x86_64 as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:python39-createrepo_c-0:1.0.2-2.el8pc.x86_64" }, "product_reference": "python39-createrepo_c-0:1.0.2-2.el8pc.x86_64", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "python39-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64 as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:python39-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64" }, "product_reference": "python39-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "python39-django-import-export-0:3.1.0-1.el8pc.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:python39-django-import-export-0:3.1.0-1.el8pc.noarch" }, "product_reference": "python39-django-import-export-0:3.1.0-1.el8pc.noarch", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "python39-gitpython-0:3.1.40-0.1.el8pc.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:python39-gitpython-0:3.1.40-0.1.el8pc.noarch" }, "product_reference": "python39-gitpython-0:3.1.40-0.1.el8pc.noarch", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "python39-pulp-rpm-0:3.19.11-2.el8pc.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:python39-pulp-rpm-0:3.19.11-2.el8pc.noarch" }, "product_reference": "python39-pulp-rpm-0:3.19.11-2.el8pc.noarch", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "python39-pulpcore-0:3.22.19-1.el8pc.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:python39-pulpcore-0:3.22.19-1.el8pc.noarch" }, "product_reference": "python39-pulpcore-0:3.22.19-1.el8pc.noarch", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "python39-urllib3-0:1.26.18-0.1.el8pc.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:python39-urllib3-0:1.26.18-0.1.el8pc.noarch" }, "product_reference": "python39-urllib3-0:1.26.18-0.1.el8pc.noarch", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.noarch" }, "product_reference": "rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.src" }, "product_reference": "rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.src", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "satellite-0:6.14.1-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:satellite-0:6.14.1-1.el8sat.noarch" }, "product_reference": "satellite-0:6.14.1-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "satellite-0:6.14.1-1.el8sat.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:satellite-0:6.14.1-1.el8sat.src" }, "product_reference": "satellite-0:6.14.1-1.el8sat.src", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "satellite-capsule-0:6.14.1-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:satellite-capsule-0:6.14.1-1.el8sat.noarch" }, "product_reference": "satellite-capsule-0:6.14.1-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "satellite-cli-0:6.14.1-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:satellite-cli-0:6.14.1-1.el8sat.noarch" }, "product_reference": "satellite-cli-0:6.14.1-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "satellite-common-0:6.14.1-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-capsule:satellite-common-0:6.14.1-1.el8sat.noarch" }, "product_reference": "satellite-common-0:6.14.1-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-capsule" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-utils:foreman-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-utils" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-0:3.7.0.10-1.el8sat.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-utils:foreman-0:3.7.0.10-1.el8sat.src" }, "product_reference": "foreman-0:3.7.0.10-1.el8sat.src", "relates_to_product_reference": "8Base-satellite-6.14-utils" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-cli-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-utils:foreman-cli-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-cli-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-utils" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-debug-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-utils:foreman-debug-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-debug-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-utils" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-utils:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-utils" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-ec2-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-utils:foreman-ec2-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-utils" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-journald-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-utils:foreman-journald-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-journald-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-utils" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-libvirt-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-utils:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-utils" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-openstack-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-utils:foreman-openstack-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-utils" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-ovirt-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-utils:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-utils" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-postgresql-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-utils:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-utils" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-redis-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-utils:foreman-redis-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-redis-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-utils" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-service-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-utils:foreman-service-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-service-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-utils" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-telemetry-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-utils:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-utils" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-vmware-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-utils:foreman-vmware-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-utils" }, { "category": "default_component_of", "full_product_name": { "name": "satellite-0:6.14.1-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-utils:satellite-0:6.14.1-1.el8sat.noarch" }, "product_reference": "satellite-0:6.14.1-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-utils" }, { "category": "default_component_of", "full_product_name": { "name": "satellite-0:6.14.1-1.el8sat.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-utils:satellite-0:6.14.1-1.el8sat.src" }, "product_reference": "satellite-0:6.14.1-1.el8sat.src", "relates_to_product_reference": "8Base-satellite-6.14-utils" }, { "category": "default_component_of", "full_product_name": { "name": "satellite-capsule-0:6.14.1-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-utils:satellite-capsule-0:6.14.1-1.el8sat.noarch" }, "product_reference": "satellite-capsule-0:6.14.1-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-utils" }, { "category": "default_component_of", "full_product_name": { "name": "satellite-cli-0:6.14.1-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-utils:satellite-cli-0:6.14.1-1.el8sat.noarch" }, "product_reference": "satellite-cli-0:6.14.1-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-utils" }, { "category": "default_component_of", "full_product_name": { "name": "satellite-common-0:6.14.1-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14-utils:satellite-common-0:6.14.1-1.el8sat.noarch" }, "product_reference": "satellite-common-0:6.14.1-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14-utils" }, { "category": "default_component_of", "full_product_name": { "name": "createrepo_c-0:1.0.2-2.el8pc.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:createrepo_c-0:1.0.2-2.el8pc.src" }, "product_reference": "createrepo_c-0:1.0.2-2.el8pc.src", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "createrepo_c-0:1.0.2-2.el8pc.x86_64 as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:createrepo_c-0:1.0.2-2.el8pc.x86_64" }, "product_reference": "createrepo_c-0:1.0.2-2.el8pc.x86_64", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64 as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64" }, "product_reference": "createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "createrepo_c-debugsource-0:1.0.2-2.el8pc.x86_64 as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:createrepo_c-debugsource-0:1.0.2-2.el8pc.x86_64" }, "product_reference": "createrepo_c-debugsource-0:1.0.2-2.el8pc.x86_64", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "createrepo_c-libs-0:1.0.2-2.el8pc.x86_64 as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:createrepo_c-libs-0:1.0.2-2.el8pc.x86_64" }, "product_reference": "createrepo_c-libs-0:1.0.2-2.el8pc.x86_64", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "createrepo_c-libs-debuginfo-0:1.0.2-2.el8pc.x86_64 as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:createrepo_c-libs-debuginfo-0:1.0.2-2.el8pc.x86_64" }, "product_reference": "createrepo_c-libs-debuginfo-0:1.0.2-2.el8pc.x86_64", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:foreman-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-0:3.7.0.10-1.el8sat.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:foreman-0:3.7.0.10-1.el8sat.src" }, "product_reference": "foreman-0:3.7.0.10-1.el8sat.src", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-cli-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:foreman-cli-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-cli-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-debug-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:foreman-debug-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-debug-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-ec2-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:foreman-ec2-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-installer-1:3.7.0.5-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:foreman-installer-1:3.7.0.5-1.el8sat.noarch" }, "product_reference": "foreman-installer-1:3.7.0.5-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-installer-1:3.7.0.5-1.el8sat.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:foreman-installer-1:3.7.0.5-1.el8sat.src" }, "product_reference": "foreman-installer-1:3.7.0.5-1.el8sat.src", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch" }, "product_reference": "foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-journald-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:foreman-journald-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-journald-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-libvirt-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-openstack-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:foreman-openstack-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-ovirt-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-postgresql-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-redis-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:foreman-redis-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-redis-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-service-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:foreman-service-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-service-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-telemetry-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-vmware-0:3.7.0.10-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:foreman-vmware-0:3.7.0.10-1.el8sat.noarch" }, "product_reference": "foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "pulpcore-selinux-0:2.0.0-1.el8pc.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:pulpcore-selinux-0:2.0.0-1.el8pc.src" }, "product_reference": "pulpcore-selinux-0:2.0.0-1.el8pc.src", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "pulpcore-selinux-0:2.0.0-1.el8pc.x86_64 as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:pulpcore-selinux-0:2.0.0-1.el8pc.x86_64" }, "product_reference": "pulpcore-selinux-0:2.0.0-1.el8pc.x86_64", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "python-django-import-export-0:3.1.0-1.el8pc.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:python-django-import-export-0:3.1.0-1.el8pc.src" }, "product_reference": "python-django-import-export-0:3.1.0-1.el8pc.src", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "python-gitpython-0:3.1.40-0.1.el8pc.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:python-gitpython-0:3.1.40-0.1.el8pc.src" }, "product_reference": "python-gitpython-0:3.1.40-0.1.el8pc.src", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "python-pulp-rpm-0:3.19.11-2.el8pc.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:python-pulp-rpm-0:3.19.11-2.el8pc.src" }, "product_reference": "python-pulp-rpm-0:3.19.11-2.el8pc.src", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "python-pulpcore-0:3.22.19-1.el8pc.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:python-pulpcore-0:3.22.19-1.el8pc.src" }, "product_reference": "python-pulpcore-0:3.22.19-1.el8pc.src", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "python-urllib3-0:1.26.18-0.1.el8pc.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:python-urllib3-0:1.26.18-0.1.el8pc.src" }, "product_reference": "python-urllib3-0:1.26.18-0.1.el8pc.src", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "python3-createrepo_c-0:1.0.2-2.el8pc.x86_64 as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:python3-createrepo_c-0:1.0.2-2.el8pc.x86_64" }, "product_reference": "python3-createrepo_c-0:1.0.2-2.el8pc.x86_64", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "python3-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64 as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:python3-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64" }, "product_reference": "python3-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "python39-createrepo_c-0:1.0.2-2.el8pc.x86_64 as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:python39-createrepo_c-0:1.0.2-2.el8pc.x86_64" }, "product_reference": "python39-createrepo_c-0:1.0.2-2.el8pc.x86_64", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "python39-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64 as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:python39-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64" }, "product_reference": "python39-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "python39-django-import-export-0:3.1.0-1.el8pc.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:python39-django-import-export-0:3.1.0-1.el8pc.noarch" }, "product_reference": "python39-django-import-export-0:3.1.0-1.el8pc.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "python39-gitpython-0:3.1.40-0.1.el8pc.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:python39-gitpython-0:3.1.40-0.1.el8pc.noarch" }, "product_reference": "python39-gitpython-0:3.1.40-0.1.el8pc.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "python39-pulp-rpm-0:3.19.11-2.el8pc.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:python39-pulp-rpm-0:3.19.11-2.el8pc.noarch" }, "product_reference": "python39-pulp-rpm-0:3.19.11-2.el8pc.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "python39-pulpcore-0:3.22.19-1.el8pc.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:python39-pulpcore-0:3.22.19-1.el8pc.noarch" }, "product_reference": "python39-pulpcore-0:3.22.19-1.el8pc.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "python39-urllib3-0:1.26.18-0.1.el8pc.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:python39-urllib3-0:1.26.18-0.1.el8pc.noarch" }, "product_reference": "python39-urllib3-0:1.26.18-0.1.el8pc.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-actioncable-0:6.1.7.4-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:rubygem-actioncable-0:6.1.7.4-1.el8sat.noarch" }, "product_reference": "rubygem-actioncable-0:6.1.7.4-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-actioncable-0:6.1.7.4-1.el8sat.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:rubygem-actioncable-0:6.1.7.4-1.el8sat.src" }, "product_reference": "rubygem-actioncable-0:6.1.7.4-1.el8sat.src", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-actionmailbox-0:6.1.7.4-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:rubygem-actionmailbox-0:6.1.7.4-1.el8sat.noarch" }, "product_reference": "rubygem-actionmailbox-0:6.1.7.4-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-actionmailbox-0:6.1.7.4-1.el8sat.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:rubygem-actionmailbox-0:6.1.7.4-1.el8sat.src" }, "product_reference": "rubygem-actionmailbox-0:6.1.7.4-1.el8sat.src", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-actionmailer-0:6.1.7.4-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:rubygem-actionmailer-0:6.1.7.4-1.el8sat.noarch" }, "product_reference": "rubygem-actionmailer-0:6.1.7.4-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-actionmailer-0:6.1.7.4-1.el8sat.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:rubygem-actionmailer-0:6.1.7.4-1.el8sat.src" }, "product_reference": "rubygem-actionmailer-0:6.1.7.4-1.el8sat.src", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-actionpack-0:6.1.7.4-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:rubygem-actionpack-0:6.1.7.4-1.el8sat.noarch" }, "product_reference": "rubygem-actionpack-0:6.1.7.4-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-actionpack-0:6.1.7.4-1.el8sat.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:rubygem-actionpack-0:6.1.7.4-1.el8sat.src" }, "product_reference": "rubygem-actionpack-0:6.1.7.4-1.el8sat.src", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-actiontext-0:6.1.7.4-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:rubygem-actiontext-0:6.1.7.4-1.el8sat.noarch" }, "product_reference": "rubygem-actiontext-0:6.1.7.4-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-actiontext-0:6.1.7.4-1.el8sat.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:rubygem-actiontext-0:6.1.7.4-1.el8sat.src" }, "product_reference": "rubygem-actiontext-0:6.1.7.4-1.el8sat.src", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-actionview-0:6.1.7.4-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:rubygem-actionview-0:6.1.7.4-1.el8sat.noarch" }, "product_reference": "rubygem-actionview-0:6.1.7.4-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-actionview-0:6.1.7.4-1.el8sat.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:rubygem-actionview-0:6.1.7.4-1.el8sat.src" }, "product_reference": "rubygem-actionview-0:6.1.7.4-1.el8sat.src", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-activejob-0:6.1.7.4-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:rubygem-activejob-0:6.1.7.4-1.el8sat.noarch" }, "product_reference": "rubygem-activejob-0:6.1.7.4-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-activejob-0:6.1.7.4-1.el8sat.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:rubygem-activejob-0:6.1.7.4-1.el8sat.src" }, "product_reference": "rubygem-activejob-0:6.1.7.4-1.el8sat.src", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-activemodel-0:6.1.7.4-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:rubygem-activemodel-0:6.1.7.4-1.el8sat.noarch" }, "product_reference": "rubygem-activemodel-0:6.1.7.4-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-activemodel-0:6.1.7.4-1.el8sat.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:rubygem-activemodel-0:6.1.7.4-1.el8sat.src" }, "product_reference": "rubygem-activemodel-0:6.1.7.4-1.el8sat.src", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-activerecord-0:6.1.7.4-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:rubygem-activerecord-0:6.1.7.4-1.el8sat.noarch" }, "product_reference": "rubygem-activerecord-0:6.1.7.4-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-activerecord-0:6.1.7.4-1.el8sat.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:rubygem-activerecord-0:6.1.7.4-1.el8sat.src" }, "product_reference": "rubygem-activerecord-0:6.1.7.4-1.el8sat.src", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-activestorage-0:6.1.7.4-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:rubygem-activestorage-0:6.1.7.4-1.el8sat.noarch" }, "product_reference": "rubygem-activestorage-0:6.1.7.4-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-activestorage-0:6.1.7.4-1.el8sat.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:rubygem-activestorage-0:6.1.7.4-1.el8sat.src" }, "product_reference": "rubygem-activestorage-0:6.1.7.4-1.el8sat.src", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-activesupport-0:6.1.7.4-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:rubygem-activesupport-0:6.1.7.4-1.el8sat.noarch" }, "product_reference": "rubygem-activesupport-0:6.1.7.4-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-activesupport-0:6.1.7.4-1.el8sat.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:rubygem-activesupport-0:6.1.7.4-1.el8sat.src" }, "product_reference": "rubygem-activesupport-0:6.1.7.4-1.el8sat.src", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-foreman_leapp-0:1.1.0-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:rubygem-foreman_leapp-0:1.1.0-1.el8sat.noarch" }, "product_reference": "rubygem-foreman_leapp-0:1.1.0-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-foreman_leapp-0:1.1.0-1.el8sat.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:rubygem-foreman_leapp-0:1.1.0-1.el8sat.src" }, "product_reference": "rubygem-foreman_leapp-0:1.1.0-1.el8sat.src", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.noarch" }, "product_reference": "rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.src" }, "product_reference": "rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.src", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-foreman_remote_execution-cockpit-0:10.1.2-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:rubygem-foreman_remote_execution-cockpit-0:10.1.2-1.el8sat.noarch" }, "product_reference": "rubygem-foreman_remote_execution-cockpit-0:10.1.2-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-katello-0:4.9.0.18-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:rubygem-katello-0:4.9.0.18-1.el8sat.noarch" }, "product_reference": "rubygem-katello-0:4.9.0.18-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-katello-0:4.9.0.18-1.el8sat.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:rubygem-katello-0:4.9.0.18-1.el8sat.src" }, "product_reference": "rubygem-katello-0:4.9.0.18-1.el8sat.src", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-rails-0:6.1.7.4-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:rubygem-rails-0:6.1.7.4-1.el8sat.noarch" }, "product_reference": "rubygem-rails-0:6.1.7.4-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-rails-0:6.1.7.4-1.el8sat.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:rubygem-rails-0:6.1.7.4-1.el8sat.src" }, "product_reference": "rubygem-rails-0:6.1.7.4-1.el8sat.src", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-railties-0:6.1.7.4-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:rubygem-railties-0:6.1.7.4-1.el8sat.noarch" }, "product_reference": "rubygem-railties-0:6.1.7.4-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-railties-0:6.1.7.4-1.el8sat.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:rubygem-railties-0:6.1.7.4-1.el8sat.src" }, "product_reference": "rubygem-railties-0:6.1.7.4-1.el8sat.src", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.noarch" }, "product_reference": "rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.src" }, "product_reference": "rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.src", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "satellite-0:6.14.1-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:satellite-0:6.14.1-1.el8sat.noarch" }, "product_reference": "satellite-0:6.14.1-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "satellite-0:6.14.1-1.el8sat.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:satellite-0:6.14.1-1.el8sat.src" }, "product_reference": "satellite-0:6.14.1-1.el8sat.src", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "satellite-capsule-0:6.14.1-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:satellite-capsule-0:6.14.1-1.el8sat.noarch" }, "product_reference": "satellite-capsule-0:6.14.1-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "satellite-cli-0:6.14.1-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:satellite-cli-0:6.14.1-1.el8sat.noarch" }, "product_reference": "satellite-cli-0:6.14.1-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "satellite-common-0:6.14.1-1.el8sat.noarch as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:satellite-common-0:6.14.1-1.el8sat.noarch" }, "product_reference": "satellite-common-0:6.14.1-1.el8sat.noarch", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.src as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.src" }, "product_reference": "satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.src", "relates_to_product_reference": "8Base-satellite-6.14" }, { "category": "default_component_of", "full_product_name": { "name": "satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.x86_64 as a component of Red Hat Satellite 6.14 for RHEL 8", "product_id": "8Base-satellite-6.14:satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.x86_64" }, "product_reference": "satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.x86_64", "relates_to_product_reference": "8Base-satellite-6.14" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-4886", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2023-08-08T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-satellite-6.14-capsule:createrepo_c-0:1.0.2-2.el8pc.src", "8Base-satellite-6.14-capsule:createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-debugsource-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-libs-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-libs-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:pulpcore-selinux-0:2.0.0-1.el8pc.src", "8Base-satellite-6.14-capsule:pulpcore-selinux-0:2.0.0-1.el8pc.x86_64", "8Base-satellite-6.14-capsule:python-django-import-export-0:3.1.0-1.el8pc.src", "8Base-satellite-6.14-capsule:python-gitpython-0:3.1.40-0.1.el8pc.src", "8Base-satellite-6.14-capsule:python-pulp-rpm-0:3.19.11-2.el8pc.src", "8Base-satellite-6.14-capsule:python-pulpcore-0:3.22.19-1.el8pc.src", "8Base-satellite-6.14-capsule:python-urllib3-0:1.26.18-0.1.el8pc.src", "8Base-satellite-6.14-capsule:python3-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python3-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-django-import-export-0:3.1.0-1.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-gitpython-0:3.1.40-0.1.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-pulp-rpm-0:3.19.11-2.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-pulpcore-0:3.22.19-1.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-urllib3-0:1.26.18-0.1.el8pc.noarch", "8Base-satellite-6.14-capsule:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.noarch", "8Base-satellite-6.14-capsule:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.src", "8Base-satellite-6.14-capsule:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14-capsule:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14-utils:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:createrepo_c-0:1.0.2-2.el8pc.src", "8Base-satellite-6.14:createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-debugsource-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-libs-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-libs-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:pulpcore-selinux-0:2.0.0-1.el8pc.src", "8Base-satellite-6.14:pulpcore-selinux-0:2.0.0-1.el8pc.x86_64", "8Base-satellite-6.14:python-django-import-export-0:3.1.0-1.el8pc.src", "8Base-satellite-6.14:python-gitpython-0:3.1.40-0.1.el8pc.src", "8Base-satellite-6.14:python-pulp-rpm-0:3.19.11-2.el8pc.src", "8Base-satellite-6.14:python-pulpcore-0:3.22.19-1.el8pc.src", "8Base-satellite-6.14:python-urllib3-0:1.26.18-0.1.el8pc.src", "8Base-satellite-6.14:python3-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python3-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-django-import-export-0:3.1.0-1.el8pc.noarch", "8Base-satellite-6.14:python39-gitpython-0:3.1.40-0.1.el8pc.noarch", "8Base-satellite-6.14:python39-pulp-rpm-0:3.19.11-2.el8pc.noarch", "8Base-satellite-6.14:python39-pulpcore-0:3.22.19-1.el8pc.noarch", "8Base-satellite-6.14:python39-urllib3-0:1.26.18-0.1.el8pc.noarch", "8Base-satellite-6.14:rubygem-actioncable-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actioncable-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionmailbox-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionmailbox-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionmailer-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionmailer-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionpack-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionpack-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actiontext-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actiontext-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionview-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionview-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activejob-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activejob-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activemodel-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activemodel-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activerecord-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activerecord-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activestorage-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activestorage-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activesupport-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activesupport-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_leapp-0:1.1.0-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-foreman_leapp-0:1.1.0-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_remote_execution-cockpit-0:10.1.2-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-katello-0:4.9.0.18-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-katello-0:4.9.0.18-1.el8sat.src", "8Base-satellite-6.14:rubygem-rails-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-rails-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-railties-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-railties-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.noarch", "8Base-satellite-6.14:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.src", "8Base-satellite-6.14:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.src", "8Base-satellite-6.14:satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.x86_64" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2230135" } ], "notes": [ { "category": "description", "text": "A sensitive information exposure vulnerability was found in foreman. Contents of tomcat\u0027s server.xml file, which contain passwords to candlepin\u0027s keystore and truststore, were found to be world readable.", "title": "Vulnerability description" }, { "category": "summary", "text": "foreman: World readable file containing secrets", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has a limited impact on security, as candlepin\u0027s individual stores\u0027 privileges are limited to root and tomcat only. Therefore, the impact is limited to highly privileged users.