rhsa-2025:0753
Vulnerability from csaf_redhat
Published
2025-01-28 01:03
Modified
2025-08-15 17:43
Summary
Red Hat Security Advisory: Red Hat Ansible Automation Platform Execution Environments Container Release Update
Notes
Topic
An update is now available for Red Hat Ansible Automation Platform Execution Environments
Details
Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language.
Security Fix(es):
* ee-minimal-container: aiohttp vulnerable to request smuggling due to
incorrect parsing of chunk extensions (CVE-2024-52304)
* ee-minimal-container: Jinja has a sandbox breakout through malicious
filenames (CVE-2024-56201)
* ee-minimal-container: Jinja has a sandbox breakout through indirect
reference to format method (CVE-2024-56326)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update is now available for Red Hat Ansible Automation Platform Execution Environments", "title": "Topic" }, { "category": "general", "text": "Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language.\n\nSecurity Fix(es):\n* ee-minimal-container: aiohttp vulnerable to request smuggling due to\nincorrect parsing of chunk extensions (CVE-2024-52304)\n* ee-minimal-container: Jinja has a sandbox breakout through malicious\nfilenames (CVE-2024-56201)\n* ee-minimal-container: Jinja has a sandbox breakout through indirect\nreference to format method (CVE-2024-56326)", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2025:0753", "url": "https://access.redhat.com/errata/RHSA-2025:0753" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "2327130", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2327130" }, { "category": "external", "summary": "2333854", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2333854" }, { "category": "external", "summary": "2333856", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2333856" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0753.json" } ], "title": "Red Hat Security Advisory: Red Hat Ansible Automation Platform Execution Environments Container Release Update", "tracking": { "current_release_date": "2025-08-15T17:43:31+00:00", "generator": { "date": "2025-08-15T17:43:31+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.6.6" } }, "id": "RHSA-2025:0753", "initial_release_date": "2025-01-28T01:03:48+00:00", "revision_history": [ { "date": "2025-01-28T01:03:48+00:00", "number": "1", "summary": "Initial version" }, { "date": "2025-01-28T01:03:48+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-08-15T17:43:31+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Ansible Automation Platform Execution Environments", "product": { "name": "Ansible Automation Platform Execution Environments", "product_id": "8Base-ansible-automation-platform-ee", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_core:2::el8" } } }, { "category": "product_name", "name": "Ansible Automation Platform Execution Environments", "product": { "name": "Ansible Automation Platform Execution Environments", "product_id": "9Base-ansible-automation-platform-ee", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_core:2::el9" } } } ], "category": "product_family", "name": "Red Hat Ansible Automation Platform" }, { "branches": [ { "category": "product_version", "name": "ansible-automation-platform/ansible-builder-rhel8@sha256:94633e88e68654792939437c4e88124607d0ce78cc29a9b3adc4f6741dd6ad40_ppc64le", "product": { "name": "ansible-automation-platform/ansible-builder-rhel8@sha256:94633e88e68654792939437c4e88124607d0ce78cc29a9b3adc4f6741dd6ad40_ppc64le", "product_id": "ansible-automation-platform/ansible-builder-rhel8@sha256:94633e88e68654792939437c4e88124607d0ce78cc29a9b3adc4f6741dd6ad40_ppc64le", "product_identification_helper": { "purl": "pkg:oci/ansible-builder-rhel8@sha256:94633e88e68654792939437c4e88124607d0ce78cc29a9b3adc4f6741dd6ad40?arch=ppc64le\u0026repository_url=registry.redhat.io/ansible-automation-platform/ansible-builder-rhel8\u0026tag=3.0.1-114" } } }, { "category": "product_version", "name": "ansible-automation-platform/ansible-builder-rhel9@sha256:48248cdd9d621c2bf0467671eab1913738447245473a0a2f528ff4f82a731f5e_ppc64le", "product": { "name": "ansible-automation-platform/ansible-builder-rhel9@sha256:48248cdd9d621c2bf0467671eab1913738447245473a0a2f528ff4f82a731f5e_ppc64le", "product_id": "ansible-automation-platform/ansible-builder-rhel9@sha256:48248cdd9d621c2bf0467