RHSA-2025:0722HighCVSS 7.3

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Container Release Update

Published
January 27, 2025
Last Modified
November 5, 2026

🔗 CVE IDs covered (5)

CVE-2024-52304 →CVE-2024-56201 →CVE-2024-56326 →CVE-2024-56374 →CVE-2024-11407 →

📋 Description

CVE-2024-11407 — grpc: Denial of Service through Data corruption in gRPC-C++ CVE-2024-52304 — aiohttp: aiohttp vulnerable to request smuggling due to incorrect parsing of chunk extensions CVE-2024-56201 — jinja2: Jinja has a sandbox breakout through malicious filenames CVE-2024-56326 — jinja2: Jinja has a sandbox breakout through indirect reference to format method CVE-2024-56374 — django: potential denial-of-service vulnerability in IPv6 validation

🎯 Affected products124

  • Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/aap-cloud-billing-rhel8-operator@sha256:e54a5e31abb4c6707ae1ca3ddf932f88f0c3d0912b249d40fffee08ca57d6b97_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/aap-cloud-billing-rhel8@sha256:12f9274edc025d8ab984f9f8aa5d5a8329a6a39ba9944f7bcf8f0aab84c41354_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/aap-cloud-metrics-collector-rhel8@sha256:c3225d129ebc3bb051b958f1ec6ac8fac0b58cf97ce0702b47a230f07bd56afc_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/aap-cloud-ui-rhel8-operator@sha256:4935cfdcfa0030a86c112872008f3b7ee7b188da7f911a84695368ab4f3b2083_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/aap-cloud-ui-rhel8@sha256:0c077f96a5610e6188822a334ddd8851949cfe16704fa39475f0931fbde15580_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/aap-must-gather-rhel8@sha256:08aa9ba624ebe4c91051161ec372308df2afef83c91c33584a2ed6e5d666ce8e_ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/aap-must-gather-rhel8@sha256:957a8f6e3d513943ad8a73bdcb75305a0d31ef5afa2c699bfd25296a8c2c3f4c_s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/aap-must-gather-rhel8@sha256:af7e658f57d470d68809ffe66b2b1d98ce3dac4996e6380c7bcf7dd2995a1c49_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/aap-must-gather-rhel8@sha256:f7fea5f0a7b77b6eff9062c336e3a7c4c2317628807ec215fe0bb85fe69b8f9f_arm64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-builder-rhel8@sha256:07001bfc41ff6635eb72fc901aac04224e662c4af8642b42a4e2f090e55da10c_arm64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-builder-rhel8@sha256:36f223d128b4c6af13e6c8357e557751cbd7a92c3034dafa889ab2a64fc1e9db_ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-builder-rhel8@sha256:b3f7ab103601dbab78e8620297bbfebd4a50ef89fc694470edf587b3c3aa3cd2_s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-builder-rhel8@sha256:dc05cbd8bebfcc6b0edddb81ad36fca510057c5a005e4b8b875ffee0a3a2494a_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-builder-rhel9@sha256:198b7f1ef123925e5aab89e8d395576b68e2ab8c0d513bd737cee44672e78c7f_s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/ansible-builder-rhel9@sha256:1c11ee8258b78b242aa7f9f32735fd25829f6dcc3c982b200d42a5ee77ca2ab8_ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/ansible-builder-rhel9@sha256:4f28d3eecbe85fed454d57dd4ba4f069e394a3e394dcce3dc6a75d1e8f9fe606_arm64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/ansible-builder-rhel9@sha256:9716c0e68fe48889eb68d3e01da75b775f3411450e66699364be273fc8ca88af_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/ansible-python-base-rhel8@sha256:14a4a36daa0c171dcd5ec8fac2273a464af3098296e8a03d74f9b4081207c9d5_s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-python-base-rhel8@sha256:16f64f3af32a60f0a9f0d77c555364ca8ebf3ce54df0cce3d34167cf4c10785c_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-python-base-rhel8@sha256:cc6cfa27f4cc7804c37672f31722712449a938f40a86d0131faa5c35a228ff04_ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-python-base-rhel8@sha256:f7fa3394cf1274c0d609df37e2e6ec97583bd0ed2d877ed83a706e11856ce241_arm64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-python-base-rhel9@sha256:49fc2776989fefdb55700e84c47fad34dce4410333d0bf5f5c02b1c63c6afc45_ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/ansible-python-base-rhel9@sha256:4d4bad8a8a4298c21d6d22a7f4fdfdeebbb614885c3b0f3701bead336301eeb6_s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/ansible-python-base-rhel9@sha256:8ae90ef550ad8b31351ca59c1b323d8d6692ea1a16c64d958ef5535220d6cf1f_arm64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/ansible-python-base-rhel9@sha256:9823f7feef6cb78482c14e8a1474d055961ec0aa241e64dba5a8c13d6683a3d6_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/ansible-python-toolkit-rhel8@sha256:359140edfcb5a24386b65482e230025c38efff9944e56c549d60be9489d5e4cd_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-python-toolkit-rhel8@sha256:5fbe0985228ff89051ed5a74b1497f41b28f9e03ee113ef284ad77eafa0accac_s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-python-toolkit-rhel8@sha256:698ed1703d6aae876e2db38443bc818e0a072bc82f8fcba05d69915da4f3304e_arm64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • +94 more not shown

✅ Remediation

Red Hat Ansible Automation Platform Workaround: To mitigate this vulnerabilty restrict user-controlled template filenames, ensuring they follow a predefined templates. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (8)