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-satellite-6.14-capsule:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14-capsule:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-installer-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-installer-1:3.7.0.5-1.el8sat.src", "8Base-satellite-6.14-capsule:foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14-utils:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-installer-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14:foreman-installer-1:3.7.0.5-1.el8sat.src", "8Base-satellite-6.14:foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-vmware-0:3.7.0.10-1.el8sat.noarch" ], "known_not_affected": [ "8Base-satellite-6.14-capsule:createrepo_c-0:1.0.2-2.el8pc.src", "8Base-satellite-6.14-capsule:createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-debugsource-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-libs-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-libs-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:pulpcore-selinux-0:2.0.0-1.el8pc.src", "8Base-satellite-6.14-capsule:pulpcore-selinux-0:2.0.0-1.el8pc.x86_64", "8Base-satellite-6.14-capsule:python-django-import-export-0:3.1.0-1.el8pc.src", "8Base-satellite-6.14-capsule:python-gitpython-0:3.1.40-0.1.el8pc.src", "8Base-satellite-6.14-capsule:python-pulp-rpm-0:3.19.11-2.el8pc.src", "8Base-satellite-6.14-capsule:python-pulpcore-0:3.22.19-1.el8pc.src", "8Base-satellite-6.14-capsule:python-urllib3-0:1.26.18-0.1.el8pc.src", "8Base-satellite-6.14-capsule:python3-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python3-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-django-import-export-0:3.1.0-1.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-gitpython-0:3.1.40-0.1.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-pulp-rpm-0:3.19.11-2.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-pulpcore-0:3.22.19-1.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-urllib3-0:1.26.18-0.1.el8pc.noarch", "8Base-satellite-6.14-capsule:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.noarch", "8Base-satellite-6.14-capsule:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.src", "8Base-satellite-6.14-capsule:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14-capsule:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14-utils:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:createrepo_c-0:1.0.2-2.el8pc.src", "8Base-satellite-6.14:createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-debugsource-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-libs-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-libs-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:pulpcore-selinux-0:2.0.0-1.el8pc.src", "8Base-satellite-6.14:pulpcore-selinux-0:2.0.0-1.el8pc.x86_64", "8Base-satellite-6.14:python-django-import-export-0:3.1.0-1.el8pc.src", "8Base-satellite-6.14:python-gitpython-0:3.1.40-0.1.el8pc.src", "8Base-satellite-6.14:python-pulp-rpm-0:3.19.11-2.el8pc.src", "8Base-satellite-6.14:python-pulpcore-0:3.22.19-1.el8pc.src", "8Base-satellite-6.14:python-urllib3-0:1.26.18-0.1.el8pc.src", "8Base-satellite-6.14:python3-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python3-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-django-import-export-0:3.1.0-1.el8pc.noarch", "8Base-satellite-6.14:python39-gitpython-0:3.1.40-0.1.el8pc.noarch", "8Base-satellite-6.14:python39-pulp-rpm-0:3.19.11-2.el8pc.noarch", "8Base-satellite-6.14:python39-pulpcore-0:3.22.19-1.el8pc.noarch", "8Base-satellite-6.14:python39-urllib3-0:1.26.18-0.1.el8pc.noarch", "8Base-satellite-6.14:rubygem-actioncable-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actioncable-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionmailbox-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionmailbox-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionmailer-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionmailer-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionpack-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionpack-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actiontext-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actiontext-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionview-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionview-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activejob-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activejob-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activemodel-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activemodel-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activerecord-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activerecord-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activestorage-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activestorage-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activesupport-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activesupport-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_leapp-0:1.1.0-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-foreman_leapp-0:1.1.0-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_remote_execution-cockpit-0:10.1.2-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-katello-0:4.9.0.18-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-katello-0:4.9.0.18-1.el8sat.src", "8Base-satellite-6.14:rubygem-rails-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-rails-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-railties-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-railties-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.noarch", "8Base-satellite-6.14:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.src", "8Base-satellite-6.14:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.src", "8Base-satellite-6.14:satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-4886" }, { "category": "external", "summary": "RHBZ#2230135", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2230135" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-4886", "url": "https://www.cve.org/CVERecord?id=CVE-2023-4886" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-4886", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-4886" } ], "release_date": "2023-10-03T14:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-12-14T16:30:08+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "8Base-satellite-6.14-capsule:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14-capsule:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-installer-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-installer-1:3.7.0.5-1.el8sat.src", "8Base-satellite-6.14-capsule:foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14-utils:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-installer-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14:foreman-installer-1:3.7.0.5-1.el8sat.src", "8Base-satellite-6.14:foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-vmware-0:3.7.0.10-1.el8sat.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:7851" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "8Base-satellite-6.14-capsule:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14-capsule:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-installer-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-installer-1:3.7.0.5-1.el8sat.src", "8Base-satellite-6.14-capsule:foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14-utils:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-installer-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14:foreman-installer-1:3.7.0.5-1.el8sat.src", "8Base-satellite-6.14:foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-vmware-0:3.7.0.10-1.el8sat.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "foreman: World readable file containing secrets" }, { "cve": "CVE-2023-28362", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)" }, "discovery_date": "2023-06-27T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-satellite-6.14-capsule:createrepo_c-0:1.0.2-2.el8pc.src", "8Base-satellite-6.14-capsule:createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-debugsource-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-libs-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-libs-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14-capsule:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-installer-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-installer-1:3.7.0.5-1.el8sat.src", "8Base-satellite-6.14-capsule:foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:pulpcore-selinux-0:2.0.0-1.el8pc.src", "8Base-satellite-6.14-capsule:pulpcore-selinux-0:2.0.0-1.el8pc.x86_64", "8Base-satellite-6.14-capsule:python-django-import-export-0:3.1.0-1.el8pc.src", "8Base-satellite-6.14-capsule:python-gitpython-0:3.1.40-0.1.el8pc.src", "8Base-satellite-6.14-capsule:python-pulp-rpm-0:3.19.11-2.el8pc.src", "8Base-satellite-6.14-capsule:python-pulpcore-0:3.22.19-1.el8pc.src", "8Base-satellite-6.14-capsule:python-urllib3-0:1.26.18-0.1.el8pc.src", "8Base-satellite-6.14-capsule:python3-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python3-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-django-import-export-0:3.1.0-1.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-gitpython-0:3.1.40-0.1.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-pulp-rpm-0:3.19.11-2.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-pulpcore-0:3.22.19-1.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-urllib3-0:1.26.18-0.1.el8pc.noarch", "8Base-satellite-6.14-capsule:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.noarch", "8Base-satellite-6.14-capsule:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.src", "8Base-satellite-6.14-capsule:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14-capsule:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14-utils:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14-utils:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:createrepo_c-0:1.0.2-2.el8pc.src", "8Base-satellite-6.14:createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-debugsource-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-libs-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-libs-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-installer-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14:foreman-installer-1:3.7.0.5-1.el8sat.src", "8Base-satellite-6.14:foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:pulpcore-selinux-0:2.0.0-1.el8pc.src", "8Base-satellite-6.14:pulpcore-selinux-0:2.0.0-1.el8pc.x86_64", "8Base-satellite-6.14:python-django-import-export-0:3.1.0-1.el8pc.src", "8Base-satellite-6.14:python-gitpython-0:3.1.40-0.1.el8pc.src", "8Base-satellite-6.14:python-pulp-rpm-0:3.19.11-2.el8pc.src", "8Base-satellite-6.14:python-pulpcore-0:3.22.19-1.el8pc.src", "8Base-satellite-6.14:python-urllib3-0:1.26.18-0.1.el8pc.src", "8Base-satellite-6.14:python3-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python3-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-django-import-export-0:3.1.0-1.el8pc.noarch", "8Base-satellite-6.14:python39-gitpython-0:3.1.40-0.1.el8pc.noarch", "8Base-satellite-6.14:python39-pulp-rpm-0:3.19.11-2.el8pc.noarch", "8Base-satellite-6.14:python39-pulpcore-0:3.22.19-1.el8pc.noarch", "8Base-satellite-6.14:python39-urllib3-0:1.26.18-0.1.el8pc.noarch", "8Base-satellite-6.14:rubygem-actioncable-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actioncable-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionmailbox-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionmailbox-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionmailer-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionmailer-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actiontext-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actiontext-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionview-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionview-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activejob-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activejob-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activemodel-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activemodel-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activerecord-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activerecord-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activestorage-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activestorage-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activesupport-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activesupport-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_leapp-0:1.1.0-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-foreman_leapp-0:1.1.0-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_remote_execution-cockpit-0:10.1.2-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-katello-0:4.9.0.18-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-katello-0:4.9.0.18-1.el8sat.src", "8Base-satellite-6.14:rubygem-rails-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-rails-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-railties-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-railties-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.noarch", "8Base-satellite-6.14:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.src", "8Base-satellite-6.14:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.src", "8Base-satellite-6.14:satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.x86_64" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2217785" } ], "notes": [ { "category": "description", "text": "A Cross-site Scripting (XSS) vulnerability was found in Actionpack due to improper sanitization of user-supplied values. This allows provided values to contain characters that are not legal in an HTTP header value. This results in the potential for downstream services which enforce RFC compliance on HTTP response headers to remove the assigned location header.", "title": "Vulnerability description" }, { "category": "summary", "text": "actionpack: Possible XSS via User Supplied Values to redirect_to", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-satellite-6.14:rubygem-actionpack-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionpack-0:6.1.7.4-1.el8sat.src" ], "known_not_affected": [ "8Base-satellite-6.14-capsule:createrepo_c-0:1.0.2-2.el8pc.src", "8Base-satellite-6.14-capsule:createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-debugsource-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-libs-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-libs-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14-capsule:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-installer-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-installer-1:3.7.0.5-1.el8sat.src", "8Base-satellite-6.14-capsule:foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:pulpcore-selinux-0:2.0.0-1.el8pc.src", "8Base-satellite-6.14-capsule:pulpcore-selinux-0:2.0.0-1.el8pc.x86_64", "8Base-satellite-6.14-capsule:python-django-import-export-0:3.1.0-1.el8pc.src", "8Base-satellite-6.14-capsule:python-gitpython-0:3.1.40-0.1.el8pc.src", "8Base-satellite-6.14-capsule:python-pulp-rpm-0:3.19.11-2.el8pc.src", "8Base-satellite-6.14-capsule:python-pulpcore-0:3.22.19-1.el8pc.src", "8Base-satellite-6.14-capsule:python-urllib3-0:1.26.18-0.1.el8pc.src", "8Base-satellite-6.14-capsule:python3-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python3-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-django-import-export-0:3.1.0-1.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-gitpython-0:3.1.40-0.1.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-pulp-rpm-0:3.19.11-2.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-pulpcore-0:3.22.19-1.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-urllib3-0:1.26.18-0.1.el8pc.noarch", "8Base-satellite-6.14-capsule:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.noarch", "8Base-satellite-6.14-capsule:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.src", "8Base-satellite-6.14-capsule:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14-capsule:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14-utils:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14-utils:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:createrepo_c-0:1.0.2-2.el8pc.src", "8Base-satellite-6.14:createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-debugsource-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-libs-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-libs-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-installer-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14:foreman-installer-1:3.7.0.5-1.el8sat.src", "8Base-satellite-6.14:foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:pulpcore-selinux-0:2.0.0-1.el8pc.src", "8Base-satellite-6.14:pulpcore-selinux-0:2.0.0-1.el8pc.x86_64", "8Base-satellite-6.14:python-django-import-export-0:3.1.0-1.el8pc.src", "8Base-satellite-6.14:python-gitpython-0:3.1.40-0.1.el8pc.src", "8Base-satellite-6.14:python-pulp-rpm-0:3.19.11-2.el8pc.src", "8Base-satellite-6.14:python-pulpcore-0:3.22.19-1.el8pc.src", "8Base-satellite-6.14:python-urllib3-0:1.26.18-0.1.el8pc.src", "8Base-satellite-6.14:python3-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python3-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-django-import-export-0:3.1.0-1.el8pc.noarch", "8Base-satellite-6.14:python39-gitpython-0:3.1.40-0.1.el8pc.noarch", "8Base-satellite-6.14:python39-pulp-rpm-0:3.19.11-2.el8pc.noarch", "8Base-satellite-6.14:python39-pulpcore-0:3.22.19-1.el8pc.noarch", "8Base-satellite-6.14:python39-urllib3-0:1.26.18-0.1.el8pc.noarch", "8Base-satellite-6.14:rubygem-actioncable-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actioncable-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionmailbox-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionmailbox-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionmailer-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionmailer-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actiontext-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actiontext-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionview-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionview-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activejob-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activejob-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activemodel-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activemodel-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activerecord-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activerecord-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activestorage-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activestorage-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activesupport-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activesupport-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_leapp-0:1.1.0-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-foreman_leapp-0:1.1.0-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_remote_execution-cockpit-0:10.1.2-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-katello-0:4.9.0.18-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-katello-0:4.9.0.18-1.el8sat.src", "8Base-satellite-6.14:rubygem-rails-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-rails-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-railties-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-railties-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.noarch", "8Base-satellite-6.14:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.src", "8Base-satellite-6.14:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.src", "8Base-satellite-6.14:satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-28362" }, { "category": "external", "summary": "RHBZ#2217785", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2217785" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-28362", "url": "https://www.cve.org/CVERecord?id=CVE-2023-28362" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-28362", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-28362" }, { "category": "external", "summary": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2023-28362.yml", "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2023-28362.yml" } ], "release_date": "2023-06-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-12-14T16:30:08+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "8Base-satellite-6.14:rubygem-actionpack-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionpack-0:6.1.7.4-1.el8sat.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:7851" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1" }, "products": [ "8Base-satellite-6.14:rubygem-actionpack-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionpack-0:6.1.7.4-1.el8sat.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "actionpack: Possible XSS via User Supplied Values to redirect_to" }, { "cve": "CVE-2023-41040", "cwe": { "id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)" }, "discovery_date": "2023-10-30T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-satellite-6.14-capsule:createrepo_c-0:1.0.2-2.el8pc.src", "8Base-satellite-6.14-capsule:createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-debugsource-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-libs-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-libs-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14-capsule:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-installer-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-installer-1:3.7.0.5-1.el8sat.src", "8Base-satellite-6.14-capsule:foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:pulpcore-selinux-0:2.0.0-1.el8pc.src", "8Base-satellite-6.14-capsule:pulpcore-selinux-0:2.0.0-1.el8pc.x86_64", "8Base-satellite-6.14-capsule:python-django-import-export-0:3.1.0-1.el8pc.src", "8Base-satellite-6.14-capsule:python-pulp-rpm-0:3.19.11-2.el8pc.src", "8Base-satellite-6.14-capsule:python-pulpcore-0:3.22.19-1.el8pc.src", "8Base-satellite-6.14-capsule:python-urllib3-0:1.26.18-0.1.el8pc.src", "8Base-satellite-6.14-capsule:python3-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python3-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-django-import-export-0:3.1.0-1.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-pulp-rpm-0:3.19.11-2.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-pulpcore-0:3.22.19-1.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-urllib3-0:1.26.18-0.1.el8pc.noarch", "8Base-satellite-6.14-capsule:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.noarch", "8Base-satellite-6.14-capsule:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.src", "8Base-satellite-6.14-capsule:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14-capsule:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14-utils:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14-utils:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:createrepo_c-0:1.0.2-2.el8pc.src", "8Base-satellite-6.14:createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-debugsource-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-libs-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-libs-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-installer-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14:foreman-installer-1:3.7.0.5-1.el8sat.src", "8Base-satellite-6.14:foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:pulpcore-selinux-0:2.0.0-1.el8pc.src", "8Base-satellite-6.14:pulpcore-selinux-0:2.0.0-1.el8pc.x86_64", "8Base-satellite-6.14:python-django-import-export-0:3.1.0-1.el8pc.src", "8Base-satellite-6.14:python-pulp-rpm-0:3.19.11-2.el8pc.src", "8Base-satellite-6.14:python-pulpcore-0:3.22.19-1.el8pc.src", "8Base-satellite-6.14:python-urllib3-0:1.26.18-0.1.el8pc.src", "8Base-satellite-6.14:python3-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python3-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-django-import-export-0:3.1.0-1.el8pc.noarch", "8Base-satellite-6.14:python39-pulp-rpm-0:3.19.11-2.el8pc.noarch", "8Base-satellite-6.14:python39-pulpcore-0:3.22.19-1.el8pc.noarch", "8Base-satellite-6.14:python39-urllib3-0:1.26.18-0.1.el8pc.noarch", "8Base-satellite-6.14:rubygem-actioncable-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actioncable-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionmailbox-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionmailbox-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionmailer-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionmailer-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionpack-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionpack-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actiontext-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actiontext-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionview-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionview-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activejob-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activejob-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activemodel-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activemodel-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activerecord-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activerecord-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activestorage-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activestorage-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activesupport-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activesupport-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_leapp-0:1.1.0-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-foreman_leapp-0:1.1.0-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_remote_execution-cockpit-0:10.1.2-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-katello-0:4.9.0.18-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-katello-0:4.9.0.18-1.el8sat.src", "8Base-satellite-6.14:rubygem-rails-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-rails-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-railties-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-railties-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.noarch", "8Base-satellite-6.14:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.src", "8Base-satellite-6.14:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.src", "8Base-satellite-6.14:satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.x86_64" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2247040" } ], "notes": [ { "category": "description", "text": "A path traversal vulnerability was found in GitPython due to an input validation error when reading from the \".git\" directory. This issue may allow a remote attacker to prepare a specially crafted \".git\" file with directory traversal characters in file names and force the application to read these files from the local system, which can result in checking for the existence of a specific file on the system or allow a denial of service (DoS) attack.", "title": "Vulnerability description" }, { "category": "summary", "text": "GitPython: Blind local file inclusion", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability cannot be used to read the contents of files but could be used to trigger a denial of service for the program.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-satellite-6.14-capsule:python-gitpython-0:3.1.40-0.1.el8pc.src", "8Base-satellite-6.14-capsule:python39-gitpython-0:3.1.40-0.1.el8pc.noarch", "8Base-satellite-6.14:python-gitpython-0:3.1.40-0.1.el8pc.src", "8Base-satellite-6.14:python39-gitpython-0:3.1.40-0.1.el8pc.noarch" ], "known_not_affected": [ "8Base-satellite-6.14-capsule:createrepo_c-0:1.0.2-2.el8pc.src", "8Base-satellite-6.14-capsule:createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-debugsource-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-libs-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-libs-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14-capsule:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-installer-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-installer-1:3.7.0.5-1.el8sat.src", "8Base-satellite-6.14-capsule:foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:pulpcore-selinux-0:2.0.0-1.el8pc.src", "8Base-satellite-6.14-capsule:pulpcore-selinux-0:2.0.0-1.el8pc.x86_64", "8Base-satellite-6.14-capsule:python-django-import-export-0:3.1.0-1.el8pc.src", "8Base-satellite-6.14-capsule:python-pulp-rpm-0:3.19.11-2.el8pc.src", "8Base-satellite-6.14-capsule:python-pulpcore-0:3.22.19-1.el8pc.src", "8Base-satellite-6.14-capsule:python-urllib3-0:1.26.18-0.1.el8pc.src", "8Base-satellite-6.14-capsule:python3-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python3-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-django-import-export-0:3.1.0-1.