671eab1913738447245473a0a2f528ff4f82a731f5e_ppc64le", "product_identification_helper": { "purl": "pkg:oci/ansible-builder-rhel9@sha256:48248cdd9d621c2bf0467671eab1913738447245473a0a2f528ff4f82a731f5e?arch=ppc64le\u0026repository_url=registry.redhat.io/ansible-automation-platform/ansible-builder-rhel9\u0026tag=3.0.1-113" } } }, { "category": "product_version", "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:75357202064ca5c4e815863557cf2140da33bd2a801f442fb399ed3093c5d313_ppc64le", "product": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:75357202064ca5c4e815863557cf2140da33bd2a801f442fb399ed3093c5d313_ppc64le", "product_id": "ansible-automation-platform/ee-minimal-rhel8@sha256:75357202064ca5c4e815863557cf2140da33bd2a801f442fb399ed3093c5d313_ppc64le", "product_identification_helper": { "purl": "pkg:oci/ee-minimal-rhel8@sha256:75357202064ca5c4e815863557cf2140da33bd2a801f442fb399ed3093c5d313?arch=ppc64le\u0026repository_url=registry.redhat.io/ansible-automation-platform/ee-minimal-rhel8\u0026tag=2.15.13-6" } } }, { "category": "product_version", "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:a23c98abc33bb233ee267f92ae6b706b03b67e94bd95280395898400fd8ec85f_ppc64le", "product": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:a23c98abc33bb233ee267f92ae6b706b03b67e94bd95280395898400fd8ec85f_ppc64le", "product_id": "ansible-automation-platform/ee-minimal-rhel8@sha256:a23c98abc33bb233ee267f92ae6b706b03b67e94bd95280395898400fd8ec85f_ppc64le", "product_identification_helper": { "purl": "pkg:oci/ee-minimal-rhel8@sha256:a23c98abc33bb233ee267f92ae6b706b03b67e94bd95280395898400fd8ec85f?arch=ppc64le\u0026repository_url=registry.redhat.io/ansible-automation-platform/ee-minimal-rhel8\u0026tag=2.16.14-3" } } }, { "category": "product_version", "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:57ed3d64f3acf810747fe88627901aeead08bd3d892b12b7206c14fa024a1930_ppc64le", "product": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:57ed3d64f3acf810747fe88627901aeead08bd3d892b12b7206c14fa024a1930_ppc64le", "product_id": "ansible-automation-platform/ee-minimal-rhel8@sha256:57ed3d64f3acf810747fe88627901aeead08bd3d892b12b7206c14fa024a1930_ppc64le", "product_identification_helper": { "purl": "pkg:oci/ee-minimal-rhel8@sha256:57ed3d64f3acf810747fe88627901aeead08bd3d892b12b7206c14fa024a1930?arch=ppc64le\u0026repository_url=registry.redhat.io/ansible-automation-platform/ee-minimal-rhel8\u0026tag=2.18.1-3" } } }, { "category": "product_version", "name": "ansible-automation-platform/ee-minimal-rhel9@sha256:6e295d75c78943c21d120dd1d965b0a14f732a3ec9309c75471cf2bb92410922_ppc64le", "product": { "name": "ansible-automation-platform/ee-minimal-rhel9@sha256:6e295d75c78943c21d120dd1d965b0a14f732a3ec9309c75471cf2bb92410922_ppc64le", "product_id": "ansible-automation-platform/ee-minimal-rhel9@sha256:6e295d75c78943c21d120dd1d965b0a14f732a3ec9309c75471cf2bb92410922_ppc64le", "product_identification_helper": { "purl": "pkg:oci/ee-minimal-rhel9@sha256:6e295d75c78943c21d120dd1d965b0a14f732a3ec9309c75471cf2bb92410922?arch=ppc64le\u0026repository_url=registry.redhat.io/ansible-automation-platform/ee-minimal-rhel9\u0026tag=2.18.1-4" } } }, { "category": "product_version", "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:446ece6a25bcd6f2a4c2aba033938591c2617e643c4f3de33c8bdb7b8d0f514a_ppc64le", "product": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:446ece6a25bcd6f2a4c2aba033938591c2617e643c4f3de33c8bdb7b8d0f514a_ppc64le", "product_id": "ansible-automation-platform/ee-minimal-rhel8@sha256:446ece6a25bcd6f2a4c2aba033938591c2617e643c4f3de33c8bdb7b8d0f514a_ppc64le", "product_identification_helper": { "purl": "pkg:oci/ee-minimal-rhel8@sha256:446ece6a25bcd6f2a4c2aba033938591c2617e643c4f3de33c8bdb7b8d0f514a?arch=ppc64le\u0026repository_url=registry.redhat.io/ansible-automation-platform/ee-minimal-rhel8\u0026tag=2.17.7-3" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "ansible-automation-platform/ansible-builder-rhel8@sha256:81429faee24a766d27e9e53e525307f004a0a1e3565c7b343894ebc00c97be6e_amd64", "product": { "name": "ansible-automation-platform/ansible-builder-rhel8@sha256:81429faee24a766d27e9e53e525307f004a0a1e3565c7b343894ebc00c97be6e_amd64", "product_id": "ansible-automation-platform/ansible-builder-rhel8@sha256:81429faee24a766d27e9e53e525307f004a0a1e3565c7b343894ebc00c97be6e_amd64", "product_identification_helper": { "purl": "pkg:oci/ansible-builder-rhel8@sha256:81429faee24a766d27e9e53e525307f004a0a1e3565c7b343894ebc00c97be6e?