RHSA-2025:1101HighCVSS 7.3

Red Hat Security Advisory: Red Hat Ansible Automation Platform Execution Environments Container Release Update

Published
February 5, 2025
Last Modified
September 4, 2026

🔗 CVE IDs covered (3)

CVE-2024-52304 →CVE-2024-56201 →CVE-2024-56326 →

📋 Description

CVE-2024-52304 — aiohttp: aiohttp vulnerable to request smuggling due to incorrect parsing of chunk extensions CVE-2024-56201 — jinja2: Jinja has a sandbox breakout through malicious filenames CVE-2024-56326 — jinja2: Jinja has a sandbox breakout through indirect reference to format method

🎯 Affected products46

  • Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel8@sha256:66b7cbf91db0428fbc412fda36816bc8ded2acfa5a2bb430da0bc2a33269f69b_s390x as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel8@sha256:79eb2ec9754de91f42d33d3cbb073c8fc506c9a007c5d7e5b85261f75ab67da7_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel8@sha256:a3fbd4b3ef2e38a4c6667165e8f4da0f5b1258d8e7829c074825d503ed9448b5_ppc64le as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel8@sha256:b6edec09ee6ecb323cee3d566bc0cd4473468386a8a1250228bdb8ddcd40f6d6_arm64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel8@sha256:f7cdc66d822e3705cd4e877bd67b5d870560d89dc18a8fb487ea05ecc6b47852_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel9@sha256:6651ed76bcfda90096fc9a8f7ce772f39794acf2d6afaac35eb2d068bb67fadc_arm64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel9@sha256:9d3e3d98bec6bb7fe4bc2608d62cc6cbc7954dd758023475d39674f33b2d57ec_s390x as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel9@sha256:b968f15363317ca9903abf1f8b2b3fe0d09e239df8c36086d7b2b3db4b426903_ppc64le as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ansible-builder-rhel9@sha256:c87a4652a10658bfc976dc6133917e3c2631dda0bff405242da9369ac826efc2_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-29-rhel8@sha256:ccac23c975c65f04ff5f8535988bd09a3309dcf4e70eaaa200e6ad5c1792bf81_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:07b126b7a7aeaa0ea2b5894989fb57345227624765fc418ee6804b8f3dc26bf7_arm64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:0bad1243aa3173df68f5378aa852eb78d172e3a86f10a70b6220f06d2f3b83aa_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:0bdc55a1bfc7c9c51babf72f72a2e71bc9a909e025c00c327d8670528a7fb749_arm64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:213acda21cd0b7f0a93d1e553a9e06daea72f097150cd915d43c74b50e901177_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:234e92da55feb451e6ba12864b7d4f498ef5754eb79da0516096b487e830d2d0_s390x as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:25d122c84894a69ebe9c1105e9276014e0e83db321883d390b5f58f9e7c1d223_s390x as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:3428aa14d66cbd537fa75ab7fef17e05bbf356ed7daaff98822e213a0a10c741_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:3cf21f8f1903b82793d7b652631fcfd07724fe2ef80a02e15ad8df9c68fa444f_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:3f5ab8458784204ae9513a9d006019c6aaadbc6b2acedb820a16d69bd8dfef57_ppc64le as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:4ce80fd9b8c37acb6b5f0c5f7e43ec9ff3ed1d284c8d523311b7b9d227470738_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:5d8c6dc65d19cb2bd60824e194e51136e6f12060bc8d663ee0ccf5c2b6c06e82_ppc64le as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:869699086677a1e3ecf02169a29e19cfa7edb79fc508d0bdee675dcda4fb23db_ppc64le as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:8e6b8501c799cf5122a064e34437f2a34b1be743c16294bb8a2902d36f1a67f4_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:906edbfd7f412de84a19b5e024dfc97f19ce502296ca2e18c82ccd65d576d08e_ppc64le as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:9188601682d277118612309666393838d8b6b1e12ca0d81344324ec416800f7d_amd64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:9e68c4aa8c1a1cf9ac289467f949055b4f8853aa1989f6955cb638b555b7c7c1_s390x as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:ac8fe647c959b57963b9323b5276adb2229a7e1476a744fe54f9d3f316092354_arm64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:ae2d1ef5fd50ffa5706f2a3d4cb5c25d23ab78ff4a1592ddf2a6f1e916c0628b_arm64 as a component of Ansible Automation Platform Execution Environments
  • ansible-automation-platform/ee-minimal-rhel8@sha256:b06b880e910f5a6648d5cb28af5c97b2181e6c0f32dc99d3740358dc01ad16a2_s390x as a component of Ansible Automation Platform Execution Environments
  • +16 more not shown

✅ Remediation

Red Hat Ansible Automation Platform Execution Environments Workaround: To mitigate this vulnerabilty restrict user-controlled template filenames, ensuring they follow a predefined templates.

🔗 References (6)