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-pulp-rpm-0:3.19.11-2.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-pulpcore-0:3.22.19-1.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-urllib3-0:1.26.18-0.1.el8pc.noarch", "8Base-satellite-6.14-capsule:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.noarch", "8Base-satellite-6.14-capsule:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.src", "8Base-satellite-6.14-capsule:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14-capsule:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14-utils:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14-utils:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:createrepo_c-0:1.0.2-2.el8pc.src", "8Base-satellite-6.14:createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-debugsource-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-libs-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-libs-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-installer-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14:foreman-installer-1:3.7.0.5-1.el8sat.src", "8Base-satellite-6.14:foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:pulpcore-selinux-0:2.0.0-1.el8pc.src", "8Base-satellite-6.14:pulpcore-selinux-0:2.0.0-1.el8pc.x86_64", "8Base-satellite-6.14:python-django-import-export-0:3.1.0-1.el8pc.src", "8Base-satellite-6.14:python-pulp-rpm-0:3.19.11-2.el8pc.src", "8Base-satellite-6.14:python-pulpcore-0:3.22.19-1.el8pc.src", "8Base-satellite-6.14:python-urllib3-0:1.26.18-0.1.el8pc.src", "8Base-satellite-6.14:python3-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python3-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-django-import-export-0:3.1.0-1.el8pc.noarch", "8Base-satellite-6.14:python39-pulp-rpm-0:3.19.11-2.el8pc.noarch", "8Base-satellite-6.14:python39-pulpcore-0:3.22.19-1.el8pc.noarch", "8Base-satellite-6.14:python39-urllib3-0:1.26.18-0.1.el8pc.noarch", "8Base-satellite-6.14:rubygem-actioncable-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actioncable-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionmailbox-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionmailbox-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionmailer-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionmailer-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionpack-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionpack-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actiontext-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actiontext-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionview-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionview-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activejob-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activejob-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activemodel-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activemodel-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activerecord-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activerecord-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activestorage-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activestorage-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activesupport-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activesupport-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_leapp-0:1.1.0-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-foreman_leapp-0:1.1.0-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_remote_execution-cockpit-0:10.1.2-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-katello-0:4.9.0.18-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-katello-0:4.9.0.18-1.el8sat.src", "8Base-satellite-6.14:rubygem-rails-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-rails-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-railties-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-railties-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.noarch", "8Base-satellite-6.14:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.src", "8Base-satellite-6.14:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.src", "8Base-satellite-6.14:satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-41040" }, { "category": "external", "summary": "RHBZ#2247040", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2247040" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-41040", "url": "https://www.cve.org/CVERecord?id=CVE-2023-41040" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-41040", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-41040" }, { "category": "external", "summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-cwvm-v4w8-q58c", "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-cwvm-v4w8-q58c" } ], "release_date": "2023-08-31T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-12-14T16:30:08+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "8Base-satellite-6.14-capsule:python-gitpython-0:3.1.40-0.1.el8pc.src", "8Base-satellite-6.14-capsule:python39-gitpython-0:3.1.40-0.1.el8pc.noarch", "8Base-satellite-6.14:python-gitpython-0:3.1.40-0.1.el8pc.src", "8Base-satellite-6.14:python39-gitpython-0:3.1.40-0.1.el8pc.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:7851" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 5.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "version": "3.1" }, "products": [ "8Base-satellite-6.14-capsule:python-gitpython-0:3.1.40-0.1.el8pc.src", "8Base-satellite-6.14-capsule:python39-gitpython-0:3.1.40-0.1.el8pc.noarch", "8Base-satellite-6.14:python-gitpython-0:3.1.40-0.1.el8pc.src", "8Base-satellite-6.14:python39-gitpython-0:3.1.40-0.1.el8pc.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "GitPython: Blind local file inclusion" }, { "cve": "CVE-2023-43804", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2023-10-06T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2242493" } ], "notes": [ { "category": "description", "text": "A flaw was found in urllib3, a user-friendly HTTP client library for Python. urllib3 doesn\u0027t treat the `Cookie` HTTP header special or provide any helpers for managing cookies over HTTP, which is the responsibility of the user. However, it is possible for a user to specify a `Cookie` header and unknowingly leak information via HTTP redirects to a different origin if that user doesn\u0027t disable redirects explicitly.", "title": "Vulnerability description" }, { "category": "summary", "text": "python-urllib3: Cookie request header isn\u0027t stripped during cross-origin redirects", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-satellite-6.14-capsule:createrepo_c-0:1.0.2-2.el8pc.src", "8Base-satellite-6.14-capsule:createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-debugsource-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-libs-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-libs-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14-capsule:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-installer-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-installer-1:3.7.0.5-1.el8sat.src", "8Base-satellite-6.14-capsule:foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:pulpcore-selinux-0:2.0.0-1.el8pc.src", "8Base-satellite-6.14-capsule:pulpcore-selinux-0:2.0.0-1.el8pc.x86_64", "8Base-satellite-6.14-capsule:python-django-import-export-0:3.1.0-1.el8pc.src", "8Base-satellite-6.14-capsule:python-gitpython-0:3.1.40-0.1.el8pc.src", "8Base-satellite-6.14-capsule:python-pulp-rpm-0:3.19.11-2.el8pc.src", "8Base-satellite-6.14-capsule:python-pulpcore-0:3.22.19-1.el8pc.src", "8Base-satellite-6.14-capsule:python-urllib3-0:1.26.18-0.1.el8pc.src", "8Base-satellite-6.14-capsule:python3-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python3-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-django-import-export-0:3.1.0-1.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-gitpython-0:3.1.40-0.1.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-pulp-rpm-0:3.19.11-2.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-pulpcore-0:3.22.19-1.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-urllib3-0:1.26.18-0.1.el8pc.noarch", "8Base-satellite-6.14-capsule:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.noarch", "8Base-satellite-6.14-capsule:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.src", "8Base-satellite-6.14-capsule:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14-capsule:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14-utils:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14-utils:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:createrepo_c-0:1.0.2-2.el8pc.src", "8Base-satellite-6.14:createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-debugsource-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-libs-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-libs-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-installer-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14:foreman-installer-1:3.7.0.5-1.el8sat.src", "8Base-satellite-6.14:foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:pulpcore-selinux-0:2.0.0-1.el8pc.src", "8Base-satellite-6.14:pulpcore-selinux-0:2.0.0-1.el8pc.x86_64", "8Base-satellite-6.14:python-django-import-export-0:3.1.0-1.el8pc.src", "8Base-satellite-6.14:python-gitpython-0:3.1.40-0.1.el8pc.src", "8Base-satellite-6.14:python-pulp-rpm-0:3.19.11-2.el8pc.src", "8Base-satellite-6.14:python-pulpcore-0:3.22.19-1.el8pc.src", "8Base-satellite-6.14:python-urllib3-0:1.26.18-0.1.el8pc.src", "8Base-satellite-6.14:python3-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python3-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-django-import-export-0:3.1.0-1.el8pc.noarch", "8Base-satellite-6.14:python39-gitpython-0:3.1.40-0.1.el8pc.noarch", "8Base-satellite-6.14:python39-pulp-rpm-0:3.19.11-2.el8pc.noarch", "8Base-satellite-6.14:python39-pulpcore-0:3.22.19-1.el8pc.noarch", "8Base-satellite-6.14:python39-urllib3-0:1.26.18-0.1.el8pc.noarch", "8Base-satellite-6.14:rubygem-actioncable-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actioncable-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionmailbox-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionmailbox-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionmailer-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionmailer-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionpack-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionpack-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actiontext-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actiontext-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionview-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionview-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activejob-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activejob-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activemodel-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activemodel-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activerecord-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activerecord-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activestorage-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activestorage-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activesupport-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activesupport-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_leapp-0:1.1.0-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-foreman_leapp-0:1.1.0-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_remote_execution-cockpit-0:10.1.2-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-katello-0:4.9.0.18-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-katello-0:4.9.0.18-1.el8sat.src", "8Base-satellite-6.14:rubygem-rails-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-rails-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-railties-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-railties-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.noarch", "8Base-satellite-6.14:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.src", "8Base-satellite-6.14:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.src", "8Base-satellite-6.14:satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-43804" }, { "category": "external", "summary": "RHBZ#2242493", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2242493" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-43804", "url": "https://www.cve.org/CVERecord?id=CVE-2023-43804" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-43804", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-43804" } ], "release_date": "2023-10-04T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-12-14T16:30:08+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "8Base-satellite-6.14-capsule:createrepo_c-0:1.0.2-2.el8pc.src", "8Base-satellite-6.14-capsule:createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-debugsource-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-libs-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-libs-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14-capsule:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-installer-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-installer-1:3.7.0.5-1.el8sat.src", "8Base-satellite-6.14-capsule:foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:pulpcore-selinux-0:2.0.0-1.el8pc.src", "8Base-satellite-6.14-capsule:pulpcore-selinux-0:2.0.0-1.el8pc.x86_64", "8Base-satellite-6.14-capsule:python-django-import-export-0:3.1.0-1.el8pc.src", "8Base-satellite-6.14-capsule:python-gitpython-0:3.1.40-0.1.el8pc.src", "8Base-satellite-6.14-capsule:python-pulp-rpm-0:3.19.11-2.el8pc.src", "8Base-satellite-6.14-capsule:python-pulpcore-0:3.22.19-1.el8pc.src", "8Base-satellite-6.14-capsule:python-urllib3-0:1.26.18-0.1.el8pc.src", "8Base-satellite-6.14-capsule:python3-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python3-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-django-import-export-0:3.1.0-1.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-gitpython-0:3.1.40-0.1.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-pulp-rpm-0:3.19.11-2.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-pulpcore-0:3.22.19-1.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-urllib3-0:1.26.18-0.1.el8pc.noarch", "8Base-satellite-6.14-capsule:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.noarch", "8Base-satellite-6.14-capsule:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.src", "8Base-satellite-6.14-capsule:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14-capsule:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14-utils:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14-utils:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:createrepo_c-0:1.0.2-2.el8pc.src", "8Base-satellite-6.14:createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-debugsource-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-libs-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-libs-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-installer-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14:foreman-installer-1:3.7.0.5-1.el8sat.src", "8Base-satellite-6.14:foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:pulpcore-selinux-0:2.0.0-1.el8pc.src", "8Base-satellite-6.14:pulpcore-selinux-0:2.0.0-1.el8pc.x86_64", "8Base-satellite-6.14:python-django-import-export-0:3.1.0-1.el8pc.src", "8Base-satellite-6.14:python-gitpython-0:3.1.40-0.1.el8pc.src", "8Base-satellite-6.14:python-pulp-rpm-0:3.19.11-2.el8pc.src", "8Base-satellite-6.14:python-pulpcore-0:3.22.19-1.el8pc.src", "8Base-satellite-6.14:python-urllib3-0:1.26.18-0.1.el8pc.src", "8Base-satellite-6.14:python3-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python3-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-django-import-export-0:3.1.0-1.el8pc.noarch", "8Base-satellite-6.14:python39-gitpython-0:3.1.40-0.1.el8pc.noarch", "8Base-satellite-6.14:python39-pulp-rpm-0:3.19.11-2.el8pc.noarch", "8Base-satellite-6.14:python39-pulpcore-0:3.22.19-1.el8pc.noarch", "8Base-satellite-6.14:python39-urllib3-0:1.26.18-0.1.el8pc.noarch", "8Base-satellite-6.14:rubygem-actioncable-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actioncable-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionmailbox-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionmailbox-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionmailer-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionmailer-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionpack-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionpack-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actiontext-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actiontext-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionview-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionview-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activejob-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activejob-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activemodel-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activemodel-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activerecord-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activerecord-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activestorage-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activestorage-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activesupport-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activesupport-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_leapp-0:1.1.0-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-foreman_leapp-0:1.1.0-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_remote_execution-cockpit-0:10.1.2-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-katello-0:4.9.0.18-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-katello-0:4.9.0.18-1.el8sat.src", "8Base-satellite-6.14:rubygem-rails-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-rails-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-railties-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-railties-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.noarch", "8Base-satellite-6.14:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.src", "8Base-satellite-6.14:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.src", "8Base-satellite-6.14:satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:7851" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "8Base-satellite-6.14-capsule:createrepo_c-0:1.0.2-2.el8pc.src", "8Base-satellite-6.14-capsule:createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-debugsource-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-libs-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-libs-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14-capsule:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-installer-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-installer-1:3.7.0.5-1.el8sat.src", "8Base-satellite-6.14-capsule:foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:pulpcore-selinux-0:2.0.0-1.el8pc.src", "8Base-satellite-6.14-capsule:pulpcore-selinux-0:2.0.0-1.el8pc.x86_64", "8Base-satellite-6.14-capsule:python-django-import-export-0:3.1.0-1.el8pc.src", "8Base-satellite-6.14-capsule:python-gitpython-0:3.1.40-0.1.el8pc.src", "8Base-satellite-6.14-capsule:python-pulp-rpm-0:3.19.11-2.el8pc.src", "8Base-satellite-6.14-capsule:python-pulpcore-0:3.22.19-1.el8pc.src", "8Base-satellite-6.14-capsule:python-urllib3-0:1.26.18-0.1.el8pc.src", "8Base-satellite-6.14-capsule:python3-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python3-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-django-import-export-0:3.1.0-1.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-gitpython-0:3.1.40-0.1.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-pulp-rpm-0:3.19.11-2.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-pulpcore-0:3.22.19-1.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-urllib3-0:1.26.18-0.1.el8pc.noarch", "8Base-satellite-6.14-capsule:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.noarch", "8Base-satellite-6.14-capsule:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.src", "8Base-satellite-6.14-capsule:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14-capsule:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14-utils:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14-utils:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:createrepo_c-0:1.0.2-2.el8pc.src", "8Base-satellite-6.14:createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-debugsource-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-libs-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-libs-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-installer-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14:foreman-installer-1:3.7.0.5-1.el8sat.src", "8Base-satellite-6.14:foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:pulpcore-selinux-0:2.0.0-1.el8pc.src", "8Base-satellite-6.14:pulpcore-selinux-0:2.0.0-1.el8pc.x86_64", "8Base-satellite-6.14:python-django-import-export-0:3.1.0-1.el8pc.src", "8Base-satellite-6.14:python-gitpython-0:3.1.40-0.1.el8pc.src", "8Base-satellite-6.14:python-pulp-rpm-0:3.19.11-2.el8pc.src", "8Base-satellite-6.14:python-pulpcore-0:3.22.19-1.el8pc.src", "8Base-satellite-6.14:python-urllib3-0:1.26.18-0.1.el8pc.src", "8Base-satellite-6.14:python3-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python3-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-django-import-export-0:3.1.0-1.el8pc.noarch", "8Base-satellite-6.14:python39-gitpython-0:3.1.40-0.1.el8pc.noarch", "8Base-satellite-6.14:python39-pulp-rpm-0:3.19.11-2.el8pc.noarch", "8Base-satellite-6.14:python39-pulpcore-0:3.22.19-1.el8pc.noarch", "8Base-satellite-6.14:python39-urllib3-0:1.26.18-0.1.el8pc.noarch", "8Base-satellite-6.14:rubygem-actioncable-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actioncable-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionmailbox-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionmailbox-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionmailer-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionmailer-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionpack-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionpack-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actiontext-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actiontext-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionview-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionview-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activejob-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activejob-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activemodel-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activemodel-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activerecord-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activerecord-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activestorage-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activestorage-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activesupport-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activesupport-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_leapp-0:1.1.0-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-foreman_leapp-0:1.1.0-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_remote_execution-cockpit-0:10.1.2-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-katello-0:4.9.0.18-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-katello-0:4.9.0.18-1.el8sat.src", "8Base-satellite-6.14:rubygem-rails-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-rails-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-railties-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-railties-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.noarch", "8Base-satellite-6.14:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.src", "8Base-satellite-6.14:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.src", "8Base-satellite-6.14:satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "8Base-satellite-6.14-capsule:createrepo_c-0:1.0.2-2.el8pc.src", "8Base-satellite-6.14-capsule:createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-debugsource-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-libs-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-libs-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14-capsule:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-installer-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-installer-1:3.7.0.5-1.el8sat.src", "8Base-satellite-6.14-capsule:foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:pulpcore-selinux-0:2.0.0-1.el8pc.src", "8Base-satellite-6.14-capsule:pulpcore-selinux-0:2.0.0-1.el8pc.x86_64", "8Base-satellite-6.14-capsule:python-django-import-export-0:3.1.0-1.el8pc.src", "8Base-satellite-6.14-capsule:python-gitpython-0:3.1.40-0.1.el8pc.src", "8Base-satellite-6.14-capsule:python-pulp-rpm-0:3.19.11-2.el8pc.src", "8Base-satellite-6.14-capsule:python-pulpcore-0:3.22.19-1.el8pc.src", "8Base-satellite-6.14-capsule:python-urllib3-0:1.26.18-0.1.el8pc.src", "8Base-satellite-6.14-capsule:python3-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python3-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-django-import-export-0:3.1.0-1.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-gitpython-0:3.1.40-0.1.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-pulp-rpm-0:3.19.11-2.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-pulpcore-0:3.22.19-1.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-urllib3-0:1.26.18-0.1.el8pc.noarch", "8Base-satellite-6.14-capsule:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.noarch", "8Base-satellite-6.14-capsule:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.src", "8Base-satellite-6.14-capsule:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14-capsule:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14-utils:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14-utils:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:createrepo_c-0:1.0.2-2.el8pc.src", "8Base-satellite-6.14:createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-debugsource-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-libs-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-libs-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-installer-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14:foreman-installer-1:3.7.0.5-1.el8sat.src", "8Base-satellite-6.14:foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:pulpcore-selinux-0:2.0.0-1.el8pc.src", "8Base-satellite-6.14:pulpcore-selinux-0:2.0.0-1.el8pc.x86_64", "8Base-satellite-6.14:python-django-import-export-0:3.1.0-1.el8pc.src", "8Base-satellite-6.14:python-gitpython-0:3.1.40-0.1.el8pc.src", "8Base-satellite-6.14:python-pulp-rpm-0:3.19.11-2.el8pc.src", "8Base-satellite-6.14:python-pulpcore-0:3.22.19-1.el8pc.src", "8Base-satellite-6.14:python-urllib3-0:1.26.18-0.1.el8pc.src", "8Base-satellite-6.14:python3-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python3-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-django-import-export-0:3.1.0-1.el8pc.noarch", "8Base-satellite-6.14:python39-gitpython-0:3.1.40-0.1.el8pc.noarch", "8Base-satellite-6.14:python39-pulp-rpm-0:3.19.11-2.el8pc.noarch", "8Base-satellite-6.14:python39-pulpcore-0:3.22.19-1.el8pc.noarch", "8Base-satellite-6.14:python39-urllib3-0:1.26.18-0.1.el8pc.noarch", "8Base-satellite-6.14:rubygem-actioncable-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actioncable-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionmailbox-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionmailbox-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionmailer-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionmailer-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionpack-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionpack-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actiontext-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actiontext-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionview-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionview-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activejob-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activejob-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activemodel-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activemodel-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activerecord-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activerecord-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activestorage-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activestorage-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activesupport-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activesupport-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_leapp-0:1.1.0-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-foreman_leapp-0:1.1.0-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_remote_execution-cockpit-0:10.1.2-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-katello-0:4.9.0.18-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-katello-0:4.9.0.18-1.el8sat.src", "8Base-satellite-6.14:rubygem-rails-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-rails-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-railties-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-railties-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.noarch", "8Base-satellite-6.14:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.src", "8Base-satellite-6.14:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.src", "8Base-satellite-6.14:satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python-urllib3: Cookie request header isn\u0027t stripped during cross-origin redirects" }, { "cve": "CVE-2023-45803", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2023-10-29T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-satellite-6.14-capsule:createrepo_c-0:1.0.2-2.el8pc.src", "8Base-satellite-6.14-capsule:createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-debugsource-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-libs-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-libs-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14-capsule:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-installer-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-installer-1:3.7.0.5-1.el8sat.src", "8Base-satellite-6.14-capsule:foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:pulpcore-selinux-0:2.0.0-1.el8pc.src", "8Base-satellite-6.14-capsule:pulpcore-selinux-0:2.0.0-1.el8pc.x86_64", "8Base-satellite-6.14-capsule:python-django-import-export-0:3.1.0-1.el8pc.src", "8Base-satellite-6.14-capsule:python-gitpython-0:3.1.40-0.1.el8pc.src", "8Base-satellite-6.14-capsule:python-pulp-rpm-0:3.19.11-2.el8pc.src", "8Base-satellite-6.14-capsule:python-pulpcore-0:3.22.19-1.el8pc.src", "8Base-satellite-6.14-capsule:python3-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python3-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-django-import-export-0:3.1.0-1.