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform/ansible-builder-rhel8\u0026tag=3.0.1-114" } } }, { "category": "product_version", "name": "ansible-automation-platform/ansible-builder-rhel9@sha256:45b628279885139dd3223b25bf4af3eb2eb04b83781971061a6f1a3f4027bdfc_amd64", "product": { "name": "ansible-automation-platform/ansible-builder-rhel9@sha256:45b628279885139dd3223b25bf4af3eb2eb04b83781971061a6f1a3f4027bdfc_amd64", "product_id": "ansible-automation-platform/ansible-builder-rhel9@sha256:45b628279885139dd3223b25bf4af3eb2eb04b83781971061a6f1a3f4027bdfc_amd64", "product_identification_helper": { "purl": "pkg:oci/ansible-builder-rhel9@sha256:45b628279885139dd3223b25bf4af3eb2eb04b83781971061a6f1a3f4027bdfc?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform/ansible-builder-rhel9\u0026tag=3.0.1-113" } } }, { "category": "product_version", "name": "ansible-automation-platform/ansible-builder-rhel8@sha256:6482c85063d9a9b0c004ab820864b8ee4ad539411a4201d7986ec539a9ff4065_amd64", "product": { "name": "ansible-automation-platform/ansible-builder-rhel8@sha256:6482c85063d9a9b0c004ab820864b8ee4ad539411a4201d7986ec539a9ff4065_amd64", "product_id": "ansible-automation-platform/ansible-builder-rhel8@sha256:6482c85063d9a9b0c004ab820864b8ee4ad539411a4201d7986ec539a9ff4065_amd64", "product_identification_helper": { "purl": "pkg:oci/ansible-builder-rhel8@sha256:6482c85063d9a9b0c004ab820864b8ee4ad539411a4201d7986ec539a9ff4065?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform/ansible-builder-rhel8\u0026tag=1.2.0-94" } } }, { "category": "product_version", "name": "ansible-automation-platform/ee-29-rhel8@sha256:afc0732dabb2e714ad61602ccc323dfa94fc761527d2209dd35d8acf347e1cdd_amd64", "product": { "name": "ansible-automation-platform/ee-29-rhel8@sha256:afc0732dabb2e714ad61602ccc323dfa94fc761527d2209dd35d8acf347e1cdd_amd64", "product_id": "ansible-automation-platform/ee-29-rhel8@sha256:afc0732dabb2e714ad61602ccc323dfa94fc761527d2209dd35d8acf347e1cdd_amd64", "product_identification_helper": { "purl": "pkg:oci/ee-29-rhel8@sha256:afc0732dabb2e714ad61602ccc323dfa94fc761527d2209dd35d8acf347e1cdd?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform/ee-29-rhel8\u0026tag=2.9.27-35" } } }, { "category": "product_version", "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:0cf19f239c3ac9697d64e522ba35b0b509543179f2ba68c363281bcd3d6df8e2_amd64", "product": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:0cf19f239c3ac9697d64e522ba35b0b509543179f2ba68c363281bcd3d6df8e2_amd64", "product_id": "ansible-automation-platform/ee-minimal-rhel8@sha256:0cf19f239c3ac9697d64e522ba35b0b509543179f2ba68c363281bcd3d6df8e2_amd64", "product_identification_helper": { "purl": "pkg:oci/ee-minimal-rhel8@sha256:0cf19f239c3ac9697d64e522ba35b0b509543179f2ba68c363281bcd3d6df8e2?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform/ee-minimal-rhel8\u0026tag=2.13.10-37" } } }, { "category": "product_version", "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:ff3261d84f5062ad13fc080ee9b53991d4e64cec28c2810f78ae5d85fecb80db_amd64", "product": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:ff3261d84f5062ad13fc080ee9b53991d4e64cec28c2810f78ae5d85fecb80db_amd64", "product_id": "ansible-automation-platform/ee-minimal-rhel8@sha256:ff3261d84f5062ad13fc080ee9b53991d4e64cec28c2810f78ae5d85fecb80db_amd64", "product_identification_helper": { "purl": "pkg:oci/ee-minimal-rhel8@sha256:ff3261d84f5062ad13fc080ee9b53991d4e64cec28c2810f78ae5d85fecb80db?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform/ee-minimal-rhel8\u0026tag=2.15.13-6" } } }, { "category": "product_version", "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:1581e584e3ff8fa919eecdcd5c9517426a14061fe268c8ba6c277ac5e4cd6486_amd64", "product": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:1581e584e3ff8fa919eecdcd5c9517426a14061fe268c8ba6c277ac5e4cd6486_amd64", "product_id": "ansible-automation-platform/ee-minimal-rhel8@sha256:1581e584e3ff8fa919eecdcd5c9517426a14061fe268c8ba6c277ac5e4cd6486_amd64", "product_identification_helper": { "purl": "pkg:oci/ee-minimal-rhel8@sha256:1581e584e3ff8fa919eecdcd5c9517426a14061fe268c8ba6c277ac5e4cd6486?