RHSA-2025:0753HighCVSS 7.3

Red Hat Security Advisory: Red Hat Ansible Automation Platform Execution Environments Container Release Update

Published
January 28, 2025
Last Modified
October 31, 2026

🔗 CVE IDs covered (3)

CVE-2024-52304 →CVE-2024-56201 →CVE-2024-56326 →

📋 Description

CVE-2024-52304 — aiohttp: aiohttp vulnerable to request smuggling due to incorrect parsing of chunk extensions CVE-2024-56201 — jinja2: Jinja has a sandbox breakout through malicious filenames CVE-2024-56326 — jinja2: Jinja has a sandbox breakout through indirect reference to format method

🎯 Affected products34

  • Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel8@sha256:6482c85063d9a9b0c004ab820864b8ee4ad539411a4201d7986ec539a9ff4065_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel8@sha256:81429faee24a766d27e9e53e525307f004a0a1e3565c7b343894ebc00c97be6e_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel8@sha256:94633e88e68654792939437c4e88124607d0ce78cc29a9b3adc4f6741dd6ad40_ppc64le as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel8@sha256:9e237d9484aafa8663cc8df9b762e4f720a4bd4702035a9a2c7f52761be03c89_arm64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel8@sha256:f5487d83e07fbfede2d9724cea2fa1947aaf9207f2b80ed2091ea63677a1a37b_s390x as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel9@sha256:45b628279885139dd3223b25bf4af3eb2eb04b83781971061a6f1a3f4027bdfc_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel9@sha256:48248cdd9d621c2bf0467671eab1913738447245473a0a2f528ff4f82a731f5e_ppc64le as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel9@sha256:79806e62bfc3e9b60cd380d70b66ee1fa52f8066f0d21a981361f5ec45ecc036_s390x as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel9@sha256:fc899a2b4bf476f60dd52a7b8e4ff4c60d48795b32bba14adae38205641537fb_arm64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-29-rhel8@sha256:afc0732dabb2e714ad61602ccc323dfa94fc761527d2209dd35d8acf347e1cdd_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:0cec10d9a6e61ee12691ad1f441947b2019c29db163c2f3872851ebb6ef32cc2_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:0cf19f239c3ac9697d64e522ba35b0b509543179f2ba68c363281bcd3d6df8e2_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:1581e584e3ff8fa919eecdcd5c9517426a14061fe268c8ba6c277ac5e4cd6486_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:2e82c21518bcc5a825c0a84a97eb49745e752073097739f0425d45dbfd432eb1_arm64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:446ece6a25bcd6f2a4c2aba033938591c2617e643c4f3de33c8bdb7b8d0f514a_ppc64le as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:57ed3d64f3acf810747fe88627901aeead08bd3d892b12b7206c14fa024a1930_ppc64le as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:5d32871a9c5fd57bf54cbadb5ffc882d9c158b40cbd8c3a596e7a0d668643167_s390x as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:66a83c19cee27a007f0a1c9e9a82d669ba3f97f0dcce2308a0ce32d3e1cd3a7f_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:6f25526b662c522db6b886ce896a4fa1fc3f3cb27c8857a15c26b91a444257b9_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:75357202064ca5c4e815863557cf2140da33bd2a801f442fb399ed3093c5d313_ppc64le as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:945c55597448f92bd7b46df53b3907f2835132b25d1d932edcd7c63f7b6e75d9_arm64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:a23c98abc33bb233ee267f92ae6b706b03b67e94bd95280395898400fd8ec85f_ppc64le as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:aaa47e2dd1c71c0d36a4331fc0078a5067ef2cd93bda1902d3863a341e2e6074_s390x as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:ac62c6296c182e61c77f571728c094d35eb11e37bc2133a5984d04c8ffd2830d_s390x as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:c1d6fe4ed7afe9d13fa292615585f044e412a81311537ef6c7465f9d2e7e19c6_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:c407acff07bde1e61e0990cac320609fb81f97d96b7d1f7780683129a117ccea_arm64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:d8aa73f286779b3b4c49f0ce745f973b09bce51d1338420587515b91deabd5a7_arm64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:f1e7001759d5f70cd598b59a4a5f2e0786e3dfdd63e1ff70cb382a73b5182dfd_s390x as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:ff3261d84f5062ad13fc080ee9b53991d4e64cec28c2810f78ae5d85fecb80db_amd64 as a component of Ansible Automation Platform Execution Environments
  • +4 more not shown

✅ Remediation

Red Hat Ansible Automation Platform Execution Environments Workaround: To mitigate this vulnerabilty restrict user-controlled template filenames, ensuring they follow a predefined templates. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (6)