RHSA-2025:0722HighCVSS 7.3

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Container Release Update

Published
January 27, 2025
Last Modified
September 4, 2026

🔗 CVE IDs covered (5)

CVE-2024-11407 →CVE-2024-52304 →CVE-2024-56201 →CVE-2024-56326 →CVE-2024-56374 →

📋 Description

CVE-2024-11407 — grpc: Denial of Service through Data corruption in gRPC-C++ CVE-2024-52304 — aiohttp: aiohttp vulnerable to request smuggling due to incorrect parsing of chunk extensions CVE-2024-56201 — jinja2: Jinja has a sandbox breakout through malicious filenames CVE-2024-56326 — jinja2: Jinja has a sandbox breakout through indirect reference to format method CVE-2024-56374 — django: potential denial-of-service vulnerability in IPv6 validation

🎯 Affected products124

  • Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/aap-cloud-billing-rhel8-operator@sha256:e54a5e31abb4c6707ae1ca3ddf932f88f0c3d0912b249d40fffee08ca57d6b97_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/aap-cloud-billing-rhel8@sha256:12f9274edc025d8ab984f9f8aa5d5a8329a6a39ba9944f7bcf8f0aab84c41354_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/aap-cloud-metrics-collector-rhel8@sha256:c3225d129ebc3bb051b958f1ec6ac8fac0b58cf97ce0702b47a230f07bd56afc_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/aap-cloud-ui-rhel8-operator@sha256:4935cfdcfa0030a86c112872008f3b7ee7b188da7f911a84695368ab4f3b2083_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/aap-cloud-ui-rhel8@sha256:0c077f96a5610e6188822a334ddd8851949cfe16704fa39475f0931fbde15580_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/aap-must-gather-rhel8@sha256:08aa9ba624ebe4c91051161ec372308df2afef83c91c33584a2ed6e5d666ce8e_ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/aap-must-gather-rhel8@sha256:957a8f6e3d513943ad8a73bdcb75305a0d31ef5afa2c699bfd25296a8c2c3f4c_s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/aap-must-gather-rhel8@sha256:af7e658f57d470d68809ffe66b2b1d98ce3dac4996e6380c7bcf7dd2995a1c49_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/aap-must-gather-rhel8@sha256:f7fea5f0a7b77b6eff9062c336e3a7c4c2317628807ec215fe0bb85fe69b8f9f_arm64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-builder-rhel8@sha256:07001bfc41ff6635eb72fc901aac04224e662c4af8642b42a4e2f090e55da10c_arm64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-builder-rhel8@sha256:36f223d128b4c6af13e6c8357e557751cbd7a92c3034dafa889ab2a64fc1e9db_ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-builder-rhel8@sha256:b3f7ab103601dbab78e8620297bbfebd4a50ef89fc694470edf587b3c3aa3cd2_s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-builder-rhel8@sha256:dc05cbd8bebfcc6b0edddb81ad36fca510057c5a005e4b8b875ffee0a3a2494a_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-builder-rhel9@sha256:198b7f1ef123925e5aab89e8d395576b68e2ab8c0d513bd737cee44672e78c7f_s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/ansible-builder-rhel9@sha256:1c11ee8258b78b242aa7f9f32735fd25829f6dcc3c982b200d42a5ee77ca2ab8_ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/ansible-builder-rhel9@sha256:4f28d3eecbe85fed454d57dd4ba4f069e394a3e394dcce3dc6a75d1e8f9fe606_arm64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/ansible-builder-rhel9@sha256:9716c0e68fe48889eb68d3e01da75b775f3411450e66699364be273fc8ca88af_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/ansible-python-base-rhel8@sha256:14a4a36daa0c171dcd5ec8fac2273a464af3098296e8a03d74f9b4081207c9d5_s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-python-base-rhel8@sha256:16f64f3af32a60f0a9f0d77c555364ca8ebf3ce54df0cce3d34167cf4c10785c_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-python-base-rhel8@sha256:cc6cfa27f4cc7804c37672f31722712449a938f40a86d0131faa5c35a228ff04_ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-python-base-rhel8@sha256:f7fa3394cf1274c0d609df37e2e6ec97583bd0ed2d877ed83a706e11856ce241_arm64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-python-base-rhel9@sha256:49fc2776989fefdb55700e84c47fad34dce4410333d0bf5f5c02b1c63c6afc45_ppc64le as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/ansible-python-base-rhel9@sha256:4d4bad8a8a4298c21d6d22a7f4fdfdeebbb614885c3b0f3701bead336301eeb6_s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/ansible-python-base-rhel9@sha256:8ae90ef550ad8b31351ca59c1b323d8d6692ea1a16c64d958ef5535220d6cf1f_arm64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/ansible-python-base-rhel9@sha256:9823f7feef6cb78482c14e8a1474d055961ec0aa241e64dba5a8c13d6683a3d6_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • ansible-automation-platform-24/ansible-python-toolkit-rhel8@sha256:359140edfcb5a24386b65482e230025c38efff9944e56c549d60be9489d5e4cd_amd64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-python-toolkit-rhel8@sha256:5fbe0985228ff89051ed5a74b1497f41b28f9e03ee113ef284ad77eafa0accac_s390x as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • ansible-automation-platform-24/ansible-python-toolkit-rhel8@sha256:698ed1703d6aae876e2db38443bc818e0a072bc82f8fcba05d69915da4f3304e_arm64 as a component of Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • +94 more not shown

✅ Remediation

Red Hat Ansible Automation Platform Workaround: To mitigate this vulnerabilty restrict user-controlled template filenames, ensuring they follow a predefined templates.

🔗 References (8)