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform/ee-minimal-rhel8\u0026tag=2.16.14-3" } } }, { "category": "product_version", "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:0cec10d9a6e61ee12691ad1f441947b2019c29db163c2f3872851ebb6ef32cc2_amd64", "product": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:0cec10d9a6e61ee12691ad1f441947b2019c29db163c2f3872851ebb6ef32cc2_amd64", "product_id": "ansible-automation-platform/ee-minimal-rhel8@sha256:0cec10d9a6e61ee12691ad1f441947b2019c29db163c2f3872851ebb6ef32cc2_amd64", "product_identification_helper": { "purl": "pkg:oci/ee-minimal-rhel8@sha256:0cec10d9a6e61ee12691ad1f441947b2019c29db163c2f3872851ebb6ef32cc2?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform/ee-minimal-rhel8\u0026tag=2.14.13-24" } } }, { "category": "product_version", "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:c1d6fe4ed7afe9d13fa292615585f044e412a81311537ef6c7465f9d2e7e19c6_amd64", "product": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:c1d6fe4ed7afe9d13fa292615585f044e412a81311537ef6c7465f9d2e7e19c6_amd64", "product_id": "ansible-automation-platform/ee-minimal-rhel8@sha256:c1d6fe4ed7afe9d13fa292615585f044e412a81311537ef6c7465f9d2e7e19c6_amd64", "product_identification_helper": { "purl": "pkg:oci/ee-minimal-rhel8@sha256:c1d6fe4ed7afe9d13fa292615585f044e412a81311537ef6c7465f9d2e7e19c6?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform/ee-minimal-rhel8\u0026tag=2.18.1-3" } } }, { "category": "product_version", "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:66a83c19cee27a007f0a1c9e9a82d669ba3f97f0dcce2308a0ce32d3e1cd3a7f_amd64", "product": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:66a83c19cee27a007f0a1c9e9a82d669ba3f97f0dcce2308a0ce32d3e1cd3a7f_amd64", "product_id": "ansible-automation-platform/ee-minimal-rhel8@sha256:66a83c19cee27a007f0a1c9e9a82d669ba3f97f0dcce2308a0ce32d3e1cd3a7f_amd64", "product_identification_helper": { "purl": "pkg:oci/ee-minimal-rhel8@sha256:66a83c19cee27a007f0a1c9e9a82d669ba3f97f0dcce2308a0ce32d3e1cd3a7f?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform/ee-minimal-rhel8\u0026tag=2.12.10-57" } } }, { "category": "product_version", "name": "ansible-automation-platform/ee-minimal-rhel9@sha256:db6a3af8b9768035d9c2733d2a6a2f48ac67ce570e5533f446c6be73a7a6c296_amd64", "product": { "name": "ansible-automation-platform/ee-minimal-rhel9@sha256:db6a3af8b9768035d9c2733d2a6a2f48ac67ce570e5533f446c6be73a7a6c296_amd64", "product_id": "ansible-automation-platform/ee-minimal-rhel9@sha256:db6a3af8b9768035d9c2733d2a6a2f48ac67ce570e5533f446c6be73a7a6c296_amd64", "product_identification_helper": { "purl": "pkg:oci/ee-minimal-rhel9@sha256:db6a3af8b9768035d9c2733d2a6a2f48ac67ce570e5533f446c6be73a7a6c296?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform/ee-minimal-rhel9\u0026tag=2.18.1-4" } } }, { "category": "product_version", "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:6f25526b662c522db6b886ce896a4fa1fc3f3cb27c8857a15c26b91a444257b9_amd64", "product": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:6f25526b662c522db6b886ce896a4fa1fc3f3cb27c8857a15c26b91a444257b9_amd64", "product_id": "ansible-automation-platform/ee-minimal-rhel8@sha256:6f25526b662c522db6b886ce896a4fa1fc3f3cb27c8857a15c26b91a444257b9_amd64", "product_identification_helper": { "purl": "pkg:oci/ee-minimal-rhel8@sha256:6f25526b662c522db6b886ce896a4fa1fc3f3cb27c8857a15c26b91a444257b9?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform/ee-minimal-rhel8\u0026tag=2.17.7-3" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "ansible-automation-platform/ansible-builder-rhel8@sha256:f5487d83e07fbfede2d9724cea2fa1947aaf9207f2b80ed2091ea63677a1a37b_s390x", "product": { "name": "ansible-automation-platform/ansible-builder-rhel8@sha256:f5487d83e07fbfede2d9724cea2fa1947aaf9207f2b80ed2091ea63677a1a37b_s390x", "product_id": "ansible-automation-platform/ansible-builder-rhel8@sha256:f5487d83e07fbfede2d9724cea2fa1947aaf9207f2b80ed2091ea63677a1a37b_s390x", "product_identification_helper": { "purl": "pkg:oci/ansible-builder-rhel8@sha256:f5487d83e07fbfede2d9724cea2fa1947aaf9207f2b80ed2091ea63677a1a37b?arch=s390x\u0026repository_url=registry.redhat.io/ansible-automation-platform/ansible-builder-rhel8\u0026tag=3.0.1-114" } } }, { "category": "product_version", "name": "ansible-automation-platform/ansible-builder-rhel9@sha256:79806e62bfc3e9b60cd380d70b66ee1fa52f8066f