RHSA-2025:0341HighCVSS 7.3

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update

Published
January 15, 2025
Last Modified
August 2, 2026

🔗 CVE IDs covered (4)

CVE-2024-11407 →CVE-2024-52304 →CVE-2024-56201 →CVE-2024-56326 →

📋 Description

CVE-2024-11407 — grpc: Denial of Service through Data corruption in gRPC-C++ CVE-2024-52304 — aiohttp: aiohttp vulnerable to request smuggling due to incorrect parsing of chunk extensions CVE-2024-56201 — jinja2: Jinja has a sandbox breakout through malicious filenames CVE-2024-56326 — jinja2: Jinja has a sandbox breakout through indirect reference to format method

🎯 Affected products142

  • Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/aap-cloud-billing-rhel8-operator@sha256:dc8d5006c2f1180af77467811543fcfe07e26a4c88c6707b206692ba88994f3d_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-cloud-billing-rhel8@sha256:76dda3813db9e4b3c9b6231a4671b4ea83bcdfc12aca0203642f16078a7a7308_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-cloud-metrics-collector-rhel8@sha256:2b3f660afb09d885008805164913031724a2e6ef44c23bcfcda0872547796020_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-cloud-ui-rhel8-operator@sha256:f73293bbc83a989de958a093f9d27a390fcd5fd889b6991b29246e946ff5f173_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-cloud-ui-rhel8@sha256:9108919ceaf1b2a74eb09d34d21c79d87a5c2913cb7c0bc14d4a91d7ac4eab2a_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-must-gather-rhel8@sha256:24108b3f430077e1d062598a7452e0f080fa0c6847941b0cee9a98630d1ba924_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-must-gather-rhel8@sha256:e6dea9e1291824c64e30da60304c6260dac63aa592f59eb446182525d37a60d5_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-must-gather-rhel8@sha256:ec32e837696ce70d99b910f09c5f249f467d41611b17ebda65a97f472da2d23b_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/aap-must-gather-rhel8@sha256:faefa5edfe878a594f3710220561659721f315ddcbc213f6abe58b2846194959_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-builder-rhel8@sha256:725d3556e9bd2e91acf345a93ad9f0216ebabfd537a416c4934841d3747a86fe_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-builder-rhel8@sha256:929b3e8c84ed0a424f1dea07a411ef22dc7622dbd2491fa01765b68a50e84397_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-builder-rhel8@sha256:ad74ec5dbb2ddfa557843d6b3642c6168e17d36ba2d8d7d71ee61d625c578957_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-builder-rhel8@sha256:e0d2cfb63a119d9eb24a12610a63155ed5388d8a4b29c7b7b1388f5038637a9d_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-builder-rhel9@sha256:4f4f9499bea1f1e141e41b040115be2c34c64d6c38e6308ca71ac11ba1b2e8b8_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-builder-rhel9@sha256:7958863292d81357614888f005dac99727dbf0c2f13726f28c2b39865c671d5a_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-builder-rhel9@sha256:8a13814b5e4cf882e42704ab9c8e77fcc2540b43507e646973a14ccb29a724a5_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-builder-rhel9@sha256:f496cb718fdc13cc2f5d5df210df389be02fdd8b3f6e7d8f50633184a81c7b1f_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:036ac746da4275b51bfa147aa88d78c0e10ffc487c4e2921def86c4f9ac5b005_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:26d157f4479c38dc2cb9bd68855534534fb70fe331bb6b3ca72f107e7b740c05_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:3587939de3944776d9a680e0ec85af84f62ca3c834aca27ee4a36a2f93a656e9_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:e3e2b8ea61494b68c9681e2e086ed754c8820b5136c6a0e03a2c33cd286c63ae_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-python-base-rhel8@sha256:18dc1090514fe1740de1f7cd4115dab6be6b210d8726dc9ad520c686f0198a1c_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-python-base-rhel8@sha256:7c701fc085b75859961b15027c263864853682cfbb327ae8e220130e8f8af3d5_s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-python-base-rhel8@sha256:a3cbfbe7fea909868346bbeefb5c14bfce77858c17aa6e36df0b34d5d24de794_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-python-base-rhel8@sha256:b68431e7c04d57dc22644e1b3637541216cf554d7444c53503fdd12a64881ec4_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • ansible-automation-platform-25/ansible-python-base-rhel9@sha256:29d34317295d0f3b22461df849189a828993baf98b9b5a0ddfb7f7185dcabb25_arm64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-python-base-rhel9@sha256:c025aa4ff0db09e514e56c6d62a1f3cf1f28d26c4b71277684d2528da58e28d0_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • ansible-automation-platform-25/ansible-python-base-rhel9@sha256:d4c682a8e365311e0cfe86015ecc7b0963dae69d1a2ed7cdaf2b6a9cc36419ae_amd64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • +112 more not shown

✅ Remediation

Red Hat Ansible Automation Platform Workaround: To mitigate this vulnerabilty restrict user-controlled template filenames, ensuring they follow a predefined templates.

🔗 References (7)