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-gitpython-0:3.1.40-0.1.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-pulp-rpm-0:3.19.11-2.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-pulpcore-0:3.22.19-1.el8pc.noarch", "8Base-satellite-6.14-capsule:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.noarch", "8Base-satellite-6.14-capsule:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.src", "8Base-satellite-6.14-capsule:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14-capsule:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14-utils:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14-utils:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:createrepo_c-0:1.0.2-2.el8pc.src", "8Base-satellite-6.14:createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-debugsource-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-libs-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-libs-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-installer-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14:foreman-installer-1:3.7.0.5-1.el8sat.src", "8Base-satellite-6.14:foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:pulpcore-selinux-0:2.0.0-1.el8pc.src", "8Base-satellite-6.14:pulpcore-selinux-0:2.0.0-1.el8pc.x86_64", "8Base-satellite-6.14:python-django-import-export-0:3.1.0-1.el8pc.src", "8Base-satellite-6.14:python-gitpython-0:3.1.40-0.1.el8pc.src", "8Base-satellite-6.14:python-pulp-rpm-0:3.19.11-2.el8pc.src", "8Base-satellite-6.14:python-pulpcore-0:3.22.19-1.el8pc.src", "8Base-satellite-6.14:python3-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python3-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-django-import-export-0:3.1.0-1.el8pc.noarch", "8Base-satellite-6.14:python39-gitpython-0:3.1.40-0.1.el8pc.noarch", "8Base-satellite-6.14:python39-pulp-rpm-0:3.19.11-2.el8pc.noarch", "8Base-satellite-6.14:python39-pulpcore-0:3.22.19-1.el8pc.noarch", "8Base-satellite-6.14:rubygem-actioncable-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actioncable-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionmailbox-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionmailbox-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionmailer-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionmailer-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionpack-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionpack-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actiontext-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actiontext-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionview-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionview-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activejob-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activejob-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activemodel-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activemodel-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activerecord-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activerecord-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activestorage-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activestorage-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activesupport-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activesupport-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_leapp-0:1.1.0-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-foreman_leapp-0:1.1.0-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_remote_execution-cockpit-0:10.1.2-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-katello-0:4.9.0.18-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-katello-0:4.9.0.18-1.el8sat.src", "8Base-satellite-6.14:rubygem-rails-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-rails-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-railties-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-railties-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.noarch", "8Base-satellite-6.14:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.src", "8Base-satellite-6.14:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.src", "8Base-satellite-6.14:satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.x86_64" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2246840" } ], "notes": [ { "category": "description", "text": "A flaw was found in urllib3, an HTTP client library for Python. urllib3 doesn\u0027t remove the HTTP request body when an HTTP redirect response using status 301, 302, or 303, after changing the method in a request from one that could accept a request body such as `POST` to `GET`, as is required by HTTP RFCs. This issue requires a previously trusted service to become compromised in order to have an impact on confidentiality, therefore, the exploitability of this vulnerability is low. Additionally, many users aren\u0027t putting sensitive data in HTTP request bodies; if this is the case, this vulnerability isn\u0027t exploitable.", "title": "Vulnerability description" }, { "category": "summary", "text": "urllib3: Request body not stripped after redirect from 303 status changes request method to GET", "title": "Vulnerability summary" }, { "category": "other", "text": "Both of the following conditions must be true to be affected by this vulnerability: \n1. Using urllib3 and submitting sensitive information in the HTTP request body such as form data or JSON\n2. The origin service is compromised and starts redirecting using 301, 302, or 303 to a malicious peer or the redirected-to service becomes compromised", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-satellite-6.14-capsule:python-urllib3-0:1.26.18-0.1.el8pc.src", "8Base-satellite-6.14-capsule:python39-urllib3-0:1.26.18-0.1.el8pc.noarch", "8Base-satellite-6.14:python-urllib3-0:1.26.18-0.1.el8pc.src", "8Base-satellite-6.14:python39-urllib3-0:1.26.18-0.1.el8pc.noarch" ], "known_not_affected": [ "8Base-satellite-6.14-capsule:createrepo_c-0:1.0.2-2.el8pc.src", "8Base-satellite-6.14-capsule:createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-debugsource-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-libs-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-libs-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14-capsule:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-installer-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-installer-1:3.7.0.5-1.el8sat.src", "8Base-satellite-6.14-capsule:foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:pulpcore-selinux-0:2.0.0-1.el8pc.src", "8Base-satellite-6.14-capsule:pulpcore-selinux-0:2.0.0-1.el8pc.x86_64", "8Base-satellite-6.14-capsule:python-django-import-export-0:3.1.0-1.el8pc.src", "8Base-satellite-6.14-capsule:python-gitpython-0:3.1.40-0.1.el8pc.src", "8Base-satellite-6.14-capsule:python-pulp-rpm-0:3.19.11-2.el8pc.src", "8Base-satellite-6.14-capsule:python-pulpcore-0:3.22.19-1.el8pc.src", "8Base-satellite-6.14-capsule:python3-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python3-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-django-import-export-0:3.1.0-1.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-gitpython-0:3.1.40-0.1.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-pulp-rpm-0:3.19.11-2.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-pulpcore-0:3.22.19-1.el8pc.noarch", "8Base-satellite-6.14-capsule:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.noarch", "8Base-satellite-6.14-capsule:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.src", "8Base-satellite-6.14-capsule:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14-capsule:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14-utils:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14-utils:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:createrepo_c-0:1.0.2-2.el8pc.src", "8Base-satellite-6.14:createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-debugsource-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-libs-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-libs-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-installer-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14:foreman-installer-1:3.7.0.5-1.el8sat.src", "8Base-satellite-6.14:foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:pulpcore-selinux-0:2.0.0-1.el8pc.src", "8Base-satellite-6.14:pulpcore-selinux-0:2.0.0-1.el8pc.x86_64", "8Base-satellite-6.14:python-django-import-export-0:3.1.0-1.el8pc.src", "8Base-satellite-6.14:python-gitpython-0:3.1.40-0.1.el8pc.src", "8Base-satellite-6.14:python-pulp-rpm-0:3.19.11-2.el8pc.src", "8Base-satellite-6.14:python-pulpcore-0:3.22.19-1.el8pc.src", "8Base-satellite-6.14:python3-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python3-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-django-import-export-0:3.1.0-1.el8pc.noarch", "8Base-satellite-6.14:python39-gitpython-0:3.1.40-0.1.el8pc.noarch", "8Base-satellite-6.14:python39-pulp-rpm-0:3.19.11-2.el8pc.noarch", "8Base-satellite-6.14:python39-pulpcore-0:3.22.19-1.el8pc.noarch", "8Base-satellite-6.14:rubygem-actioncable-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actioncable-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionmailbox-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionmailbox-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionmailer-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionmailer-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionpack-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionpack-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actiontext-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actiontext-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionview-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionview-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activejob-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activejob-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activemodel-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activemodel-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activerecord-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activerecord-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activestorage-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activestorage-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activesupport-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activesupport-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_leapp-0:1.1.0-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-foreman_leapp-0:1.1.0-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_remote_execution-cockpit-0:10.1.2-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-katello-0:4.9.0.18-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-katello-0:4.9.0.18-1.el8sat.src", "8Base-satellite-6.14:rubygem-rails-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-rails-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-railties-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-railties-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.noarch", "8Base-satellite-6.14:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.src", "8Base-satellite-6.14:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.src", "8Base-satellite-6.14:satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-45803" }, { "category": "external", "summary": "RHBZ#2246840", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2246840" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-45803", "url": "https://www.cve.org/CVERecord?id=CVE-2023-45803" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-45803", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45803" }, { "category": "external", "summary": "https://github.com/urllib3/urllib3/commit/4e98d57809dacab1cbe625fddeec1a290c478ea9", "url": "https://github.com/urllib3/urllib3/commit/4e98d57809dacab1cbe625fddeec1a290c478ea9" }, { "category": "external", "summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-g4mx-q9vg-27p4", "url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-g4mx-q9vg-27p4" }, { "category": "external", "summary": "https://www.rfc-editor.org/rfc/rfc9110.html#name-get", "url": "https://www.rfc-editor.org/rfc/rfc9110.html#name-get" } ], "release_date": "2023-10-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-12-14T16:30:08+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "8Base-satellite-6.14-capsule:python-urllib3-0:1.26.18-0.1.el8pc.src", "8Base-satellite-6.14-capsule:python39-urllib3-0:1.26.18-0.1.el8pc.noarch", "8Base-satellite-6.14:python-urllib3-0:1.26.18-0.1.el8pc.src", "8Base-satellite-6.14:python39-urllib3-0:1.26.18-0.1.el8pc.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:7851" }, { "category": "workaround", "details": "Users unable to update should disable redirects for services that aren\u0027t expecting to respond with redirects with `redirects=False`, disable automatic redirects with `redirects=False`, and handle 301, 302, and 303 redirects manually by stripping the HTTP request body.", "product_ids": [ "8Base-satellite-6.14-capsule:createrepo_c-0:1.0.2-2.el8pc.src", "8Base-satellite-6.14-capsule:createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-debugsource-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-libs-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:createrepo_c-libs-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14-capsule:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-installer-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-installer-1:3.7.0.5-1.el8sat.src", "8Base-satellite-6.14-capsule:foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-capsule:pulpcore-selinux-0:2.0.0-1.el8pc.src", "8Base-satellite-6.14-capsule:pulpcore-selinux-0:2.0.0-1.el8pc.x86_64", "8Base-satellite-6.14-capsule:python-django-import-export-0:3.1.0-1.el8pc.src", "8Base-satellite-6.14-capsule:python-gitpython-0:3.1.40-0.1.el8pc.src", "8Base-satellite-6.14-capsule:python-pulp-rpm-0:3.19.11-2.el8pc.src", "8Base-satellite-6.14-capsule:python-pulpcore-0:3.22.19-1.el8pc.src", "8Base-satellite-6.14-capsule:python-urllib3-0:1.26.18-0.1.el8pc.src", "8Base-satellite-6.14-capsule:python3-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python3-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14-capsule:python39-django-import-export-0:3.1.0-1.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-gitpython-0:3.1.40-0.1.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-pulp-rpm-0:3.19.11-2.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-pulpcore-0:3.22.19-1.el8pc.noarch", "8Base-satellite-6.14-capsule:python39-urllib3-0:1.26.18-0.1.el8pc.noarch", "8Base-satellite-6.14-capsule:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.noarch", "8Base-satellite-6.14-capsule:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.src", "8Base-satellite-6.14-capsule:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14-capsule:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-capsule:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14-utils:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14-utils:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14-utils:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:createrepo_c-0:1.0.2-2.el8pc.src", "8Base-satellite-6.14:createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-debugsource-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-libs-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:createrepo_c-libs-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:foreman-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-0:3.7.0.10-1.el8sat.src", "8Base-satellite-6.14:foreman-cli-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-debug-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-dynflow-sidekiq-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-ec2-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-installer-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14:foreman-installer-1:3.7.0.5-1.el8sat.src", "8Base-satellite-6.14:foreman-installer-katello-1:3.7.0.5-1.el8sat.noarch", "8Base-satellite-6.14:foreman-journald-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-libvirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-openstack-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-ovirt-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-postgresql-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-redis-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-service-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-telemetry-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:foreman-vmware-0:3.7.0.10-1.el8sat.noarch", "8Base-satellite-6.14:pulpcore-selinux-0:2.0.0-1.el8pc.src", "8Base-satellite-6.14:pulpcore-selinux-0:2.0.0-1.el8pc.x86_64", "8Base-satellite-6.14:python-django-import-export-0:3.1.0-1.el8pc.src", "8Base-satellite-6.14:python-gitpython-0:3.1.40-0.1.el8pc.src", "8Base-satellite-6.14:python-pulp-rpm-0:3.19.11-2.el8pc.src", "8Base-satellite-6.14:python-pulpcore-0:3.22.19-1.el8pc.src", "8Base-satellite-6.14:python-urllib3-0:1.26.18-0.1.el8pc.src", "8Base-satellite-6.14:python3-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python3-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-createrepo_c-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-createrepo_c-debuginfo-0:1.0.2-2.el8pc.x86_64", "8Base-satellite-6.14:python39-django-import-export-0:3.1.0-1.el8pc.noarch", "8Base-satellite-6.14:python39-gitpython-0:3.1.40-0.1.el8pc.noarch", "8Base-satellite-6.14:python39-pulp-rpm-0:3.19.11-2.el8pc.noarch", "8Base-satellite-6.14:python39-pulpcore-0:3.22.19-1.el8pc.noarch", "8Base-satellite-6.14:python39-urllib3-0:1.26.18-0.1.el8pc.noarch", "8Base-satellite-6.14:rubygem-actioncable-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actioncable-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionmailbox-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionmailbox-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionmailer-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionmailer-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionpack-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionpack-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actiontext-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actiontext-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-actionview-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-actionview-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activejob-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activejob-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activemodel-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activemodel-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activerecord-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activerecord-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activestorage-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activestorage-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-activesupport-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-activesupport-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_leapp-0:1.1.0-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-foreman_leapp-0:1.1.0-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-foreman_remote_execution-0:10.1.2-1.el8sat.src", "8Base-satellite-6.14:rubygem-foreman_remote_execution-cockpit-0:10.1.2-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-katello-0:4.9.0.18-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-katello-0:4.9.0.18-1.el8sat.src", "8Base-satellite-6.14:rubygem-rails-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-rails-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-railties-0:6.1.7.4-1.el8sat.noarch", "8Base-satellite-6.14:rubygem-railties-0:6.1.7.4-1.el8sat.src", "8Base-satellite-6.14:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.noarch", "8Base-satellite-6.14:rubygem-smart_proxy_remote_execution_ssh-0:0.10.2-2.el8sat.src", "8Base-satellite-6.14:satellite-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-0:6.14.1-1.el8sat.src", "8Base-satellite-6.14:satellite-capsule-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-cli-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-common-0:6.14.1-1.el8sat.noarch", "8Base-satellite-6.14:satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.src", "8Base-satellite-6.14:satellite-convert2rhel-toolkit-0:1.0.0-1.el8sat.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 4.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "8Base-satellite-6.14-capsule:python-urllib3-0:1.26.18-0.1.el8pc.src", "8Base-satellite-6.14-capsule:python39-urllib3-0:1.26.18-0.1.el8pc.noarch", "8Base-satellite-6.14:python-urllib3-0:1.26.18-0.1.el8pc.src", "8Base-satellite-6.14:python39-urllib3-0:1.26.18-0.1.el8pc.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "urllib3: Request body not stripped after redirect from 303 status changes request method to GET" } ] }
rhsa-2024_0190
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for GitPython is now available for Red Hat OpenStack Platform\n17.1 (Wallaby).\n\nRed Hat Product Security has rated this update as having a security impact\nof Moderate. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability from\nthe CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "GitPython is a python library used to interact with Git repositories.\n\nSecurity Fix(es):\n\n* Blind local file inclusion (CVE-2023-41040)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2024:0190", "url": "https://access.redhat.com/errata/RHSA-2024:0190" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "2247040", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2247040" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0190.json" } ], "title": "Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (GitPython) security update", "tracking": { "current_release_date": "2024-11-23T03:18:44+00:00", "generator": { "date": "2024-11-23T03:18:44+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2024:0190", "initial_release_date": "2024-01-16T14:36:37+00:00", "revision_history": [ { "date": "2024-01-16T14:36:37+00:00", "number": "1", "summary": "Initial version" }, { "date": "2024-01-16T14:36:38+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-23T03:18:44+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat OpenStack Platform 17.1", "product": { "name": "Red Hat OpenStack Platform 17.1", "product_id": "8Base-RHOS-17.1", "product_identification_helper": { "cpe": "cpe:/a:redhat:openstack:17.1::el8" } } } ], "category": "product_family", "name": "Red Hat OpenStack Platform" }, { "branches": [ { "category": "product_version", "name": "GitPython-0:3.1.14-2.el8ost.src", "product": { "name": "GitPython-0:3.1.14-2.el8ost.src", "product_id": "GitPython-0:3.1.14-2.el8ost.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/GitPython@3.1.14-2.el8ost?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "python3-GitPython-0:3.1.14-2.el8ost.noarch", "product": { "name": "python3-GitPython-0:3.1.14-2.el8ost.noarch", "product_id": "python3-GitPython-0:3.1.14-2.el8ost.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-GitPython@3.1.14-2.el8ost?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "GitPython-0:3.1.14-2.el8ost.src as a component of Red Hat OpenStack Platform 17.1", "product_id": "8Base-RHOS-17.1:GitPython-0:3.1.14-2.el8ost.src" }, "product_reference": "GitPython-0:3.1.14-2.el8ost.src", "relates_to_product_reference": "8Base-RHOS-17.1" }, { "category": "default_component_of", "full_product_name": { "name": "python3-GitPython-0:3.1.14-2.el8ost.noarch as a component of Red Hat OpenStack Platform 17.1", "product_id": "8Base-RHOS-17.1:python3-GitPython-0:3.1.14-2.el8ost.noarch" }, "product_reference": "python3-GitPython-0:3.1.14-2.el8ost.noarch", "relates_to_product_reference": "8Base-RHOS-17.1" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-41040", "cwe": { "id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)" }, "discovery_date": "2023-10-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2247040" } ], "notes": [ { "category": "description", "text": "A path traversal vulnerability was found in GitPython due to an input validation error when reading from the \".git\" directory. This issue may allow a remote attacker to prepare a specially crafted \".git\" file with directory traversal characters in file names and force the application to read these files from the local system, which can result in checking for the existence of a specific file on the system or allow a denial of service (DoS) attack.", "title": "Vulnerability description" }, { "category": "summary", "text": "GitPython: Blind local file inclusion", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability cannot be used to read the contents of files but could be used to trigger a denial of service for the program.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-RHOS-17.1:GitPython-0:3.1.14-2.el8ost.src", "8Base-RHOS-17.1:python3-GitPython-0:3.1.14-2.el8ost.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-41040" }, { "category": "external", "summary": "RHBZ#2247040", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2247040" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-41040", "url": "https://www.cve.org/CVERecord?id=CVE-2023-41040" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-41040", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-41040" }, { "category": "external", "summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-cwvm-v4w8-q58c", "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-cwvm-v4w8-q58c" } ], "release_date": "2023-08-31T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-01-16T14:36:37+00:00", "details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "8Base-RHOS-17.1:GitPython-0:3.1.14-2.el8ost.src", "8Base-RHOS-17.1:python3-GitPython-0:3.1.14-2.el8ost.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:0190" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 5.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "version": "3.1" }, "products": [ "8Base-RHOS-17.1:GitPython-0:3.1.14-2.el8ost.src", "8Base-RHOS-17.1:python3-GitPython-0:3.1.14-2.el8ost.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "GitPython: Blind local file inclusion" } ] }
rhsa-2024_1640