0d21a981361f5ec45ecc036_s390x", "product": { "name": "ansible-automation-platform/ansible-builder-rhel9@sha256:79806e62bfc3e9b60cd380d70b66ee1fa52f8066f0d21a981361f5ec45ecc036_s390x", "product_id": "ansible-automation-platform/ansible-builder-rhel9@sha256:79806e62bfc3e9b60cd380d70b66ee1fa52f8066f0d21a981361f5ec45ecc036_s390x", "product_identification_helper": { "purl": "pkg:oci/ansible-builder-rhel9@sha256:79806e62bfc3e9b60cd380d70b66ee1fa52f8066f0d21a981361f5ec45ecc036?arch=s390x\u0026repository_url=registry.redhat.io/ansible-automation-platform/ansible-builder-rhel9\u0026tag=3.0.1-113" } } }, { "category": "product_version", "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:aaa47e2dd1c71c0d36a4331fc0078a5067ef2cd93bda1902d3863a341e2e6074_s390x", "product": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:aaa47e2dd1c71c0d36a4331fc0078a5067ef2cd93bda1902d3863a341e2e6074_s390x", "product_id": "ansible-automation-platform/ee-minimal-rhel8@sha256:aaa47e2dd1c71c0d36a4331fc0078a5067ef2cd93bda1902d3863a341e2e6074_s390x", "product_identification_helper": { "purl": "pkg:oci/ee-minimal-rhel8@sha256:aaa47e2dd1c71c0d36a4331fc0078a5067ef2cd93bda1902d3863a341e2e6074?arch=s390x\u0026repository_url=registry.redhat.io/ansible-automation-platform/ee-minimal-rhel8\u0026tag=2.15.13-6" } } }, { "category": "product_version", "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:f1e7001759d5f70cd598b59a4a5f2e0786e3dfdd63e1ff70cb382a73b5182dfd_s390x", "product": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:f1e7001759d5f70cd598b59a4a5f2e0786e3dfdd63e1ff70cb382a73b5182dfd_s390x", "product_id": "ansible-automation-platform/ee-minimal-rhel8@sha256:f1e7001759d5f70cd598b59a4a5f2e0786e3dfdd63e1ff70cb382a73b5182dfd_s390x", "product_identification_helper": { "purl": "pkg:oci/ee-minimal-rhel8@sha256:f1e7001759d5f70cd598b59a4a5f2e0786e3dfdd63e1ff70cb382a73b5182dfd?arch=s390x\u0026repository_url=registry.redhat.io/ansible-automation-platform/ee-minimal-rhel8\u0026tag=2.16.14-3" } } }, { "category": "product_version", "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:5d32871a9c5fd57bf54cbadb5ffc882d9c158b40cbd8c3a596e7a0d668643167_s390x", "product": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:5d32871a9c5fd57bf54cbadb5ffc882d9c158b40cbd8c3a596e7a0d668643167_s390x", "product_id": "ansible-automation-platform/ee-minimal-rhel8@sha256:5d32871a9c5fd57bf54cbadb5ffc882d9c158b40cbd8c3a596e7a0d668643167_s390x", "product_identification_helper": { "purl": "pkg:oci/ee-minimal-rhel8@sha256:5d32871a9c5fd57bf54cbadb5ffc882d9c158b40cbd8c3a596e7a0d668643167?arch=s390x\u0026repository_url=registry.redhat.io/ansible-automation-platform/ee-minimal-rhel8\u0026tag=2.18.1-3" } } }, { "category": "product_version", "name": "ansible-automation-platform/ee-minimal-rhel9@sha256:4db03217fe090a2ad774fab7250a1eadd5a075d01ca731f75074339ec18b4c9c_s390x", "product": { "name": "ansible-automation-platform/ee-minimal-rhel9@sha256:4db03217fe090a2ad774fab7250a1eadd5a075d01ca731f75074339ec18b4c9c_s390x", "product_id": "ansible-automation-platform/ee-minimal-rhel9@sha256:4db03217fe090a2ad774fab7250a1eadd5a075d01ca731f75074339ec18b4c9c_s390x", "product_identification_helper": { "purl": "pkg:oci/ee-minimal-rhel9@sha256:4db03217fe090a2ad774fab7250a1eadd5a075d01ca731f75074339ec18b4c9c?arch=s390x\u0026repository_url=registry.redhat.io/ansible-automation-platform/ee-minimal-rhel9\u0026tag=2.18.1-4" } } }, { "category": "product_version", "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:ac62c6296c182e61c77f571728c094d35eb11e37bc2133a5984d04c8ffd2830d_s390x", "product": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:ac62c6296c182e61c77f571728c094d35eb11e37bc2133a5984d04c8ffd2830d_s390x", "product_id": "ansible-automation-platform/ee-minimal-rhel8@sha256:ac62c6296c182e61c77f571728c094d35eb11e37bc2133a5984d04c8ffd2830d_s390x", "product_identification_helper": { "purl": "pkg:oci/ee-minimal-rhel8@sha256:ac62c6296c182e61c77f571728c094d35eb11e37bc2133a5984d04c8ffd2830d?arch=s390x\u0026repository_url=registry.redhat.io/ansible-automation-platform/ee-minimal-rhel8\u0026tag=2.17.7-3" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "ansible-automation-platform/ansible-builder-rhel8@sha256:9e237d9484aafa8663cc8df9b762e4f720a4bd4702035a9a2c7f52761be03c89_arm64", "product": { "name": "ansible-automation-platform/ansible-builder-rhel8@sha256:9e237d9484aafa8663cc8df9b762e4f720a4bd4702035a9a2c7f52761be03c89_arm64", "product_id": "ansible-automation-platform/ansible-builder-rhel8@sha256:9e237d9484aafa8663cc8df9b762e4f720a4bd4702035a9a2c7f52761be03c89_arm64", "product_identification_helper": { "purl": "pkg:oci/ansible-builder-rhel8@sha256:9e237d9484aafa8663cc8df9b762e4f720a4bd4702035a9a2c7f52761be03c89?