RHSA-2025:0341HighCVSS 7.3

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update

Published
January 15, 2025
Last Modified
November 5, 2026

🔗 CVE IDs covered (4)

CVE-2024-56201 →CVE-2024-56326 →CVE-2024-11407 →CVE-2024-52304 →

📋 Description

CVE-2024-11407 — grpc: Denial of Service through Data corruption in gRPC-C++ CVE-2024-52304 — aiohttp: aiohttp vulnerable to request smuggling due to incorrect parsing of chunk extensions CVE-2024-56201 — jinja2: Jinja has a sandbox breakout through malicious filenames CVE-2024-56326 — jinja2: Jinja has a sandbox breakout through indirect reference to format method

🎯 Affected products142

  • Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/aap-cloud-billing-rhel8-operator@sha256:dc8d5006c2f1180af77467811543fcfe07e26a4c88c6707b206692ba88994f3d_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-cloud-billing-rhel8@sha256:76dda3813db9e4b3c9b6231a4671b4ea83bcdfc12aca0203642f16078a7a7308_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-cloud-metrics-collector-rhel8@sha256:2b3f660afb09d885008805164913031724a2e6ef44c23bcfcda0872547796020_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-cloud-ui-rhel8-operator@sha256:f73293bbc83a989de958a093f9d27a390fcd5fd889b6991b29246e946ff5f173_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-cloud-ui-rhel8@sha256:9108919ceaf1b2a74eb09d34d21c79d87a5c2913cb7c0bc14d4a91d7ac4eab2a_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-must-gather-rhel8@sha256:24108b3f430077e1d062598a7452e0f080fa0c6847941b0cee9a98630d1ba924_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-must-gather-rhel8@sha256:e6dea9e1291824c64e30da60304c6260dac63aa592f59eb446182525d37a60d5_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-must-gather-rhel8@sha256:ec32e837696ce70d99b910f09c5f249f467d41611b17ebda65a97f472da2d23b_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-must-gather-rhel8@sha256:faefa5edfe878a594f3710220561659721f315ddcbc213f6abe58b2846194959_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-builder-rhel8@sha256:725d3556e9bd2e91acf345a93ad9f0216ebabfd537a416c4934841d3747a86fe_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-builder-rhel8@sha256:929b3e8c84ed0a424f1dea07a411ef22dc7622dbd2491fa01765b68a50e84397_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-builder-rhel8@sha256:ad74ec5dbb2ddfa557843d6b3642c6168e17d36ba2d8d7d71ee61d625c578957_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-builder-rhel8@sha256:e0d2cfb63a119d9eb24a12610a63155ed5388d8a4b29c7b7b1388f5038637a9d_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-builder-rhel9@sha256:4f4f9499bea1f1e141e41b040115be2c34c64d6c38e6308ca71ac11ba1b2e8b8_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-builder-rhel9@sha256:7958863292d81357614888f005dac99727dbf0c2f13726f28c2b39865c671d5a_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-builder-rhel9@sha256:8a13814b5e4cf882e42704ab9c8e77fcc2540b43507e646973a14ccb29a724a5_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-builder-rhel9@sha256:f496cb718fdc13cc2f5d5df210df389be02fdd8b3f6e7d8f50633184a81c7b1f_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:036ac746da4275b51bfa147aa88d78c0e10ffc487c4e2921def86c4f9ac5b005_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:26d157f4479c38dc2cb9bd68855534534fb70fe331bb6b3ca72f107e7b740c05_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:3587939de3944776d9a680e0ec85af84f62ca3c834aca27ee4a36a2f93a656e9_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:e3e2b8ea61494b68c9681e2e086ed754c8820b5136c6a0e03a2c33cd286c63ae_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-python-base-rhel8@sha256:18dc1090514fe1740de1f7cd4115dab6be6b210d8726dc9ad520c686f0198a1c_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-python-base-rhel8@sha256:7c701fc085b75859961b15027c263864853682cfbb327ae8e220130e8f8af3d5_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-python-base-rhel8@sha256:a3cbfbe7fea909868346bbeefb5c14bfce77858c17aa6e36df0b34d5d24de794_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-python-base-rhel8@sha256:b68431e7c04d57dc22644e1b3637541216cf554d7444c53503fdd12a64881ec4_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-python-base-rhel9@sha256:29d34317295d0f3b22461df849189a828993baf98b9b5a0ddfb7f7185dcabb25_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-python-base-rhel9@sha256:c025aa4ff0db09e514e56c6d62a1f3cf1f28d26c4b71277684d2528da58e28d0_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-python-base-rhel9@sha256:d4c682a8e365311e0cfe86015ecc7b0963dae69d1a2ed7cdaf2b6a9cc36419ae_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • +112 more not shown

✅ Remediation

Red Hat Ansible Automation Platform Workaround: To mitigate this vulnerabilty restrict user-controlled template filenames, ensuring they follow a predefined templates. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (7)