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update is now available for Red Hat Ansible Automation Platform 2.4\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language.\n\nSecurity Fix(es):\n\n* automation-controller: Django: denial-of-service in \u0027intcomma\u0027 template filter (CVE-2024-24680)\n* automation-controller: aiohttp: http request smuggling (CVE-2024-23829)\n* automation-controller: aiohttp: follow_symlinks directory traversal vulnerability (CVE-2024-23334)\n* automation-controller: Jinja2: HTML attribute injection when passing user input as keys to xmlattr filter (CVE-2024-22195)\n* automation-controller: cryptography: NULL-dereference when loading PKCS7 certificates (CVE-2023-49083)\n* automation-controller: aiohttp: numerous issues in HTTP parser with header parsing (CVE-2023-47627)\n* automation-controller: Twisted: disordered HTTP pipeline response in twisted.web (CVE-2023-46137)\n* automation-controller: axios: exposure of confidential data stored in cookies (CVE-2023-45857)\n* automation-controller: GitPython: Blind local file inclusion (CVE-2023-41040)\n* python3-aiohttp/python39-aiohttp: http request smuggling (CVE-2024-23829)\n* python3-aiohttp/python39-aiohttp: follow_symlinks directory traversal vulnerability (CVE-2024-23334)\n* python3-django/python39-django: Potential regular expression denial-of-service in django.utils.text.Truncator.words() (CVE-2024-27351)\n* receptor: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)\n* receptor: golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nUpdates and fixes for automation controller:\n* Fixed bug where schedule prompted variables and survey answers were reset on edit when changing one of the basic form fields (AAP-20967)\n* Fixed the update execution environment image to no longer fail jobs that use the previous image (AAP-21733)\n* Removed string validation using comparisons of English literals for comparison, replacing validation with error/op codes as a universal approach to validation and comparison (AAP-21721)\n* Fixed dispatcher to appropriately terminate child processes when dispatcher terminates (AAP-21049)\n* Fixed upgrade from Ansible Tower 3.8.6 to AAP 2.4 to no longer fail upon database schema migration (AAP-19738)\n* automation-controller has been updated to 4.5.5\n\nUpdates and fixes for receptor:\n* Fixes a receptor dialing issue where the connection attempt is timed out too aggressively (AAP-21838, AAP-21828)\n* receptor has been updated to 1.4.5\n\nAdditional fixes:\n* ansible-core has been updated to 2.15.10\n* ansible-runner has been updated to 2.3.6\n* python3-aiohttp/python39-aiohttp has been updated to 3.9.3\n* python3-django/python39-django has been updated 4.2.11\n* python3-pulpcore/python39-pulpcore has been updated 3.28.24", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2024:1640", "url": "https://access.redhat.com/errata/RHSA-2024:1640" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "2246264", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2246264" }, { "category": "external", "summary": "2247040", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2247040" }, { "category": "external", "summary": "2248979", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2248979" }, { "category": "external", "summary": "2249825", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2249825" }, { "category": "external", "summary": "2253330", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2253330" }, { "category": "external", "summary": "2255331", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255331" }, { "category": "external", "summary": "2257854", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2257854" }, { "category": "external", "summary": "2261856", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2261856" }, { "category": "external", "summary": "2261887", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2261887" }, { "category": "external", "summary": "2261909", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2261909" }, { "category": "external", "summary": "2262921", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2262921" }, { "category": "external", "summary": "2266045", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2266045" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1640.json" } ], "title": "Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update", "tracking": { "current_release_date": "2024-12-17T22:37:39+00:00", "generator": { "date": "2024-12-17T22:37:39+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.3" } }, "id": "RHSA-2024:1640", "initial_release_date": "2024-04-02T19:34:39+00:00", "revision_history": [ { "date": "2024-04-02T19:34:39+00:00", "number": "1", "summary": "Initial version" }, { "date": "2024-04-02T19:34:39+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-12-17T22:37:39+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product": { "name": "Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_automation_platform:2.4::el9" } } }, { "category": "product_name", "name": "Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product": { "name": "Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4-Inside-1.2", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_automation_platform_inside:2.4::el9" } } }, { "category": "product_name", "name": "Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product": { "name": "Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4-Developer-1.1", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9" } } }, { "category": "product_name", "name": "Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product": { "name": "Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_automation_platform:2.4::el8" } } }, { "category": "product_name", "name": "Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product": { "name": "Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4-Inside-1.2", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_automation_platform_inside:2.4::el8" } } }, { "category": "product_name", "name": "Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product": { "name": "Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4-Developer-1.1", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8" } } } ], "category": "product_family", "name": "Red Hat Ansible Automation Platform" }, { "branches": [ { "category": "product_version", "name": "python-pulpcore-0:3.28.24-1.el9ap.src", "product": { "name": "python-pulpcore-0:3.28.24-1.el9ap.src", "product_id": "python-pulpcore-0:3.28.24-1.el9ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-pulpcore@3.28.24-1.el9ap?arch=src" } } }, { "category": "product_version", "name": "python-aiohttp-0:3.9.3-1.el9ap.src", "product": { "name": "python-aiohttp-0:3.9.3-1.el9ap.src", "product_id": "python-aiohttp-0:3.9.3-1.el9ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-aiohttp@3.9.3-1.el9ap?arch=src" } } }, { "category": "product_version", "name": "python-django-0:4.2.11-1.el9ap.src", "product": { "name": "python-django-0:4.2.11-1.el9ap.src", "product_id": "python-django-0:4.2.11-1.el9ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-django@4.2.11-1.el9ap?arch=src" } } }, { "category": "product_version", "name": "ansible-runner-0:2.3.6-1.el9ap.src", "product": { "name": "ansible-runner-0:2.3.6-1.el9ap.src", "product_id": "ansible-runner-0:2.3.6-1.el9ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/ansible-runner@2.3.6-1.el9ap?arch=src" } } }, { "category": "product_version", "name": "receptor-0:1.4.5-1.el9ap.src", "product": { "name": "receptor-0:1.4.5-1.el9ap.src", "product_id": "receptor-0:1.4.5-1.el9ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/receptor@1.4.5-1.el9ap?arch=src" } } }, { "category": "product_version", "name": "ansible-core-1:2.15.10-1.el9ap.src", "product": { "name": "ansible-core-1:2.15.10-1.el9ap.src", "product_id": "ansible-core-1:2.15.10-1.el9ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/ansible-core@2.15.10-1.el9ap?arch=src\u0026epoch=1" } } }, { "category": "product_version", "name": "automation-controller-0:4.5.5-2.el9ap.src", "product": { "name": "automation-controller-0:4.5.5-2.el9ap.src", "product_id": "automation-controller-0:4.5.5-2.el9ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller@4.5.5-2.el9ap?arch=src" } } }, { "category": "product_version", "name": "python3x-django-0:4.2.11-1.el8ap.src", "product": { "name": "python3x-django-0:4.2.11-1.el8ap.src", "product_id": "python3x-django-0:4.2.11-1.el8ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3x-django@4.2.11-1.el8ap?arch=src" } } }, { "category": "product_version", "name": "python3x-pulpcore-0:3.28.24-1.el8ap.src", "product": { "name": "python3x-pulpcore-0:3.28.24-1.el8ap.src", "product_id": "python3x-pulpcore-0:3.28.24-1.el8ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3x-pulpcore@3.28.24-1.el8ap?arch=src" } } }, { "category": "product_version", "name": "python3x-aiohttp-0:3.9.3-1.el8ap.src", "product": { "name": "python3x-aiohttp-0:3.9.3-1.el8ap.src", "product_id": "python3x-aiohttp-0:3.9.3-1.el8ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3x-aiohttp@3.9.3-1.el8ap?arch=src" } } }, { "category": "product_version", "name": "ansible-runner-0:2.3.6-1.el8ap.src", "product": { "name": "ansible-runner-0:2.3.6-1.el8ap.src", "product_id": "ansible-runner-0:2.3.6-1.el8ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/ansible-runner@2.3.6-1.el8ap?arch=src" } } }, { "category": "product_version", "name": "receptor-0:1.4.5-1.el8ap.src", "product": { "name": "receptor-0:1.4.5-1.el8ap.src", "product_id": "receptor-0:1.4.5-1.el8ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/receptor@1.4.5-1.el8ap?arch=src" } } }, { "category": "product_version", "name": "ansible-core-1:2.15.10-1.el8ap.src", "product": { "name": "ansible-core-1:2.15.10-1.el8ap.src", "product_id": "ansible-core-1:2.15.10-1.el8ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/ansible-core@2.15.10-1.el8ap?arch=src\u0026epoch=1" } } }, { "category": "product_version", "name": "automation-controller-0:4.5.5-2.el8ap.src", "product": { "name": "automation-controller-0:4.5.5-2.el8ap.src", "product_id": "automation-controller-0:4.5.5-2.el8ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller@4.5.5-2.el8ap?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "python3-pulpcore-0:3.28.24-1.el9ap.noarch", "product": { "name": "python3-pulpcore-0:3.28.24-1.el9ap.noarch", "product_id": "python3-pulpcore-0:3.28.24-1.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-pulpcore@3.28.24-1.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "python3-django-0:4.2.11-1.el9ap.noarch", "product": { "name": "python3-django-0:4.2.11-1.el9ap.noarch", "product_id": "python3-django-0:4.2.11-1.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-django@4.2.11-1.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "ansible-runner-0:2.3.6-1.el9ap.noarch", "product": { "name": "ansible-runner-0:2.3.6-1.el9ap.noarch", "product_id": "ansible-runner-0:2.3.6-1.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/ansible-runner@2.3.6-1.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "product": { "name": "python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "product_id": "python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-ansible-runner@2.3.6-1.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "receptorctl-0:1.4.5-1.el9ap.noarch", "product": { "name": "receptorctl-0:1.4.5-1.el9ap.noarch", "product_id": "receptorctl-0:1.4.5-1.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/receptorctl@1.4.5-1.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "ansible-core-1:2.15.10-1.el9ap.noarch", "product": { "name": "ansible-core-1:2.15.10-1.el9ap.noarch", "product_id": "ansible-core-1:2.15.10-1.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/ansible-core@2.15.10-1.el9ap?arch=noarch\u0026epoch=1" } } }, { "category": "product_version", "name": "ansible-test-1:2.15.10-1.el9ap.noarch", "product": { "name": "ansible-test-1:2.15.10-1.el9ap.noarch", "product_id": "ansible-test-1:2.15.10-1.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/ansible-test@2.15.10-1.el9ap?arch=noarch\u0026epoch=1" } } }, { "category": "product_version", "name": "automation-controller-cli-0:4.5.5-2.el9ap.noarch", "product": { "name": "automation-controller-cli-0:4.5.5-2.el9ap.noarch", "product_id": "automation-controller-cli-0:4.5.5-2.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-cli@4.5.5-2.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "automation-controller-server-0:4.5.5-2.el9ap.noarch", "product": { "name": "automation-controller-server-0:4.5.5-2.el9ap.noarch", "product_id": "automation-controller-server-0:4.5.5-2.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-server@4.5.5-2.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "automation-controller-ui-0:4.5.5-2.el9ap.noarch", "product": { "name": "automation-controller-ui-0:4.5.5-2.el9ap.noarch", "product_id": "automation-controller-ui-0:4.5.5-2.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-ui@4.5.5-2.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "python39-django-0:4.2.11-1.el8ap.noarch", "product": { "name": "python39-django-0:4.2.11-1.el8ap.noarch", "product_id": "python39-django-0:4.2.11-1.el8ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python39-django@4.2.11-1.el8ap?arch=noarch" } } }, { "category": "product_version", "name": "python39-pulpcore-0:3.28.24-1.el8ap.noarch", "product": { "name": "python39-pulpcore-0:3.28.24-1.el8ap.noarch", "product_id": "python39-pulpcore-0:3.28.24-1.el8ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python39-pulpcore@3.28.24-1.el8ap?arch=noarch" } } }, { "category": "product_version", "name": "ansible-runner-0:2.3.6-1.el8ap.noarch", "product": { "name": "ansible-runner-0:2.3.6-1.el8ap.noarch", "product_id": "ansible-runner-0:2.3.6-1.el8ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/ansible-runner@2.3.6-1.el8ap?arch=noarch" } } }, { "category": "product_version", "name": "python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "product": { "name": "python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "product_id": "python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python39-ansible-runner@2.3.6-1.el8ap?arch=noarch" } } }, { "category": "product_version", "name": "receptorctl-0:1.4.5-1.el8ap.noarch", "product": { "name": "receptorctl-0:1.4.5-1.el8ap.noarch", "product_id": "receptorctl-0:1.4.5-1.el8ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/receptorctl@1.4.5-1.el8ap?arch=noarch" } } }, { "category": "product_version", "name": "ansible-core-1:2.15.10-1.el8ap.noarch", "product": { "name": "ansible-core-1:2.15.10-1.el8ap.noarch", "product_id": "ansible-core-1:2.15.10-1.el8ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/ansible-core@2.15.10-1.el8ap?arch=noarch\u0026epoch=1" } } }, { "category": "product_version", "name": "ansible-test-1:2.15.10-1.el8ap.noarch", "product": { "name": "ansible-test-1:2.15.10-1.el8ap.noarch", "product_id": "ansible-test-1:2.15.10-1.el8ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/ansible-test@2.15.10-1.el8ap?arch=noarch\u0026epoch=1" } } }, { "category": "product_version", "name": "automation-controller-cli-0:4.5.5-2.el8ap.noarch", "product": { "name": "automation-controller-cli-0:4.5.5-2.el8ap.noarch", "product_id": "automation-controller-cli-0:4.5.5-2.el8ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-cli@4.5.5-2.el8ap?arch=noarch" } } }, { "category": "product_version", "name": "automation-controller-server-0:4.5.5-2.el8ap.noarch", "product": { "name": "automation-controller-server-0:4.5.5-2.el8ap.noarch", "product_id": "automation-controller-server-0:4.5.5-2.el8ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-server@4.5.5-2.el8ap?arch=noarch" } } }, { "category": "product_version", "name": "automation-controller-ui-0:4.5.5-2.el8ap.noarch", "product": { "name": "automation-controller-ui-0:4.5.5-2.el8ap.noarch", "product_id": "automation-controller-ui-0:4.5.5-2.el8ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-ui@4.5.5-2.el8ap?arch=noarch" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "product": { "name": "python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "product_id": "python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-aiohttp@3.9.3-1.el9ap?arch=x86_64" } } }, { "category": "product_version", "name": "python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "product": { "name": "python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "product_id": "python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-aiohttp-debugsource@3.9.3-1.el9ap?arch=x86_64" } } }, { "category": "product_version", "name": "python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "product": { "name": "python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "product_id": "python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-aiohttp-debuginfo@3.9.3-1.el9ap?arch=x86_64" } } }, { "category": "product_version", "name": "receptor-0:1.4.5-1.el9ap.x86_64", "product": { "name": "receptor-0:1.4.5-1.el9ap.x86_64", "product_id": "receptor-0:1.4.5-1.el9ap.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/receptor@1.4.5-1.el9ap?arch=x86_64" } } }, { "category": "product_version", "name": "automation-controller-0:4.5.5-2.el9ap.x86_64", "product": { "name": "automation-controller-0:4.5.5-2.el9ap.x86_64", "product_id": "automation-controller-0:4.5.5-2.el9ap.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller@4.5.5-2.el9ap?arch=x86_64" } } }, { "category": "product_version", "name": "automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64", "product": { "name": "automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64", "product_id": "automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.5.5-2.el9ap?arch=x86_64" } } }, { "category": "product_version", "name": "python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "product": { "name": "python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "product_id": "python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python39-aiohttp@3.9.3-1.el8ap?arch=x86_64" } } }, { "category": "product_version", "name": "python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "product": { "name": "python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "product_id": "python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3x-aiohttp-debugsource@3.9.3-1.el8ap?arch=x86_64" } } }, { "category": "product_version", "name": "python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "product": { "name": "python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "product_id": "python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python39-aiohttp-debuginfo@3.9.3-1.el8ap?arch=x86_64" } } }, { "category": "product_version", "name": "receptor-0:1.4.5-1.el8ap.x86_64", "product": { "name": "receptor-0:1.4.5-1.el8ap.x86_64", "product_id": "receptor-0:1.4.5-1.el8ap.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/receptor@1.4.5-1.el8ap?arch=x86_64" } } }, { "category": "product_version", "name": "automation-controller-0:4.5.5-2.el8ap.x86_64", "product": { "name": "automation-controller-0:4.5.5-2.el8ap.x86_64", "product_id": "automation-controller-0:4.5.5-2.el8ap.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller@4.5.5-2.el8ap?arch=x86_64" } } }, { "category": "product_version", "name": "automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "product": { "name": "automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "product_id": "automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.5.5-2.el8ap?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "product": { "name": "python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "product_id": "python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-aiohttp@3.9.3-1.el9ap?arch=ppc64le" } } }, { "category": "product_version", "name": "python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "product": { "name": "python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "product_id": "python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-aiohttp-debugsource@3.9.3-1.el9ap?arch=ppc64le" } } }, { "category": "product_version", "name": "python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "product": { "name": "python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "product_id": "python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-aiohttp-debuginfo@3.9.3-1.el9ap?arch=ppc64le" } } }, { "category": "product_version", "name": "receptor-0:1.4.5-1.el9ap.ppc64le", "product": { "name": "receptor-0:1.4.5-1.el9ap.ppc64le", "product_id": "receptor-0:1.4.5-1.el9ap.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/receptor@1.4.5-1.el9ap?arch=ppc64le" } } }, { "category": "product_version", "name": "automation-controller-0:4.5.5-2.el9ap.ppc64le", "product": { "name": "automation-controller-0:4.5.5-2.el9ap.ppc64le", "product_id": "automation-controller-0:4.5.5-2.el9ap.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller@4.5.5-2.el9ap?arch=ppc64le" } } }, { "category": "product_version", "name": "automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "product": { "name": "automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "product_id": "automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.5.5-2.el9ap?arch=ppc64le" } } }, { "category": "product_version", "name": "python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "product": { "name": "python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "product_id": "python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/python39-aiohttp@3.9.3-1.el8ap?arch=ppc64le" } } }, { "category": "product_version", "name": "python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "product": { "name": "python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "product_id": "python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3x-aiohttp-debugsource@3.9.3-1.el8ap?arch=ppc64le" } } }, { "category": "product_version", "name": "python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "product": { "name": "python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "product_id": "python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/python39-aiohttp-debuginfo@3.9.3-1.el8ap?arch=ppc64le" } } }, { "category": "product_version", "name": "receptor-0:1.4.5-1.el8ap.ppc64le", "product": { "name": "receptor-0:1.4.5-1.el8ap.ppc64le", "product_id": "receptor-0:1.4.5-1.el8ap.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/receptor@1.4.5-1.el8ap?arch=ppc64le" } } }, { "category": "product_version", "name": "automation-controller-0:4.5.5-2.el8ap.ppc64le", "product": { "name": "automation-controller-0:4.5.5-2.el8ap.ppc64le", "product_id": "automation-controller-0:4.5.5-2.el8ap.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller@4.5.5-2.el8ap?arch=ppc64le" } } }, { "category": "product_version", "name": "automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "product": { "name": "automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "product_id": "automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.5.5-2.el8ap?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "python3-aiohttp-0:3.9.3-1.el9ap.s390x", "product": { "name": "python3-aiohttp-0:3.9.3-1.el9ap.s390x", "product_id": "python3-aiohttp-0:3.9.3-1.el9ap.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-aiohttp@3.9.3-1.el9ap?arch=s390x" } } }, { "category": "product_version", "name": "python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "product": { "name": "python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "product_id": "python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-aiohttp-debugsource@3.9.3-1.el9ap?arch=s390x" } } }, { "category": "product_version", "name": "python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "product": { "name": "python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "product_id": "python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-aiohttp-debuginfo@3.9.3-1.el9ap?arch=s390x" } } }, { "category": "product_version", "name": "receptor-0:1.4.5-1.el9ap.s390x", "product": { "name": "receptor-0:1.4.5-1.el9ap.s390x", "product_id": "receptor-0:1.4.5-1.el9ap.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/receptor@1.4.5-1.el9ap?arch=s390x" } } }, { "category": "product_version", "name": "automation-controller-0:4.5.5-2.el9ap.s390x", "product": { "name": "automation-controller-0:4.5.5-2.el9ap.s390x", "product_id": "automation-controller-0:4.5.5-2.el9ap.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller@4.5.5-2.el9ap?arch=s390x" } } }, { "category": "product_version", "name": "automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "product": { "name": "automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "product_id": "automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.5.5-2.el9ap?arch=s390x" } } }, { "category": "product_version", "name": "python39-aiohttp-0:3.9.3-1.el8ap.s390x", "product": { "name": "python39-aiohttp-0:3.9.3-1.el8ap.s390x", "product_id": "python39-aiohttp-0:3.9.3-1.el8ap.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/python39-aiohttp@3.9.3-1.el8ap?arch=s390x" } } }, { "category": "product_version", "name": "python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "product": { "name": "python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "product_id": "python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3x-aiohttp-debugsource@3.9.3-1.el8ap?arch=s390x" } } }, { "category": "product_version", "name": "python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "product": { "name": "python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "product_id": "python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/python39-aiohttp-debuginfo@3.9.3-1.el8ap?arch=s390x" } } }, { "category": "product_version", "name": "receptor-0:1.4.5-1.el8ap.s390x", "product": { "name": "receptor-0:1.4.5-1.el8ap.s390x", "product_id": "receptor-0:1.4.5-1.el8ap.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/receptor@1.4.5-1.el8ap?arch=s390x" } } }, { "category": "product_version", "name": "automation-controller-0:4.5.5-2.el8ap.s390x", "product": { "name": "automation-controller-0:4.5.5-2.el8ap.s390x", "product_id": "automation-controller-0:4.5.5-2.el8ap.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller@4.5.5-2.el8ap?arch=s390x" } } }, { "category": "product_version", "name": "automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "product": { "name": "automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "product_id": "automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.5.5-2.el8ap?arch=s390x" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "product": { "name": "python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "product_id": "python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-aiohttp@3.9.3-1.el9ap?arch=aarch64" } } }, { "category": "product_version", "name": "python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "product": { "name": "python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "product_id": "python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-aiohttp-debugsource@3.9.3-1.el9ap?arch=aarch64" } } }, { "category": "product_version", "name": "python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "product": { "name": "python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "product_id": "python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-aiohttp-debuginfo@3.9.3-1.el9ap?arch=aarch64" } } }, { "category": "product_version", "name": "receptor-0:1.4.5-1.el9ap.aarch64", "product": { "name": "receptor-0:1.4.5-1.el9ap.aarch64", "product_id": "receptor-0:1.4.5-1.el9ap.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/receptor@1.4.5-1.el9ap?arch=aarch64" } } }, { "category": "product_version", "name": "automation-controller-0:4.5.5-2.el9ap.aarch64", "product": { "name": "automation-controller-0:4.5.5-2.el9ap.aarch64", "product_id": "automation-controller-0:4.5.5-2.el9ap.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller@4.5.5-2.el9ap?arch=aarch64" } } }, { "category": "product_version", "name": "automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "product": { "name": "automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "product_id": "automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.5.5-2.el9ap?arch=aarch64" } } }, { "category": "product_version", "name": "python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "product": { "name": "python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "product_id": "python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python39-aiohttp@3.9.3-1.el8ap?arch=aarch64" } } }, { "category": "product_version", "name": "python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "product": { "name": "python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "product_id": "python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3x-aiohttp-debugsource@3.9.3-1.el8ap?arch=aarch64" } } }, { "category": "product_version", "name": "python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "product": { "name": "python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "product_id": "python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python39-aiohttp-debuginfo@3.9.3-1.el8ap?arch=aarch64" } } }, { "category": "product_version", "name": "receptor-0:1.4.5-1.el8ap.aarch64", "product": { "name": "receptor-0:1.4.5-1.el8ap.aarch64", "product_id": "receptor-0:1.4.5-1.el8ap.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/receptor@1.4.5-1.el8ap?arch=aarch64" } } }, { "category": "product_version", "name": "automation-controller-0:4.5.5-2.el8ap.aarch64", "product": { "name": "automation-controller-0:4.5.5-2.el8ap.aarch64", "product_id": "automation-controller-0:4.5.5-2.el8ap.