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform/ansible-builder-rhel8\u0026tag=3.0.1-114" } } }, { "category": "product_version", "name": "ansible-automation-platform/ansible-builder-rhel9@sha256:fc899a2b4bf476f60dd52a7b8e4ff4c60d48795b32bba14adae38205641537fb_arm64", "product": { "name": "ansible-automation-platform/ansible-builder-rhel9@sha256:fc899a2b4bf476f60dd52a7b8e4ff4c60d48795b32bba14adae38205641537fb_arm64", "product_id": "ansible-automation-platform/ansible-builder-rhel9@sha256:fc899a2b4bf476f60dd52a7b8e4ff4c60d48795b32bba14adae38205641537fb_arm64", "product_identification_helper": { "purl": "pkg:oci/ansible-builder-rhel9@sha256:fc899a2b4bf476f60dd52a7b8e4ff4c60d48795b32bba14adae38205641537fb?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform/ansible-builder-rhel9\u0026tag=3.0.1-113" } } }, { "category": "product_version", "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:d8aa73f286779b3b4c49f0ce745f973b09bce51d1338420587515b91deabd5a7_arm64", "product": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:d8aa73f286779b3b4c49f0ce745f973b09bce51d1338420587515b91deabd5a7_arm64", "product_id": "ansible-automation-platform/ee-minimal-rhel8@sha256:d8aa73f286779b3b4c49f0ce745f973b09bce51d1338420587515b91deabd5a7_arm64", "product_identification_helper": { "purl": "pkg:oci/ee-minimal-rhel8@sha256:d8aa73f286779b3b4c49f0ce745f973b09bce51d1338420587515b91deabd5a7?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform/ee-minimal-rhel8\u0026tag=2.15.13-6" } } }, { "category": "product_version", "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:2e82c21518bcc5a825c0a84a97eb49745e752073097739f0425d45dbfd432eb1_arm64", "product": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:2e82c21518bcc5a825c0a84a97eb49745e752073097739f0425d45dbfd432eb1_arm64", "product_id": "ansible-automation-platform/ee-minimal-rhel8@sha256:2e82c21518bcc5a825c0a84a97eb49745e752073097739f0425d45dbfd432eb1_arm64", "product_identification_helper": { "purl": "pkg:oci/ee-minimal-rhel8@sha256:2e82c21518bcc5a825c0a84a97eb49745e752073097739f0425d45dbfd432eb1?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform/ee-minimal-rhel8\u0026tag=2.16.14-3" } } }, { "category": "product_version", "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:945c55597448f92bd7b46df53b3907f2835132b25d1d932edcd7c63f7b6e75d9_arm64", "product": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:945c55597448f92bd7b46df53b3907f2835132b25d1d932edcd7c63f7b6e75d9_arm64", "product_id": "ansible-automation-platform/ee-minimal-rhel8@sha256:945c55597448f92bd7b46df53b3907f2835132b25d1d932edcd7c63f7b6e75d9_arm64", "product_identification_helper": { "purl": "pkg:oci/ee-minimal-rhel8@sha256:945c55597448f92bd7b46df53b3907f2835132b25d1d932edcd7c63f7b6e75d9?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform/ee-minimal-rhel8\u0026tag=2.18.1-3" } } }, { "category": "product_version", "name": "ansible-automation-platform/ee-minimal-rhel9@sha256:032b5590181bf1e67df6d12c0af3856a2fc0fd79091f93f80e7b63653a91297c_arm64", "product": { "name": "ansible-automation-platform/ee-minimal-rhel9@sha256:032b5590181bf1e67df6d12c0af3856a2fc0fd79091f93f80e7b63653a91297c_arm64", "product_id": "ansible-automation-platform/ee-minimal-rhel9@sha256:032b5590181bf1e67df6d12c0af3856a2fc0fd79091f93f80e7b63653a91297c_arm64", "product_identification_helper": { "purl": "pkg:oci/ee-minimal-rhel9@sha256:032b5590181bf1e67df6d12c0af3856a2fc0fd79091f93f80e7b63653a91297c?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform/ee-minimal-rhel9\u0026tag=2.18.1-4" } } }, { "category": "product_version", "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:c407acff07bde1e61e0990cac320609fb81f97d96b7d1f7780683129a117ccea_arm64", "product": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:c407acff07bde1e61e0990cac320609fb81f97d96b7d1f7780683129a117ccea_arm64", "product_id": "ansible-automation-platform/ee-minimal-rhel8@sha256:c407acff07bde1e61e0990cac320609fb81f97d96b7d1f7780683129a117ccea_arm64", "product_identification_helper": { "purl": "pkg:oci/ee-minimal-rhel8@sha256:c407acff07bde1e61e0990cac320609fb81f97d96b7d1f7780683129a117ccea?