RHSA-2025:1101HighCVSS 7.3

Red Hat Security Advisory: Red Hat Ansible Automation Platform Execution Environments Container Release Update

Published
February 5, 2025
Last Modified
October 31, 2026

🔗 CVE IDs covered (3)

CVE-2024-52304 →CVE-2024-56201 →CVE-2024-56326 →

📋 Description

CVE-2024-52304 — aiohttp: aiohttp vulnerable to request smuggling due to incorrect parsing of chunk extensions CVE-2024-56201 — jinja2: Jinja has a sandbox breakout through malicious filenames CVE-2024-56326 — jinja2: Jinja has a sandbox breakout through indirect reference to format method

🎯 Affected products46

  • Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel8@sha256:66b7cbf91db0428fbc412fda36816bc8ded2acfa5a2bb430da0bc2a33269f69b_s390x as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel8@sha256:79eb2ec9754de91f42d33d3cbb073c8fc506c9a007c5d7e5b85261f75ab67da7_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel8@sha256:a3fbd4b3ef2e38a4c6667165e8f4da0f5b1258d8e7829c074825d503ed9448b5_ppc64le as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel8@sha256:b6edec09ee6ecb323cee3d566bc0cd4473468386a8a1250228bdb8ddcd40f6d6_arm64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel8@sha256:f7cdc66d822e3705cd4e877bd67b5d870560d89dc18a8fb487ea05ecc6b47852_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel9@sha256:6651ed76bcfda90096fc9a8f7ce772f39794acf2d6afaac35eb2d068bb67fadc_arm64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel9@sha256:9d3e3d98bec6bb7fe4bc2608d62cc6cbc7954dd758023475d39674f33b2d57ec_s390x as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel9@sha256:b968f15363317ca9903abf1f8b2b3fe0d09e239df8c36086d7b2b3db4b426903_ppc64le as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel9@sha256:c87a4652a10658bfc976dc6133917e3c2631dda0bff405242da9369ac826efc2_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-29-rhel8@sha256:ccac23c975c65f04ff5f8535988bd09a3309dcf4e70eaaa200e6ad5c1792bf81_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:07b126b7a7aeaa0ea2b5894989fb57345227624765fc418ee6804b8f3dc26bf7_arm64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:0bad1243aa3173df68f5378aa852eb78d172e3a86f10a70b6220f06d2f3b83aa_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:0bdc55a1bfc7c9c51babf72f72a2e71bc9a909e025c00c327d8670528a7fb749_arm64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:213acda21cd0b7f0a93d1e553a9e06daea72f097150cd915d43c74b50e901177_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:234e92da55feb451e6ba12864b7d4f498ef5754eb79da0516096b487e830d2d0_s390x as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:25d122c84894a69ebe9c1105e9276014e0e83db321883d390b5f58f9e7c1d223_s390x as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:3428aa14d66cbd537fa75ab7fef17e05bbf356ed7daaff98822e213a0a10c741_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:3cf21f8f1903b82793d7b652631fcfd07724fe2ef80a02e15ad8df9c68fa444f_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:3f5ab8458784204ae9513a9d006019c6aaadbc6b2acedb820a16d69bd8dfef57_ppc64le as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:4ce80fd9b8c37acb6b5f0c5f7e43ec9ff3ed1d284c8d523311b7b9d227470738_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:5d8c6dc65d19cb2bd60824e194e51136e6f12060bc8d663ee0ccf5c2b6c06e82_ppc64le as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:869699086677a1e3ecf02169a29e19cfa7edb79fc508d0bdee675dcda4fb23db_ppc64le as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:8e6b8501c799cf5122a064e34437f2a34b1be743c16294bb8a2902d36f1a67f4_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:906edbfd7f412de84a19b5e024dfc97f19ce502296ca2e18c82ccd65d576d08e_ppc64le as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:9188601682d277118612309666393838d8b6b1e12ca0d81344324ec416800f7d_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:9e68c4aa8c1a1cf9ac289467f949055b4f8853aa1989f6955cb638b555b7c7c1_s390x as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:ac8fe647c959b57963b9323b5276adb2229a7e1476a744fe54f9d3f316092354_arm64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:ae2d1ef5fd50ffa5706f2a3d4cb5c25d23ab78ff4a1592ddf2a6f1e916c0628b_arm64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:b06b880e910f5a6648d5cb28af5c97b2181e6c0f32dc99d3740358dc01ad16a2_s390x as a component of Ansible Automation Platform Execution Environments
  • +16 more not shown

✅ Remediation

Red Hat Ansible Automation Platform Execution Environments Workaround: To mitigate this vulnerabilty restrict user-controlled template filenames, ensuring they follow a predefined templates. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (6)