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller@4.5.5-2.el8ap?arch=aarch64" } } }, { "category": "product_version", "name": "automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "product": { "name": "automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "product_id": "automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.5.5-2.el8ap?arch=aarch64" } } } ], "category": "architecture", "name": "aarch64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "ansible-core-1:2.15.10-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch" }, "product_reference": "ansible-core-1:2.15.10-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4-Developer-1.1" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-core-1:2.15.10-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src" }, "product_reference": "ansible-core-1:2.15.10-1.el8ap.src", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4-Developer-1.1" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-runner-0:2.3.6-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch" }, "product_reference": "ansible-runner-0:2.3.6-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4-Developer-1.1" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-runner-0:2.3.6-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src" }, "product_reference": "ansible-runner-0:2.3.6-1.el8ap.src", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4-Developer-1.1" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-test-1:2.15.10-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch" }, "product_reference": "ansible-test-1:2.15.10-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4-Developer-1.1" }, { "category": "default_component_of", "full_product_name": { "name": "python39-ansible-runner-0:2.3.6-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch" }, "product_reference": "python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4-Developer-1.1" }, { "category": "default_component_of", "full_product_name": { "name": "receptor-0:1.4.5-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64" }, "product_reference": "receptor-0:1.4.5-1.el8ap.aarch64", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4-Developer-1.1" }, { "category": "default_component_of", "full_product_name": { "name": "receptor-0:1.4.5-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le" }, "product_reference": "receptor-0:1.4.5-1.el8ap.ppc64le", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4-Developer-1.1" }, { "category": "default_component_of", "full_product_name": { "name": "receptor-0:1.4.5-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x" }, "product_reference": "receptor-0:1.4.5-1.el8ap.s390x", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4-Developer-1.1" }, { "category": "default_component_of", "full_product_name": { "name": "receptor-0:1.4.5-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src" }, "product_reference": "receptor-0:1.4.5-1.el8ap.src", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4-Developer-1.1" }, { "category": "default_component_of", "full_product_name": { "name": "receptor-0:1.4.5-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64" }, "product_reference": "receptor-0:1.4.5-1.el8ap.x86_64", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4-Developer-1.1" }, { "category": "default_component_of", "full_product_name": { "name": "receptorctl-0:1.4.5-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch" }, "product_reference": "receptorctl-0:1.4.5-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4-Developer-1.1" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-core-1:2.15.10-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch" }, "product_reference": "ansible-core-1:2.15.10-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4-Inside-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-core-1:2.15.10-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src" }, "product_reference": "ansible-core-1:2.15.10-1.el8ap.src", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4-Inside-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-runner-0:2.3.6-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch" }, "product_reference": "ansible-runner-0:2.3.6-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4-Inside-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-runner-0:2.3.6-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src" }, "product_reference": "ansible-runner-0:2.3.6-1.el8ap.src", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4-Inside-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-test-1:2.15.10-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch" }, "product_reference": "ansible-test-1:2.15.10-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4-Inside-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "python39-ansible-runner-0:2.3.6-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch" }, "product_reference": "python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4-Inside-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "receptor-0:1.4.5-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64" }, "product_reference": "receptor-0:1.4.5-1.el8ap.aarch64", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4-Inside-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "receptor-0:1.4.5-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le" }, "product_reference": "receptor-0:1.4.5-1.el8ap.ppc64le", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4-Inside-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "receptor-0:1.4.5-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x" }, "product_reference": "receptor-0:1.4.5-1.el8ap.s390x", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4-Inside-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "receptor-0:1.4.5-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src" }, "product_reference": "receptor-0:1.4.5-1.el8ap.src", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4-Inside-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "receptor-0:1.4.5-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64" }, "product_reference": "receptor-0:1.4.5-1.el8ap.x86_64", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4-Inside-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "receptorctl-0:1.4.5-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch" }, "product_reference": "receptorctl-0:1.4.5-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4-Inside-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-core-1:2.15.10-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch" }, "product_reference": "ansible-core-1:2.15.10-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-core-1:2.15.10-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src" }, "product_reference": "ansible-core-1:2.15.10-1.el8ap.src", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-runner-0:2.3.6-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch" }, "product_reference": "ansible-runner-0:2.3.6-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-runner-0:2.3.6-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src" }, "product_reference": "ansible-runner-0:2.3.6-1.el8ap.src", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-test-1:2.15.10-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch" }, "product_reference": "ansible-test-1:2.15.10-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.5.5-2.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64" }, "product_reference": "automation-controller-0:4.5.5-2.el8ap.aarch64", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.5.5-2.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le" }, "product_reference": "automation-controller-0:4.5.5-2.el8ap.ppc64le", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.5.5-2.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x" }, "product_reference": "automation-controller-0:4.5.5-2.el8ap.s390x", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.5.5-2.el8ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src" }, "product_reference": "automation-controller-0:4.5.5-2.el8ap.src", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.5.5-2.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64" }, "product_reference": "automation-controller-0:4.5.5-2.el8ap.x86_64", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-cli-0:4.5.5-2.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch" }, "product_reference": "automation-controller-cli-0:4.5.5-2.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-server-0:4.5.5-2.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch" }, "product_reference": "automation-controller-server-0:4.5.5-2.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-ui-0:4.5.5-2.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch" }, "product_reference": "automation-controller-ui-0:4.5.5-2.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64" }, "product_reference": "automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le" }, "product_reference": "automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x" }, "product_reference": "automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64" }, "product_reference": "automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python39-aiohttp-0:3.9.3-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64" }, "product_reference": "python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python39-aiohttp-0:3.9.3-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le" }, "product_reference": "python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python39-aiohttp-0:3.9.3-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x" }, "product_reference": "python39-aiohttp-0:3.9.3-1.el8ap.s390x", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python39-aiohttp-0:3.9.3-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64" }, "product_reference": "python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64" }, "product_reference": "python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le" }, "product_reference": "python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x" }, "product_reference": "python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64" }, "product_reference": "python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python39-ansible-runner-0:2.3.6-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch" }, "product_reference": "python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python39-django-0:4.2.11-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch" }, "product_reference": "python39-django-0:4.2.11-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python39-pulpcore-0:3.28.24-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch" }, "product_reference": "python39-pulpcore-0:3.28.24-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python3x-aiohttp-0:3.9.3-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src" }, "product_reference": "python3x-aiohttp-0:3.9.3-1.el8ap.src", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64" }, "product_reference": "python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le" }, "product_reference": "python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x" }, "product_reference": "python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64" }, "product_reference": "python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python3x-django-0:4.2.11-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src" }, "product_reference": "python3x-django-0:4.2.11-1.el8ap.src", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python3x-pulpcore-0:3.28.24-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src" }, "product_reference": "python3x-pulpcore-0:3.28.24-1.el8ap.src", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "receptor-0:1.4.5-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64" }, "product_reference": "receptor-0:1.4.5-1.el8ap.aarch64", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "receptor-0:1.4.5-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le" }, "product_reference": "receptor-0:1.4.5-1.el8ap.ppc64le", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "receptor-0:1.4.5-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x" }, "product_reference": "receptor-0:1.4.5-1.el8ap.s390x", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "receptor-0:1.4.5-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src" }, "product_reference": "receptor-0:1.4.5-1.el8ap.src", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "receptor-0:1.4.5-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64" }, "product_reference": "receptor-0:1.4.5-1.el8ap.x86_64", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "receptorctl-0:1.4.5-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch" }, "product_reference": "receptorctl-0:1.4.5-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-core-1:2.15.10-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch" }, "product_reference": "ansible-core-1:2.15.10-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4-Developer-1.1" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-core-1:2.15.10-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src" }, "product_reference": "ansible-core-1:2.15.10-1.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4-Developer-1.1" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-runner-0:2.3.6-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch" }, "product_reference": "ansible-runner-0:2.3.6-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4-Developer-1.1" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-runner-0:2.3.6-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src" }, "product_reference": "ansible-runner-0:2.3.6-1.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4-Developer-1.1" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-test-1:2.15.10-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch" }, "product_reference": "ansible-test-1:2.15.10-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4-Developer-1.1" }, { "category": "default_component_of", "full_product_name": { "name": "python3-ansible-runner-0:2.3.6-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch" }, "product_reference": "python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4-Developer-1.1" }, { "category": "default_component_of", "full_product_name": { "name": "receptor-0:1.4.5-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64" }, "product_reference": "receptor-0:1.4.5-1.el9ap.aarch64", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4-Developer-1.1" }, { "category": "default_component_of", "full_product_name": { "name": "receptor-0:1.4.5-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le" }, "product_reference": "receptor-0:1.4.5-1.el9ap.ppc64le", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4-Developer-1.1" }, { "category": "default_component_of", "full_product_name": { "name": "receptor-0:1.4.5-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x" }, "product_reference": "receptor-0:1.4.5-1.el9ap.s390x", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4-Developer-1.1" }, { "category": "default_component_of", "full_product_name": { "name": "receptor-0:1.4.5-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src" }, "product_reference": "receptor-0:1.4.5-1.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4-Developer-1.1" }, { "category": "default_component_of", "full_product_name": { "name": "receptor-0:1.4.5-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64" }, "product_reference": "receptor-0:1.4.5-1.el9ap.x86_64", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4-Developer-1.1" }, { "category": "default_component_of", "full_product_name": { "name": "receptorctl-0:1.4.5-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch" }, "product_reference": "receptorctl-0:1.4.5-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4-Developer-1.1" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-core-1:2.15.10-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch" }, "product_reference": "ansible-core-1:2.15.10-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4-Inside-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-core-1:2.15.10-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src" }, "product_reference": "ansible-core-1:2.15.10-1.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4-Inside-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-runner-0:2.3.6-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch" }, "product_reference": "ansible-runner-0:2.3.6-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4-Inside-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-runner-0:2.3.6-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src" }, "product_reference": "ansible-runner-0:2.3.6-1.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4-Inside-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-test-1:2.15.10-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch" }, "product_reference": "ansible-test-1:2.15.10-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4-Inside-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "python3-ansible-runner-0:2.3.6-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch" }, "product_reference": "python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4-Inside-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "receptor-0:1.4.5-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64" }, "product_reference": "receptor-0:1.4.5-1.el9ap.aarch64", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4-Inside-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "receptor-0:1.4.5-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le" }, "product_reference": "receptor-0:1.4.5-1.el9ap.ppc64le", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4-Inside-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "receptor-0:1.4.5-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x" }, "product_reference": "receptor-0:1.4.5-1.el9ap.s390x", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4-Inside-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "receptor-0:1.4.5-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src" }, "product_reference": "receptor-0:1.4.5-1.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4-Inside-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "receptor-0:1.4.5-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64" }, "product_reference": "receptor-0:1.4.5-1.el9ap.x86_64", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4-Inside-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "receptorctl-0:1.4.5-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch" }, "product_reference": "receptorctl-0:1.4.5-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4-Inside-1.2" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-core-1:2.15.10-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch" }, "product_reference": "ansible-core-1:2.15.10-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-core-1:2.15.10-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src" }, "product_reference": "ansible-core-1:2.15.10-1.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-runner-0:2.3.6-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch" }, "product_reference": "ansible-runner-0:2.3.6-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-runner-0:2.3.6-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src" }, "product_reference": "ansible-runner-0:2.3.6-1.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-test-1:2.15.10-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch" }, "product_reference": "ansible-test-1:2.15.10-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.5.5-2.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64" }, "product_reference": "automation-controller-0:4.5.5-2.el9ap.aarch64", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.5.5-2.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le" }, "product_reference": "automation-controller-0:4.5.5-2.el9ap.ppc64le", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.5.5-2.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x" }, "product_reference": "automation-controller-0:4.5.5-2.el9ap.s390x", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.5.5-2.el9ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src" }, "product_reference": "automation-controller-0:4.5.5-2.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.5.5-2.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64" }, "product_reference": "automation-controller-0:4.5.5-2.el9ap.x86_64", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-cli-0:4.5.5-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch" }, "product_reference": "automation-controller-cli-0:4.5.5-2.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-server-0:4.5.5-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch" }, "product_reference": "automation-controller-server-0:4.5.5-2.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-ui-0:4.5.5-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch" }, "product_reference": "automation-controller-ui-0:4.5.5-2.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64" }, "product_reference": "automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le" }, "product_reference": "automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x" }, "product_reference": "automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64" }, "product_reference": "automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python-aiohttp-0:3.9.3-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src" }, "product_reference": "python-aiohttp-0:3.9.3-1.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64" }, "product_reference": "python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le" }, "product_reference": "python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x" }, "product_reference": "python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64" }, "product_reference": "python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python-django-0:4.2.11-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src" }, "product_reference": "python-django-0:4.2.11-1.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python-pulpcore-0:3.28.24-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src" }, "product_reference": "python-pulpcore-0:3.28.24-1.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python3-aiohttp-0:3.9.3-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64" }, "product_reference": "python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python3-aiohttp-0:3.9.3-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le" }, "product_reference": "python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python3-aiohttp-0:3.9.3-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x" }, "product_reference": "python3-aiohttp-0:3.9.3-1.el9ap.s390x", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python3-aiohttp-0:3.9.3-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64" }, "product_reference": "python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64" }, "product_reference": "python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le" }, "product_reference": "python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x" }, "product_reference": "python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64" }, "product_reference": "python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python3-ansible-runner-0:2.3.6-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch" }, "product_reference": "python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python3-django-0:4.2.11-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch" }, "product_reference": "python3-django-0:4.2.11-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python3-pulpcore-0:3.28.24-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch" }, "product_reference": "python3-pulpcore-0:3.28.24-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "receptor-0:1.4.5-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64" }, "product_reference": "receptor-0:1.4.5-1.el9ap.aarch64", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "receptor-0:1.4.5-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le" }, "product_reference": "receptor-0:1.4.5-1.el9ap.ppc64le", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "receptor-0:1.4.5-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x" }, "product_reference": "receptor-0:1.4.5-1.el9ap.s390x", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "receptor-0:1.4.5-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src" }, "product_reference": "receptor-0:1.4.5-1.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "receptor-0:1.4.5-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64" }, "product_reference": "receptor-0:1.4.5-1.el9ap.x86_64", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "receptorctl-0:1.4.5-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" }, "product_reference": "receptorctl-0:1.4.5-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-39326", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2023-12-06T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2253330" } ], "notes": [ { "category": "description", "text": "A flaw was found in the Golang net/http/internal package. This issue may allow a malicious user to send an HTTP request and cause the receiver to read more bytes from network than are in the body (up to 1GiB), causing the receiver to fail reading the response, possibly leading to a Denial of Service (DoS).", "title": "Vulnerability description" }, { "category": "summary", "text": "golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ], "known_not_affected": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-39326" }, { "category": "external", "summary": "RHBZ#2253330", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2253330" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-39326", "url": "https://www.cve.org/CVERecord?id=CVE-2023-39326" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-39326", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39326" }, { "category": "external", "summary": "https://pkg.go.dev/vuln/GO-2023-2382", "url": "https://pkg.go.dev/vuln/GO-2023-2382" } ], "release_date": "2023-12-06T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-04-02T19:34:39+00:00", "details": "Red Hat Ansible Automation Platform", "product_ids": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:1640" }, { "category": "workaround", "details": "No mitigation is available for this flaw.", "product_ids": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests" }, { "cve": "CVE-2023-41040", "cwe": { "id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)" }, "discovery_date": "2023-10-30T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2247040" } ], "notes": [ { "category": "description", "text": "A path traversal vulnerability was found in GitPython due to an input validation error when reading from the \".git\" directory. This issue may allow a remote attacker to prepare a specially crafted \".git\" file with directory traversal characters in file names and force the application to read these files from the local system, which can result in checking for the existence of a specific file on the system or allow a denial of service (DoS) attack.", "title": "Vulnerability description" }, { "category": "summary", "text": "GitPython: Blind local file inclusion", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability cannot be used to read the contents of files but could be used to trigger a denial of service for the program.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64" ], "known_not_affected": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-41040" }, { "category": "external", "summary": "RHBZ#2247040", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2247040" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-41040", "url": "https://www.cve.org/CVERecord?id=CVE-2023-41040" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-41040", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-41040" }, { "category": "external", "summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-cwvm-v4w8-q58c", "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-cwvm-v4w8-q58c" } ], "release_date": "2023-08-31T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-04-02T19:34:39+00:00", "details": "Red Hat Ansible Automation Platform", "product_ids": [ "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:1640" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 5.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "version": "3.1" }, "products": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "GitPython: Blind local file inclusion" }, { "cve": "CVE-2023-45857", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2023-11-09T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2248979" } ], "notes": [ { "category": "description", "text": "A flaw was found in Axios that may expose a confidential session token. This issue can allow a remote attacker to bypass security measures and view sensitive data.", "title": "Vulnerability description" }, { "category": "summary", "text": "axios: exposure of confidential data stored in cookies", "title": "Vulnerability summary" }, { "category": "other", "text": "For Red Hat Advanced Cluster Management for Kubernetes (RHACM), the affected container was deprecated in ACM 2.5 version which is not anymore supported. Following versions of this product are not impacted by this issue.