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform/ee-minimal-rhel8\u0026tag=2.17.7-3" } } } ], "category": "architecture", "name": "arm64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform/ansible-builder-rhel8@sha256:6482c85063d9a9b0c004ab820864b8ee4ad539411a4201d7986ec539a9ff4065_amd64 as a component of Ansible Automation Platform Execution Environments", "product_id": "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:6482c85063d9a9b0c004ab820864b8ee4ad539411a4201d7986ec539a9ff4065_amd64" }, "product_reference": "ansible-automation-platform/ansible-builder-rhel8@sha256:6482c85063d9a9b0c004ab820864b8ee4ad539411a4201d7986ec539a9ff4065_amd64", "relates_to_product_reference": "8Base-ansible-automation-platform-ee" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform/ansible-builder-rhel8@sha256:81429faee24a766d27e9e53e525307f004a0a1e3565c7b343894ebc00c97be6e_amd64 as a component of Ansible Automation Platform Execution Environments", "product_id": "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:81429faee24a766d27e9e53e525307f004a0a1e3565c7b343894ebc00c97be6e_amd64" }, "product_reference": "ansible-automation-platform/ansible-builder-rhel8@sha256:81429faee24a766d27e9e53e525307f004a0a1e3565c7b343894ebc00c97be6e_amd64", "relates_to_product_reference": "8Base-ansible-automation-platform-ee" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform/ansible-builder-rhel8@sha256:94633e88e68654792939437c4e88124607d0ce78cc29a9b3adc4f6741dd6ad40_ppc64le as a component of Ansible Automation Platform Execution Environments", "product_id": "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:94633e88e68654792939437c4e88124607d0ce78cc29a9b3adc4f6741dd6ad40_ppc64le" }, "product_reference": "ansible-automation-platform/ansible-builder-rhel8@sha256:94633e88e68654792939437c4e88124607d0ce78cc29a9b3adc4f6741dd6ad40_ppc64le", "relates_to_product_reference": "8Base-ansible-automation-platform-ee" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform/ansible-builder-rhel8@sha256:9e237d9484aafa8663cc8df9b762e4f720a4bd4702035a9a2c7f52761be03c89_arm64 as a component of Ansible Automation Platform Execution Environments", "product_id": "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:9e237d9484aafa8663cc8df9b762e4f720a4bd4702035a9a2c7f52761be03c89_arm64" }, "product_reference": "ansible-automation-platform/ansible-builder-rhel8@sha256:9e237d9484aafa8663cc8df9b762e4f720a4bd4702035a9a2c7f52761be03c89_arm64", "relates_to_product_reference": "8Base-ansible-automation-platform-ee" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform/ansible-builder-rhel8@sha256:f5487d83e07fbfede2d9724cea2fa1947aaf9207f2b80ed2091ea63677a1a37b_s390x as a component of Ansible Automation Platform Execution Environments", "product_id": "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:f5487d83e07fbfede2d9724cea2fa1947aaf9207f2b80ed2091ea63677a1a37b_s390x" }, "product_reference": "ansible-automation-platform/ansible-builder-rhel8@sha256:f5487d83e07fbfede2d9724cea2fa1947aaf9207f2b80ed2091ea63677a1a37b_s390x", "relates_to_product_reference": "8Base-ansible-automation-platform-ee" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform/ee-29-rhel8@sha256:afc0732dabb2e714ad61602ccc323dfa94fc761527d2209dd35d8acf347e1cdd_amd64 as a component of Ansible Automation Platform Execution Environments", "product_id": "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-29-rhel8@sha256:afc0732dabb2e714ad61602ccc323dfa94fc761527d2209dd35d8acf347e1cdd_amd64" }, "product_reference": "ansible-automation-platform/ee-29-rhel8@sha256:afc0732dabb2e714ad61602ccc323dfa94fc761527d2209dd35d8acf347e1cdd_amd64", "relates_to_product_reference": "8Base-ansible-automation-platform-ee" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:0cec10d9a6e61ee12691ad1f441947b2019c29db163c2f3872851ebb6ef32cc2_amd64 as a component of Ansible Automation Platform Execution Environments", "product_id": "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:0cec10d9a6e61ee12691ad1f441947b2019c29db163c2f3872851ebb6ef32cc2_amd64" }, "product_reference": "ansible-automation-platform/ee-minimal-rhel8@sha256:0cec10d9a6e61ee12691ad1f441947b2019c29db163c2f3872851ebb6ef32cc2_amd64", "relates_to_product_reference": "8Base-ansible-automation-platform-ee" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:0cf19f239c3ac9697d64e522ba35b0b509543179f2ba68c363281bcd3d6df8e2_amd64 