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64" ], "known_not_affected": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-45857" }, { "category": "external", "summary": "RHBZ#2248979", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2248979" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-45857", "url": "https://www.cve.org/CVERecord?id=CVE-2023-45857" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-45857", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45857" } ], "release_date": "2023-11-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-04-02T19:34:39+00:00", "details": "Red Hat Ansible Automation Platform", "product_ids": [ "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:1640" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "axios: exposure of confidential data stored in cookies" }, { "cve": "CVE-2023-46137", "cwe": { "id": "CWE-444", "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)" }, "discovery_date": "2023-10-26T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2246264" } ], "notes": [ { "category": "description", "text": "Twisted is an event-based framework for internet applications. Prior to version 23.10.0rc1, when sending multiple HTTP requests in one TCP packet, twisted.web will process the requests asynchronously without guaranteeing the response order. If one of the endpoints is controlled by an attacker, the attacker can delay the response on purpose to manipulate the response of the second request when a victim launched two requests using HTTP pipeline. Version 23.10.0rc1 contains a patch for this issue.", "title": "Vulnerability description" }, { "category": "summary", "text": "python-twisted: disordered HTTP pipeline response in twisted.web", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64" ], "known_not_affected": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-46137" }, { "category": "external", "summary": "RHBZ#2246264", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2246264" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-46137", "url": "https://www.cve.org/CVERecord?id=CVE-2023-46137" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-46137", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46137" } ], "release_date": "2023-10-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-04-02T19:34:39+00:00", "details": "Red Hat Ansible Automation Platform", "product_ids": [ "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:1640" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python-twisted: disordered HTTP pipeline response in twisted.web" }, { "cve": "CVE-2023-47627", "cwe": { "id": "CWE-444", "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)" }, "discovery_date": "2023-11-15T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2249825" } ], "notes": [ { "category": "description", "text": "An HTTP request smuggling vulnerability was found in aiohttp. Numerous issues with HTTP parsing can allow an attacker to smuggle HTTP requests.", "title": "Vulnerability description" }, { "category": "summary", "text": "python-aiohttp: numerous issues in HTTP parser with header parsing", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64" ], "known_not_affected": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-47627" }, { "category": "external", "summary": "RHBZ#2249825", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2249825" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-47627", "url": "https://www.cve.org/CVERecord?id=CVE-2023-47627" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-47627", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-47627" }, { "category": "external", "summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-gfw2-4jvh-wgfg", "url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-gfw2-4jvh-wgfg" } ], "release_date": "2023-11-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-04-02T19:34:39+00:00", "details": "Red Hat Ansible Automation Platform", "product_ids": [ "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:1640" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python-aiohttp: numerous issues in HTTP parser with header parsing" }, { "cve": "CVE-2023-49083", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2023-12-20T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2255331" } ], "notes": [ { "category": "description", "text": "A null-pointer dereference vulnerability was found in python-cryptography during the loading of PKCS7 certificates. Invoking \"load_pem_pkcs7_certificates\" or \"load_der_pkcs7_certificates\" can trigger this issue and lead to subsequent segmentation fault and result in a Denial of Service (DoS) for any application aiming to deserialize a PKCS7 blob or certificate. The potential impact includes disruptions in system availability and stability.", "title": "Vulnerability description" }, { "category": "summary", "text": "python-cryptography: NULL-dereference when loading PKCS7 certificates", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability arises when functions like \"load_pem_pkcs7_certificates\" or \"load_der_pkcs7_certificates\" are invoked, triggering the issue during the deserialization of PKCS7 blobs or certificates. The moderate rating is based on the fact that the vulnerability can lead to a segmentation fault, posing a risk of disrupting the normal functioning of any application attempting to deserialize the mentioned certificates. While the impact is significant in terms of service denial and potential system instability, the severity is deemed moderate as it does not directly expose sensitive data or allow for remote code execution, focusing primarily on the localized consequences of a DoS scenario.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64" ], "known_not_affected": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-49083" }, { "category": "external", "summary": "RHBZ#2255331", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255331" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-49083", "url": "https://www.cve.org/CVERecord?id=CVE-2023-49083" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-49083", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-49083" }, { "category": "external", "summary": "https://github.com/pyca/cryptography/commit/f09c261ca10a31fe41b1262306db7f8f1da0e48a", "url": "https://github.com/pyca/cryptography/commit/f09c261ca10a31fe41b1262306db7f8f1da0e48a" }, { "category": "external", "summary": "https://github.com/pyca/cryptography/pull/9926", "url": "https://github.com/pyca/cryptography/pull/9926" }, { "category": "external", "summary": "https://github.com/pyca/cryptography/security/advisories/GHSA-jfhm-5ghh-2f97", "url": "https://github.com/pyca/cryptography/security/advisories/GHSA-jfhm-5ghh-2f97" } ], "release_date": "2023-11-28T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-04-02T19:34:39+00:00", "details": "Red Hat Ansible Automation Platform", "product_ids": [ "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:1640" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python-cryptography: NULL-dereference when loading PKCS7 certificates" }, { "acknowledgments": [ { "names": [ "@r3kumar", "@qmuntal" ] } ], "cve": "CVE-2024-1394", "cwe": { "id": "CWE-401", "name": "Missing Release of Memory after Effective Lifetime" }, "discovery_date": "2024-02-06T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2262921" } ], "notes": [ { "category": "description", "text": "A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs\u200b. The memory leak happens in github.com/golang-fips/openssl/openssl/rsa.go#L113. The objects leaked are pkey\u200b and ctx\u200b. That function uses named return parameters to free pkey\u200b and ctx\u200b if there is an error initializing the context or setting the different properties. All return statements related to error cases follow the \"return nil, nil, fail(...)\" pattern, meaning that pkey\u200b and ctx\u200b will be nil inside the deferred function that should free them.", "title": "Vulnerability description" }, { "category": "summary", "text": "golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads", "title": "Vulnerability summary" }, { "category": "other", "text": "The majority of RHEL utilities are not long-running applications; instead, they are command-line tools. These tools utilize Golang package as build-time dependency, which is why they are classified as having a \"Moderate\" level of impact.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ], "known_not_affected": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-1394" }, { "category": "external", "summary": "RHBZ#2262921", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2262921" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-1394", "url": "https://www.cve.org/CVERecord?id=CVE-2024-1394" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-1394", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1394" }, { "category": "external", "summary": "https://github.com/golang-fips/openssl/commit/85d31d0d257ce842c8a1e63c4d230ae850348136", "url": "https://github.com/golang-fips/openssl/commit/85d31d0d257ce842c8a1e63c4d230ae850348136" }, { "category": "external", "summary": "https://github.com/golang-fips/openssl/security/advisories/GHSA-78hx-gp6g-7mj6", "url": "https://github.com/golang-fips/openssl/security/advisories/GHSA-78hx-gp6g-7mj6" }, { "category": "external", "summary": "https://github.com/microsoft/go-crypto-openssl/commit/104fe7f6912788d2ad44602f77a0a0a62f1f259f", "url": "https://github.com/microsoft/go-crypto-openssl/commit/104fe7f6912788d2ad44602f77a0a0a62f1f259f" }, { "category": "external", "summary": "https://pkg.go.dev/vuln/GO-2024-2660", "url": "https://pkg.go.dev/vuln/GO-2024-2660" }, { "category": "external", "summary": "https://vuln.go.dev/ID/GO-2024-2660.json", "url": "https://vuln.go.dev/ID/GO-2024-2660.json" } ], "release_date": "2024-03-20T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-04-02T19:34:39+00:00", "details": "Red Hat Ansible Automation Platform", "product_ids": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:1640" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads" }, { "cve": "CVE-2024-22195", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)" }, "discovery_date": "2024-01-11T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2257854" } ], "notes": [ { "category": "description", "text": "A cross-site scripting (XSS) flaw was found in Jinja2 due to the xmlattr filter allowing keys with spaces, contrary to XML/HTML attribute standards. If an application accepts user-input keys and renders them for other users, attackers can inject additional attributes, potentially leading to XSS. This misuse of the xmlattr filter enables the injection of arbitrary HTML attributes, bypassing auto-escaping and potentially circumventing attribute validation checks.", "title": "Vulnerability description" }, { "category": "summary", "text": "jinja2: HTML attribute injection when passing user input as keys to xmlattr filter", "title": "Vulnerability summary" }, { "category": "other", "text": "The identified issue is classified as moderate due to a cross-site scripting (XSS) vulnerability in Jinja2. This flaw arises from the xmlattr filter, which permits keys with spaces, contrary to XML/HTML attribute standards. In scenarios where an application accepts user-input keys and renders them for other users, attackers can exploit this vulnerability to inject additional attributes, potentially resulting in XSS attacks. The misuse of the xmlattr filter facilitates the injection of arbitrary HTML attributes, allowing attackers to bypass auto-escaping mechanisms and potentially evade attribute validation checks, posing a moderate security risk.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64" ], "known_not_affected": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-22195" }, { "category": "external", "summary": "RHBZ#2257854", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2257854" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-22195", "url": "https://www.cve.org/CVERecord?id=CVE-2024-22195" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-22195", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22195" }, { "category": "external", "summary": "https://github.com/pallets/jinja/releases/tag/3.1.3", "url": "https://github.com/pallets/jinja/releases/tag/3.1.3" }, { "category": "external", "summary": "https://github.com/pallets/jinja/security/advisories/GHSA-h5c8-rqwp-cp95", "url": "https://github.com/pallets/jinja/security/advisories/GHSA-h5c8-rqwp-cp95" } ], "release_date": "2024-01-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-04-02T19:34:39+00:00", "details": "Red Hat Ansible Automation Platform", "product_ids": [ "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:1640" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "jinja2: HTML attribute injection when passing user input as keys to xmlattr filter" }, { "cve": "CVE-2024-23334", "cwe": { "id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)" }, "discovery_date": "2024-01-30T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2261887" } ], "notes": [ { "category": "description", "text": "A flaw was found in aiohttp. When using aiohttp as a web server and configuring static routes, it is necessary to specify the root path for static files. Additionally, the option \u0027follow_symlinks\u0027 can be used to determine whether to follow symbolic links outside the static root directory. When \u0027follow_symlinks\u0027 is set to True, there is no validation to check if a given file path is within the root directory. This issue can lead to a directory traversal vulnerability, resulting in unauthorized access to arbitrary files on the system, even when symlinks are not present.", "title": "Vulnerability description" }, { "category": "summary", "text": "aiohttp: follow_symlinks directory traversal vulnerability", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability has been rated as having a moderate impact. There is a non-default precondition which is required to exploit it: the follow_symlinks setting needs to be enabled.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64" ], "known_not_affected": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-23334" }, { "category": "external", "summary": "RHBZ#2261887", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2261887" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-23334", "url": "https://www.cve.org/CVERecord?id=CVE-2024-23334" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-23334", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23334" }, { "category": "external", "summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-5h86-8mv2-jq9f", "url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-5h86-8mv2-jq9f" } ], "release_date": "2024-01-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-04-02T19:34:39+00:00", "details": "Red Hat Ansible Automation Platform", "product_ids": [ "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:1640" }, { "category": "workaround", "details": "If using follow_symlinks=True outside of a restricted local development environment, disable the option immediately. This option is NOT needed to follow symlinks that point to a location within the static root directory; it is only intended to allow a symlink to break out of the static directory. Even with this CVE fixed, there is still a substantial risk of misconfiguration when using this option on a server that accepts requests from remote users.\n\nAdditionally, aiohttp has always recommended using a reverse proxy server (such as nginx) to handle static resources and not to use these static resources in aiohttp for production environments. Doing so also protects against this vulnerability, and is why we expect the number of affected users to be very low.", "product_ids": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "aiohttp: follow_symlinks directory traversal vulnerability" }, { "cve": "CVE-2024-23829", "cwe": { "id": "CWE-444", "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)" }, "discovery_date": "2024-01-30T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2261909" } ], "notes": [ { "category": "description", "text": "An HTTP request smuggling vulnerability was found in aiohttp. Security-sensitive parts of the Python HTTP parser retained minor differences in allowable character sets that must trigger error handling to robustly match frame boundaries of proxies in order to protect against the injection of additional requests.", "title": "Vulnerability description" }, { "category": "summary", "text": "python-aiohttp: http request smuggling", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64" ], "known_not_affected": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-23829" }, { "category": "external", "summary": "RHBZ#2261909", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2261909" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-23829", "url": "https://www.cve.org/CVERecord?id=CVE-2024-23829" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-23829", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23829" }, { "category": "external", "summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-8qpw-xqxj-h4r2", "url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-8qpw-xqxj-h4r2" } ], "release_date": "2024-01-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-04-02T19:34:39+00:00", "details": "Red Hat Ansible Automation Platform", "product_ids": [ "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:1640" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "version": "3.1" }, "products": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python-aiohttp: http request smuggling" }, { "cve": "CVE-2024-24680", "discovery_date": "2024-01-30T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2261856" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Django. When used with very long strings, the intcomma template filter was subject to a potential denial of service attack.", "title": "Vulnerability description" }, { "category": "summary", "text": "Django: denial-of-service in ``intcomma`` template filter", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64" ], "known_not_affected": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-24680" }, { "category": "external", "summary": "RHBZ#2261856", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2261856" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-24680", "url": "https://www.cve.org/CVERecord?id=CVE-2024-24680" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-24680", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24680" }, { "category": "external", "summary": "https://github.com/advisories/GHSA-xxj9-f6rv-m3x4", "url": "https://github.com/advisories/GHSA-xxj9-f6rv-m3x4" }, { "category": "external", "summary": "https://www.djangoproject.com/weblog/2024/feb/06/security-releases/", "url": "https://www.djangoproject.com/weblog/2024/feb/06/security-releases/" } ], "release_date": "2024-02-06T15:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-04-02T19:34:39+00:00", "details": "Red Hat Ansible Automation Platform", "product_ids": [ "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:1640" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "Django: denial-of-service in ``intcomma`` template filter" }, { "cve": "CVE-2024-27351", "cwe": { "id": "CWE-1333", "name": "Inefficient Regular Expression Complexity" }, "discovery_date": "2024-02-26T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2266045" } ], "notes": [ { "category": "description", "text": "An inefficient regular expression complexity flaw was found in the Truncator.words function and truncatewords_html filter of Django. This issue may allow an attacker to use a suitably crafted string to cause a denial of service.", "title": "Vulnerability description" }, { "category": "summary", "text": "python-django: Potential regular expression denial-of-service in django.utils.text.Truncator.words()", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch" ], "known_not_affected": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-27351" }, { "category": "external", "summary": "RHBZ#2266045", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2266045" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-27351", "url": "https://www.cve.org/CVERecord?id=CVE-2024-27351" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-27351", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27351" }, { "category": "external", "summary": "https://www.djangoproject.com/weblog/2024/mar/04/security-releases/", "url": "https://www.djangoproject.com/weblog/2024/mar/04/security-releases/" } ], "release_date": "2024-03-04T09:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-04-02T19:34:39+00:00", "details": "Red Hat Ansible Automation Platform", "product_ids": [ "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:1640" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python39-aiohttp-debuginfo-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python39-ansible-runner-0:2.3.6-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-django-0:4.2.11-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-pulpcore-0:3.28.24-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-0:3.9.3-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:python3x-aiohttp-debugsource-0:3.9.3-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:python3x-django-0:4.2.11-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-pulpcore-0:3.28.24-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.aarch64", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.ppc64le", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.s390x", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el8ap.x86_64", "8Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el8ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Developer-1.1:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4-Inside-1.2:receptorctl-0:1.4.5-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-core-1:2.15.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:ansible-runner-0:2.3.6-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:ansible-test-1:2.15.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:automation-controller-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-cli-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-server-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-ui-0:4.5.5-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:automation-controller-venv-tower-0:4.5.5-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-0:3.9.3-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python-aiohttp-debugsource-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python-django-0:4.2.11-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-pulpcore-0:3.28.24-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:python3-aiohttp-debuginfo-0:3.9.3-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:python3-ansible-runner-0:2.3.6-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-django-0:4.2.11-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-pulpcore-0:3.28.24-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:receptor-0:1.4.5-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.4:receptorctl-0:1.4.5-1.el9ap.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python-django: Potential regular expression denial-of-service in django.utils.text.Truncator.words()" } ] }
rhsa-2024_0322
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update is now available for Red Hat Ansible Automation Platform 2.4\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language.\n\nSecurity Fix(es):\n\n* python3-gitpython/python39-gitpython: Blind local file inclusion (CVE-2023-41040)\n\n* python3-twisted/python39-twisted: disordered HTTP pipeline response in twisted.web (CVE-2023-46137)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional changes:\n* python3-dynaconf/python39-dynaconf has been updated to 3.1.12-2\n* python3-gitpython/python39-gitpython has been updated to 3.1.40\n* python3-twisted/python39-twisted has been updated to 23.10.0", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2024:0322", "url": "https://access.redhat.com/errata/RHSA-2024:0322" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "2246264", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2246264" }, { "category": "external", "summary": "2247040", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2247040" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0322.json" } ], "title": "Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update", "tracking": { "current_release_date": "2024-11-23T03:18:55+00:00", "generator": { "date": "2024-11-23T03:18:55+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2024:0322", "initial_release_date": "2024-01-22T14:22:42+00:00", "revision_history": [ { "date": "2024-01-22T14:22:42+00:00", "number": "1", "summary": "Initial version" }, { "date": "2024-01-22T14:22:42+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-23T03:18:55+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product": { "name": "Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_automation_platform:2.4::el8" } } }, { "category": "product_name", "name": "Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product": { "name": "Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_automation_platform:2.4::el9" } } } ], "category": "product_family", "name": "Red Hat Ansible Automation Platform" }, { "branches": [ { "category": "product_version", "name": "python39-dynaconf-0:3.1.12-2.el8ap.noarch", "product": { "name": "python39-dynaconf-0:3.1.12-2.el8ap.noarch", "product_id": "python39-dynaconf-0:3.1.12-2.el8ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python39-dynaconf@3.1.12-2.el8ap?arch=noarch" } } }, { "category": "product_version", "name": "python39-gitpython-0:3.1.40-1.el8ap.noarch", "product": { "name": "python39-gitpython-0:3.1.40-1.el8ap.noarch", "product_id": "python39-gitpython-0:3.1.40-1.el8ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python39-gitpython@3.1.40-1.el8ap?arch=noarch" } } }, { "category": "product_version", "name": "python39-twisted+tls-0:23.10.0-1.el8ap.noarch", "product": { "name": "python39-twisted+tls-0:23.10.0-1.el8ap.noarch", "product_id": "python39-twisted+tls-0:23.10.0-1.el8ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python39-twisted%2Btls@23.10.0-1.el8ap?arch=noarch" } } }, { "category": "product_version", "name": "python39-twisted-0:23.10.0-1.el8ap.noarch", "product": { "name": "python39-twisted-0:23.10.0-1.el8ap.noarch", "product_id": "python39-twisted-0:23.10.0-1.el8ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python39-twisted@23.10.0-1.el8ap?arch=noarch" } } }, { "category": "product_version", "name": "python3-dynaconf-0:3.1.12-2.el9ap.noarch", "product": { "name": "python3-dynaconf-0:3.1.12-2.el9ap.noarch", "product_id": "python3-dynaconf-0:3.1.12-2.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-dynaconf@3.1.12-2.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "python3-gitpython-0:3.1.40-1.el9ap.noarch", "product": { "name": "python3-gitpython-0:3.1.40-1.el9ap.noarch", "product_id": "python3-gitpython-0:3.1.40-1.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-gitpython@3.1.40-1.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "python3-twisted+tls-0:23.10.0-1.el9ap.noarch", "product": { "name": "python3-twisted+tls-0:23.10.0-1.el9ap.noarch", "product_id": "python3-twisted+tls-0:23.10.0-1.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-twisted%2Btls@23.10.0-1.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "python3-twisted-0:23.10.0-1.el9ap.noarch", "product": { "name": "python3-twisted-0:23.10.0-1.el9ap.noarch", "product_id": "python3-twisted-0:23.10.0-1.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-twisted@23.10.0-1.el9ap?arch=noarch" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "python3x-dynaconf-0:3.1.12-2.el8ap.src", "product": { "name": "python3x-dynaconf-0:3.1.12-2.el8ap.src", "product_id": "python3x-dynaconf-0:3.1.12-2.el8ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3x-dynaconf@3.1.12-2.el8ap?arch=src" } } }, { "category": "product_version", "name": "python3x-gitpython-0:3.1.40-1.el8ap.src", "product": { "name": "python3x-gitpython-0:3.1.40-1.el8ap.src", "product_id": "python3x-gitpython-0:3.1.40-1.el8ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3x-gitpython@3.1.40-1.el8ap?arch=src" } } }, { "category": "product_version", "name": "python3x-twisted-0:23.10.0-1.el8ap.src", "product": { "name": "python3x-twisted-0:23.10.0-1.el8ap.src", "product_id": "python3x-twisted-0:23.10.0-1.el8ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3x-twisted@23.10.0-1.el8ap?arch=src" } } }, { "category": "product_version", "name": "python-dynaconf-0:3.1.12-2.el9ap.src", "product": { "name": "python-dynaconf-0:3.1.12-2.el9ap.src", "product_id": "python-dynaconf-0:3.1.12-2.el9ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-dynaconf@3.1.12-2.el9ap?arch=src" } } }, { "category": "product_version", "name": "python-gitpython-0:3.1.40-1.el9ap.src", "product": { "name": "python-gitpython-0:3.1.40-1.el9ap.src", "product_id": "python-gitpython-0:3.1.40-1.el9ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-gitpython@3.1.40-1.el9ap?arch=src" } } }, { "category": "product_version", "name": "python-twisted-0:23.10.0-1.el9ap.src", "product": { "name": "python-twisted-0:23.10.0-1.el9ap.src", "product_id": "python-twisted-0:23.10.0-1.el9ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-twisted@23.10.0-1.el9ap?arch=src" } } } ], "category": "architecture", "name": "src" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "python39-dynaconf-0:3.1.12-2.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:python39-dynaconf-0:3.1.12-2.el8ap.noarch" }, "product_reference": "python39-dynaconf-0:3.1.12-2.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python39-gitpython-0:3.1.40-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:python39-gitpython-0:3.1.40-1.el8ap.noarch" }, "product_reference": "python39-gitpython-0:3.1.40-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python39-twisted+tls-0:23.10.0-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:python39-twisted+tls-0:23.10.0-1.el8ap.noarch" }, "product_reference": "python39-twisted+tls-0:23.10.0-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python39-twisted-0:23.10.0-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:python39-twisted-0:23.10.0-1.el8ap.noarch" }, "product_reference": "python39-twisted-0:23.10.0-1.el8ap.noarch", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python3x-dynaconf-0:3.1.12-2.el8ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:python3x-dynaconf-0:3.1.12-2.el8ap.src" }, "product_reference": "python3x-dynaconf-0:3.1.12-2.el8ap.src", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python3x-gitpython-0:3.1.40-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:python3x-gitpython-0:3.1.40-1.el8ap.src" }, "product_reference": "python3x-gitpython-0:3.1.40-1.el8ap.src", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python3x-twisted-0:23.10.0-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8", "product_id": "8Base-Ansible-Automation-Platform-2.4:python3x-twisted-0:23.10.0-1.el8ap.src" }, "product_reference": "python3x-twisted-0:23.10.0-1.el8ap.src", "relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python-dynaconf-0:3.1.12-2.el9ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:python-dynaconf-0:3.1.12-2.el9ap.src" }, "product_reference": "python-dynaconf-0:3.1.12-2.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python-gitpython-0:3.1.40-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:python-gitpython-0:3.1.40-1.el9ap.src" }, "product_reference": "python-gitpython-0:3.1.40-1.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python-twisted-0:23.10.0-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:python-twisted-0:23.10.0-1.el9ap.src" }, "product_reference": "python-twisted-0:23.10.0-1.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python3-dynaconf-0:3.1.12-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:python3-dynaconf-0:3.1.12-2.el9ap.noarch" }, "product_reference": "python3-dynaconf-0:3.1.12-2.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python3-gitpython-0:3.1.40-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:python3-gitpython-0:3.1.40-1.el9ap.noarch" }, "product_reference": "python3-gitpython-0:3.1.40-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python3-twisted+tls-0:23.10.0-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:python3-twisted+tls-0:23.10.0-1.el9ap.noarch" }, "product_reference": "python3-twisted+tls-0:23.10.0-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" }, { "category": "default_component_of", "full_product_name": { "name": "python3-twisted-0:23.10.0-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.4:python3-twisted-0:23.10.0-1.el9ap.noarch" }, "product_reference": "python3-twisted-0:23.10.0-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.4" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-41040", "cwe": { "id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)" }, "discovery_date": "2023-10-30T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-Ansible-Automation-Platform-2.4:python39-dynaconf-0:3.1.12-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-twisted+tls-0:23.10.0-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-twisted-0:23.10.0-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-dynaconf-0:3.1.12-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-twisted-0:23.10.0-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.4:python-dynaconf-0:3.1.12-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-twisted-0:23.10.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-dynaconf-0:3.1.12-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-twisted+tls-0:23.10.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-twisted-0:23.10.0-1.el9ap.noarch" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2247040" } ], "notes": [ { "category": "description", "text": "A path traversal vulnerability was found in GitPython due to an input validation error when reading from the \".git\" directory. This issue may allow a remote attacker to prepare a specially crafted \".git\" file with directory traversal characters in file names and force the application to read these files from the local system, which can result in checking for the existence of a specific file on the system or allow a denial of service (DoS) attack.", "title": "Vulnerability description" }, { "category": "summary", "text": "GitPython: Blind local file inclusion", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability cannot be used to read the contents of files but could be used to trigger a denial of service for the program.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-Ansible-Automation-Platform-2.4:python39-gitpython-0:3.1.40-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-gitpython-0:3.1.40-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.4:python-gitpython-0:3.1.40-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-gitpython-0:3.1.40-1.el9ap.noarch" ], "known_not_affected": [ "8Base-Ansible-Automation-Platform-2.4:python39-dynaconf-0:3.1.12-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-twisted+tls-0:23.10.0-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-twisted-0:23.10.0-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-dynaconf-0:3.1.12-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-twisted-0:23.10.0-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.4:python-dynaconf-0:3.1.12-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-twisted-0:23.10.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-dynaconf-0:3.1.12-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-twisted+tls-0:23.10.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-twisted-0:23.10.0-1.el9ap.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-41040" }, { "category": "external", "summary": "RHBZ#2247040", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2247040" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-41040", "url": "https://www.cve.org/CVERecord?id=CVE-2023-41040" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-41040", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-41040" }, { "category": "external", "summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-cwvm-v4w8-q58c", "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-cwvm-v4w8-q58c" } ], "release_date": "2023-08-31T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-01-22T14:22:42+00:00", "details": "Red Hat Ansible Automation Platform", "product_ids": [ "8Base-Ansible-Automation-Platform-2.4:python39-gitpython-0:3.1.40-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-gitpython-0:3.1.40-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.4:python-gitpython-0:3.1.40-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-gitpython-0:3.1.40-1.el9ap.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:0322" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 5.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "version": "3.1" }, "products": [ "8Base-Ansible-Automation-Platform-2.4:python39-gitpython-0:3.1.40-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-gitpython-0:3.1.40-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.4:python-gitpython-0:3.1.40-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-gitpython-0:3.1.40-1.el9ap.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "GitPython: Blind local file inclusion" }, { "cve": "CVE-2023-46137", "cwe": { "id": "CWE-444", "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)" }, "discovery_date": "2023-10-26T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-Ansible-Automation-Platform-2.4:python39-dynaconf-0:3.1.12-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-gitpython-0:3.1.40-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-dynaconf-0:3.1.12-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-gitpython-0:3.1.40-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.4:python-dynaconf-0:3.1.12-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-gitpython-0:3.1.40-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-dynaconf-0:3.1.12-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-gitpython-0:3.1.40-1.el9ap.noarch" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2246264" } ], "notes": [ { "category": "description", "text": "Twisted is an event-based framework for internet applications. Prior to version 23.10.0rc1, when sending multiple HTTP requests in one TCP packet, twisted.web will process the requests asynchronously without guaranteeing the response order. If one of the endpoints is controlled by an attacker, the attacker can delay the response on purpose to manipulate the response of the second request when a victim launched two requests using HTTP pipeline. Version 23.10.0rc1 contains a patch for this issue.", "title": "Vulnerability description" }, { "category": "summary", "text": "python-twisted: disordered HTTP pipeline response in twisted.web", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-Ansible-Automation-Platform-2.4:python39-twisted+tls-0:23.10.0-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-twisted-0:23.10.0-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-twisted-0:23.10.0-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.4:python-twisted-0:23.10.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-twisted+tls-0:23.10.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-twisted-0:23.10.0-1.el9ap.noarch" ], "known_not_affected": [ "8Base-Ansible-Automation-Platform-2.4:python39-dynaconf-0:3.1.12-2.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-gitpython-0:3.1.40-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-dynaconf-0:3.1.12-2.el8ap.src", "8Base-Ansible-Automation-Platform-2.4:python3x-gitpython-0:3.1.40-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.4:python-dynaconf-0:3.1.12-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python-gitpython-0:3.1.40-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-dynaconf-0:3.1.12-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-gitpython-0:3.1.40-1.el9ap.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-46137" }, { "category": "external", "summary": "RHBZ#2246264", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2246264" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-46137", "url": "https://www.cve.org/CVERecord?id=CVE-2023-46137" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-46137", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46137" } ], "release_date": "2023-10-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-01-22T14:22:42+00:00", "details": "Red Hat Ansible Automation Platform", "product_ids": [ "8Base-Ansible-Automation-Platform-2.4:python39-twisted+tls-0:23.10.0-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-twisted-0:23.10.0-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-twisted-0:23.10.0-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.4:python-twisted-0:23.10.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-twisted+tls-0:23.10.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-twisted-0:23.10.0-1.el9ap.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:0322" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "8Base-Ansible-Automation-Platform-2.4:python39-twisted+tls-0:23.10.0-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python39-twisted-0:23.10.0-1.el8ap.noarch", "8Base-Ansible-Automation-Platform-2.4:python3x-twisted-0:23.10.0-1.el8ap.src", "9Base-Ansible-Automation-Platform-2.4:python-twisted-0:23.10.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.4:python3-twisted+tls-0:23.10.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.4:python3-twisted-0:23.10.0-1.el9ap.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python-twisted: disordered HTTP pipeline response in twisted.web" } ] }
rhsa-2024_0215
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for GitPython is now available for Red Hat OpenStack Platform\n17.1 (Wallaby).\n\nRed Hat Product Security has rated this update as having a security impact\nof Moderate. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability from\nthe CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "GitPython is a python library used to interact with Git repositories.\n\nSecurity Fix(es):\n\n* Blind local file inclusion (CVE-2023-41040)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2024:0215", "url": "https://access.redhat.com/errata/RHSA-2024:0215" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "2247040", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2247040" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0215.json" } ], "title": "Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (GitPython) security update", "tracking": { "current_release_date": "2024-11-23T03:18:35+00:00", "generator": { "date": "2024-11-23T03:18:35+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2024:0215", "initial_release_date": "2024-01-16T14:33:02+00:00", "revision_history": [ { "date": "2024-01-16T14:33:02+00:00", "number": "1", "summary": "Initial version" }, { "date": "2024-01-16T14:33:02+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-23T03:18:35+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat OpenStack Platform 17.1", "product": { "name": "Red Hat OpenStack Platform 17.1", "product_id": "9Base-RHOS-17.1", "product_identification_helper": { "cpe": "cpe:/a:redhat:openstack:17.1::el9" } } } ], "category": "product_family", "name": "Red Hat OpenStack Platform" }, { "branches": [ { "category": "product_version", "name": "GitPython-0:3.1.14-2.el9ost.src", "product": { "name": "GitPython-0:3.1.14-2.el9ost.src", "product_id": "GitPython-0:3.1.14-2.el9ost.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/GitPython@3.1.14-2.el9ost?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "python3-GitPython-0:3.1.14-2.el9ost.noarch", "product": { "name": "python3-GitPython-0:3.1.14-2.el9ost.noarch", "product_id": "python3-GitPython-0:3.1.14-2.el9ost.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-GitPython@3.1.14-2.el9ost?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "GitPython-0:3.1.14-2.el9ost.src as a component of Red Hat OpenStack Platform 17.1", "product_id": "9Base-RHOS-17.1:GitPython-0:3.1.14-2.el9ost.src" }, "product_reference": "GitPython-0:3.1.14-2.el9ost.src", "relates_to_product_reference": "9Base-RHOS-17.1" }, { "category": "default_component_of", "full_product_name": { "name": "python3-GitPython-0:3.1.14-2.el9ost.noarch as a component of Red Hat OpenStack Platform 17.1", "product_id": "9Base-RHOS-17.1:python3-GitPython-0:3.1.14-2.el9ost.noarch" }, "product_reference": "python3-GitPython-0:3.1.14-2.el9ost.noarch", "relates_to_product_reference": "9Base-RHOS-17.1" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-41040", "cwe": { "id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)" }, "discovery_date": "2023-10-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2247040" } ], "notes": [ { "category": "description", "text": "A path traversal vulnerability was found in GitPython due to an input validation error when reading from the \".git\" directory. This issue may allow a remote attacker to prepare a specially crafted \".git\" file with directory traversal characters in file names and force the application to read these files from the local system, which can result in checking for the existence of a specific file on the system or allow a denial of service (DoS) attack.", "title": "Vulnerability description" }, { "category": "summary", "text": "GitPython: Blind local file inclusion", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability cannot be used to read the contents of files but could be used to trigger a denial of service for the program.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "9Base-RHOS-17.1:GitPython-0:3.1.14-2.el9ost.src", "9Base-RHOS-17.1:python3-GitPython-0:3.1.14-2.el9ost.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-41040" }, { "category": "external", "summary": "RHBZ#2247040", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2247040" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-41040", "url": "https://www.cve.org/CVERecord?id=CVE-2023-41040" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-41040", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-41040" }, { "category": "external", "summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-cwvm-v4w8-q58c", "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-cwvm-v4w8-q58c" } ], "release_date": "2023-08-31T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-01-16T14:33:02+00:00", "details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "9Base-RHOS-17.1:GitPython-0:3.1.14-2.el9ost.src", "9Base-RHOS-17.1:python3-GitPython-0:3.1.14-2.el9ost.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2024:0215" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 5.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "version": "3.1" }, "products": [ "9Base-RHOS-17.1:GitPython-0:3.1.14-2.el9ost.src", "9Base-RHOS-17.1:python3-GitPython-0:3.1.14-2.el9ost.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "GitPython: Blind local file inclusion" } ] }
ghsa-cwvm-v4w8-q58c
Vulnerability from github
6.9 (Medium) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Summary
In order to resolve some git references, GitPython reads files from the .git
directory, in some places the name of the file being read is provided by the user, GitPython doesn't check if this file is located outside the .git
directory. This allows an attacker to make GitPython read any file from the system.
Details
This vulnerability is present in
https://github.com/gitpython-developers/GitPython/blob/1c8310d7cae144f74a671cbe17e51f63a830adbf/git/refs/symbolic.py#L174-L175
That code joins the base directory with a user given string without checking if the final path is located outside the base directory.
I was able to exploit it from three places, but there may be more code paths that lead to it:
https://github.com/gitpython-developers/GitPython/blob/1c8310d7cae144f74a671cbe17e51f63a830adbf/git/repo/base.py#L605
https://github.com/gitpython-developers/GitPython/blob/1c8310d7cae144f74a671cbe17e51f63a830adbf/git/repo/base.py#L620
https://github.com/gitpython-developers/GitPython/blob/1c8310d7cae144f74a671cbe17e51f63a830adbf/git/index/base.py#L1353
PoC
Running GitPython within any repo should work, here is an example with the GitPython repo.
```python import git
r = git.Repo(".")
This will make GitPython read the README.md file from the root of the repo
r.commit("../README.md") r.tree("../README.md") r.index.diff("../README.md")
Reading /etc/random
WARNING: this will probably halt your system, run with caution
r.commit("../../../../../../../../../dev/random")
```
Impact
I wasn't able to show the contents of the files (that's why "blind" local file inclusion), depending on how GitPython is being used, this can be used by an attacker for something inoffensive as checking if a file exits, or cause a DoS by making GitPython read a big/infinite file (like /dev/random
on Linux systems).
Possible solutions
A solution would be to check that the final path isn't located outside the repodir
path (maybe even after resolving symlinks). Maybe there could be other checks in place to make sure that the reference names are valid.
{ "affected": [ { "package": { "ecosystem": "PyPI", "name": "GitPython" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "3.1.37" } ], "type": "ECOSYSTEM" } ] } ], "aliases": [ "CVE-2023-41040" ], "database_specific": { "cwe_ids": [ "CWE-22" ], "github_reviewed": true, "github_reviewed_at": "2023-08-30T20:09:36Z", "nvd_published_at": "2023-08-30T22:15:09Z", "severity": "MODERATE" }, "details": "### Summary\n\nIn order to resolve some git references, GitPython reads files from the `.git` directory, in some places the name of the file being read is provided by the user, GitPython doesn\u0027t check if this file is located outside the `.git` directory. This allows an attacker to make GitPython read any file from the system.\n\n### Details\n\nThis vulnerability is present in\n\nhttps://github.com/gitpython-developers/GitPython/blob/1c8310d7cae144f74a671cbe17e51f63a830adbf/git/refs/symbolic.py#L174-L175\n\nThat code joins the base directory with a user given string without checking if the final path is located outside the base directory.\n\nI was able to exploit it from three places, but there may be more code paths that lead to it:\n\nhttps://github.com/gitpython-developers/GitPython/blob/1c8310d7cae144f74a671cbe17e51f63a830adbf/git/repo/base.py#L605\n\nhttps://github.com/gitpython-developers/GitPython/blob/1c8310d7cae144f74a671cbe17e51f63a830adbf/git/repo/base.py#L620\n\nhttps://github.com/gitpython-developers/GitPython/blob/1c8310d7cae144f74a671cbe17e51f63a830adbf/git/index/base.py#L1353\n\n### PoC\n\nRunning GitPython within any repo should work, here is an example with the GitPython repo.\n\n```python\nimport git\n\nr = git.Repo(\".\")\n\n# This will make GitPython read the README.md file from the root of the repo\nr.commit(\"../README.md\")\nr.tree(\"../README.md\")\nr.index.diff(\"../README.md\")\n\n# Reading /etc/random\n# WARNING: this will probably halt your system, run with caution\n# r.commit(\"../../../../../../../../../dev/random\")\n```\n\n### Impact\n\nI wasn\u0027t able to show the contents of the files (that\u0027s why \"blind\" local file inclusion), depending on how GitPython is being used, this can be used by an attacker for something _inoffensive_ as checking if a file exits, or cause a DoS by making GitPython read a big/infinite file (like `/dev/random` on Linux systems).\n\n### Possible solutions\n\nA solution would be to check that the final path isn\u0027t located outside the `repodir` path (maybe even after resolving symlinks). Maybe there could be other checks in place to make sure that the reference names are valid.", "id": "GHSA-cwvm-v4w8-q58c", "modified": "2024-11-19T19:31:26Z", "published": "2023-08-30T20:09:36Z", "references": [ { "type": "WEB", "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-cwvm-v4w8-q58c" }, { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-41040" }, { "type": "WEB", "url": "https://github.com/gitpython-developers/GitPython/pull/1672" }, { "type": "WEB", "url": "https://github.com/gitpython-developers/GitPython/commit/74e55ee4544867e1bd976b7df5a45869ee397b0b" }, { "type": "WEB", "url": "https://github.com/gitpython-developers/GitPython/commit/e98f57b81f792f0f5e18d33ee658ae395f9aa3c4" }, { "type": "PACKAGE", "url": "https://github.com/gitpython-developers/GitPython" }, { "type": "WEB", "url": "https://github.com/gitpython-developers/GitPython/blob/1c8310d7cae144f74a671cbe17e51f63a830adbf/git/refs/symbolic.py#L174-L175" }, { "type": "WEB", "url": "https://github.com/gitpython-developers/GitPython/releases/tag/3.1.37" }, { "type": "WEB", "url": "https://github.com/pypa/advisory-database/tree/main/vulns/gitpython/PYSEC-2023-165.yaml" }, { "type": "WEB", "url": "https://lists.debian.org/debian-lts-announce/2023/09/msg00036.html" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "type": "CVSS_V3" }, { "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N", "type": "CVSS_V4" } ], "summary": "GitPython blind local file inclusion" }
pysec-2023-165
Vulnerability from pysec
GitPython is a python library used to interact with Git repositories. In order to resolve some git references, GitPython reads files from the .git
directory, in some places the name of the file being read is provided by the user, GitPython doesn't check if this file is located outside the .git
directory. This allows an attacker to make GitPython read any file from the system. This vulnerability is present in https://github.com/gitpython-developers/GitPython/blob/1c8310d7cae144f74a671cbe17e51f63a830adbf/git/refs/symbolic.py#L174-L175. That code joins the base directory with a user given string without checking if the final path is located outside the base directory. This vulnerability cannot be used to read the contents of files but could in theory be used to trigger a denial of service for the program. This issue has not yet been addressed.
{ "affected": [ { "package": { "ecosystem": "PyPI", "name": "gitpython", "purl": "pkg:pypi/gitpython" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "3.1.35" } ], "type": "ECOSYSTEM" } ], "versions": [ "0.1.7", "0.2.0-beta1", "0.3.0-beta1", "0.3.0-beta2", "0.3.1-beta2", "0.3.2", "0.3.2.1", "0.3.2.RC1", "0.3.3", "0.3.4", "0.3.5", "0.3.6", "0.3.7", "1.0.0", "1.0.1", "1.0.2", "2.0.0", "2.0.1", "2.0.2", "2.0.3", "2.0.4", "2.0.5", "2.0.6", "2.0.7", "2.0.8", "2.0.9", "2.0.9.dev0", "2.0.9.dev1", "2.1.0", "2.1.1", "2.1.10", "2.1.11", "2.1.12", "2.1.13", "2.1.14", "2.1.15", "2.1.2", "2.1.3", "2.1.4", "2.1.5", "2.1.6", "2.1.7", "2.1.8", "2.1.9", "3.0.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.0.5", "3.0.6", "3.0.7", "3.0.8", "3.0.9", "3.1.0", "3.1.1", "3.1.10", "3.1.11", "3.1.12", "3.1.13", "3.1.14", "3.1.15", "3.1.16", "3.1.17", "3.1.18", "3.1.19", "3.1.2", "3.1.20", "3.1.22", "3.1.23", "3.1.24", "3.1.25", "3.1.26", "3.1.27", "3.1.28", "3.1.29", "3.1.3", "3.1.30", "3.1.31", "3.1.32", "3.1.33", "3.1.34", "3.1.4", "3.1.5", "3.1.6", "3.1.7", "3.1.8", "3.1.9" ] } ], "aliases": [ "CVE-2023-41040", "GHSA-cwvm-v4w8-q58c" ], "details": " GitPython is a python library used to interact with Git repositories. In order to resolve some git references, GitPython reads files from the `.git` directory, in some places the name of the file being read is provided by the user, GitPython doesn\u0027t check if this file is located outside the `.git` directory. This allows an attacker to make GitPython read any file from the system. This vulnerability is present in https://github.com/gitpython-developers/GitPython/blob/1c8310d7cae144f74a671cbe17e51f63a830adbf/git/refs/symbolic.py#L174-L175. That code joins the base directory with a user given string without checking if the final path is located outside the base directory. This vulnerability cannot be used to read the contents of files but could in theory be used to trigger a denial of service for the program. This issue has not yet been addressed.", "id": "PYSEC-2023-165", "modified": "2023-09-07T14:33:25.683922+00:00", "published": "2023-08-30T22:15:00+00:00", "references": [ { "type": "EVIDENCE", "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-cwvm-v4w8-q58c" }, { "type": "ADVISORY", "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-cwvm-v4w8-q58c" }, { "type": "WEB", "url": "https://github.com/gitpython-developers/GitPython/blob/1c8310d7cae144f74a671cbe17e51f63a830adbf/git/refs/symbolic.py#L174-L175" } ], "severity": [ { "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "type": "CVSS_V3" } ] }
gsd-2023-41040
Vulnerability from gsd
{ "GSD": { "alias": "CVE-2023-41040", "id": "GSD-2023-41040" }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2023-41040" ], "details": " GitPython is a python library used to interact with Git repositories. In order to resolve some git references, GitPython reads files from the `.git` directory, in some places the name of the file being read is provided by the user, GitPython doesn\u0027t check if this file is located outside the `.git` directory. This allows an attacker to make GitPython read any file from the system. This vulnerability is present in https://github.com/gitpython-developers/GitPython/blob/1c8310d7cae144f74a671cbe17e51f63a830adbf/git/refs/symbolic.py#L174-L175. That code joins the base directory with a user given string without checking if the final path is located outside the base directory. This vulnerability cannot be used to read the contents of files but could in theory be used to trigger a denial of service for the program. This issue has not yet been addressed.", "id": "GSD-2023-41040", "modified": "2023-12-13T01:20:45.503942Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "security-advisories@github.com", "ID": "CVE-2023-41040", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "GitPython", "version": { "version_data": [ { "version_affected": "=", "version_value": "\u003c= 3.1.34" } ] } } ] }, "vendor_name": "gitpython-developers" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": " GitPython is a python library used to interact with Git repositories. In order to resolve some git references, GitPython reads files from the `.git` directory, in some places the name of the file being read is provided by the user, GitPython doesn\u0027t check if this file is located outside the `.git` directory. This allows an attacker to make GitPython read any file from the system. This vulnerability is present in https://github.com/gitpython-developers/GitPython/blob/1c8310d7cae144f74a671cbe17e51f63a830adbf/git/refs/symbolic.py#L174-L175. That code joins the base directory with a user given string without checking if the final path is located outside the base directory. This vulnerability cannot be used to read the contents of files but could in theory be used to trigger a denial of service for the program. This issue has not yet been addressed." } ] }, "impact": { "cvss": [ { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "cweId": "CWE-22", "lang": "eng", "value": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)" } ] } ] }, "references": { "reference_data": [ { "name": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-cwvm-v4w8-q58c", "refsource": "MISC", "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-cwvm-v4w8-q58c" }, { "name": "https://github.com/gitpython-developers/GitPython/blob/1c8310d7cae144f74a671cbe17e51f63a830adbf/git/refs/symbolic.py#L174-L175", "refsource": "MISC", "url": "https://github.com/gitpython-developers/GitPython/blob/1c8310d7cae144f74a671cbe17e51f63a830adbf/git/refs/symbolic.py#L174-L175" }, { "name": "https://lists.debian.org/debian-lts-announce/2023/09/msg00036.html", "refsource": "MISC", "url": "https://lists.debian.org/debian-lts-announce/2023/09/msg00036.html" } ] }, "source": { "advisory": "GHSA-cwvm-v4w8-q58c", "discovery": "UNKNOWN" } }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:gitpython_project:gitpython:*:*:*:*:*:python:*:*", "cpe_name": [], "versionEndIncluding": "3.1.34", "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "security-advisories@github.com", "ID": "CVE-2023-41040" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": " GitPython is a python library used to interact with Git repositories. In order to resolve some git references, GitPython reads files from the `.git` directory, in some places the name of the file being read is provided by the user, GitPython doesn\u0027t check if this file is located outside the `.git` directory. This allows an attacker to make GitPython read any file from the system. This vulnerability is present in https://github.com/gitpython-developers/GitPython/blob/1c8310d7cae144f74a671cbe17e51f63a830adbf/git/refs/symbolic.py#L174-L175. That code joins the base directory with a user given string without checking if the final path is located outside the base directory. This vulnerability cannot be used to read the contents of files but could in theory be used to trigger a denial of service for the program. This issue has not yet been addressed." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "CWE-22" } ] } ] }, "references": { "reference_data": [ { "name": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-cwvm-v4w8-q58c", "refsource": "MISC", "tags": [ "Exploit", "Vendor Advisory" ], "url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-cwvm-v4w8-q58c" }, { "name": "https://github.com/gitpython-developers/GitPython/blob/1c8310d7cae144f74a671cbe17e51f63a830adbf/git/refs/symbolic.py#L174-L175", "refsource": "MISC", "tags": [ "Product" ], "url": "https://github.com/gitpython-developers/GitPython/blob/1c8310d7cae144f74a671cbe17e51f63a830adbf/git/refs/symbolic.py#L174-L175" }, { "name": "https://lists.debian.org/debian-lts-announce/2023/09/msg00036.html", "refsource": "MISC", "tags": [], "url": "https://lists.debian.org/debian-lts-announce/2023/09/msg00036.html" } ] } }, "impact": { "baseMetricV3": { "cvssV3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 2.5 } }, "lastModifiedDate": "2023-09-29T20:15Z", "publishedDate": "2023-08-30T22:15Z" } } }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.