as a component of Ansible Automation Platform Execution Environments", "product_id": "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:0cf19f239c3ac9697d64e522ba35b0b509543179f2ba68c363281bcd3d6df8e2_amd64" }, "product_reference": "ansible-automation-platform/ee-minimal-rhel8@sha256:0cf19f239c3ac9697d64e522ba35b0b509543179f2ba68c363281bcd3d6df8e2_amd64", "relates_to_product_reference": "8Base-ansible-automation-platform-ee" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:1581e584e3ff8fa919eecdcd5c9517426a14061fe268c8ba6c277ac5e4cd6486_amd64 as a component of Ansible Automation Platform Execution Environments", "product_id": "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:1581e584e3ff8fa919eecdcd5c9517426a14061fe268c8ba6c277ac5e4cd6486_amd64" }, "product_reference": "ansible-automation-platform/ee-minimal-rhel8@sha256:1581e584e3ff8fa919eecdcd5c9517426a14061fe268c8ba6c277ac5e4cd6486_amd64", "relates_to_product_reference": "8Base-ansible-automation-platform-ee" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:2e82c21518bcc5a825c0a84a97eb49745e752073097739f0425d45dbfd432eb1_arm64 as a component of Ansible Automation Platform Execution Environments", "product_id": "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:2e82c21518bcc5a825c0a84a97eb49745e752073097739f0425d45dbfd432eb1_arm64" }, "product_reference": "ansible-automation-platform/ee-minimal-rhel8@sha256:2e82c21518bcc5a825c0a84a97eb49745e752073097739f0425d45dbfd432eb1_arm64", "relates_to_product_reference": "8Base-ansible-automation-platform-ee" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:446ece6a25bcd6f2a4c2aba033938591c2617e643c4f3de33c8bdb7b8d0f514a_ppc64le as a component of Ansible Automation Platform Execution Environments", "product_id": "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:446ece6a25bcd6f2a4c2aba033938591c2617e643c4f3de33c8bdb7b8d0f514a_ppc64le" }, "product_reference": "ansible-automation-platform/ee-minimal-rhel8@sha256:446ece6a25bcd6f2a4c2aba033938591c2617e643c4f3de33c8bdb7b8d0f514a_ppc64le", "relates_to_product_reference": "8Base-ansible-automation-platform-ee" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:57ed3d64f3acf810747fe88627901aeead08bd3d892b12b7206c14fa024a1930_ppc64le as a component of Ansible Automation Platform Execution Environments", "product_id": "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:57ed3d64f3acf810747fe88627901aeead08bd3d892b12b7206c14fa024a1930_ppc64le" }, "product_reference": "ansible-automation-platform/ee-minimal-rhel8@sha256:57ed3d64f3acf810747fe88627901aeead08bd3d892b12b7206c14fa024a1930_ppc64le", "relates_to_product_reference": "8Base-ansible-automation-platform-ee" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:5d32871a9c5fd57bf54cbadb5ffc882d9c158b40cbd8c3a596e7a0d668643167_s390x as a component of Ansible Automation Platform Execution Environments", "product_id": "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:5d32871a9c5fd57bf54cbadb5ffc882d9c158b40cbd8c3a596e7a0d668643167_s390x" }, "product_reference": "ansible-automation-platform/ee-minimal-rhel8@sha256:5d32871a9c5fd57bf54cbadb5ffc882d9c158b40cbd8c3a596e7a0d668643167_s390x", "relates_to_product_reference": "8Base-ansible-automation-platform-ee" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:66a83c19cee27a007f0a1c9e9a82d669ba3f97f0dcce2308a0ce32d3e1cd3a7f_amd64 as a component of Ansible Automation Platform Execution Environments", "product_id": "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:66a83c19cee27a007f0a1c9e9a82d669ba3f97f0dcce2308a0ce32d3e1cd3a7f_amd64" }, "product_reference": "ansible-automation-platform/ee-minimal-rhel8@sha256:66a83c19cee27a007f0a1c9e9a82d669ba3f97f0dcce2308a0ce32d3e1cd3a7f_amd64", "relates_to_product_reference": "8Base-ansible-automation-platform-ee" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:6f25526b662c522db6b886ce896a4fa1fc3f3cb27c8857a15c26b91a444257b9_amd64 as a component of Ansible Automation Platform Execution Environments", "product_id": "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:6f25526b662c522db6b886ce896a4fa1fc3f3cb27c8857a15c26b91a444257b9_amd64" }, "product_reference": "ansible-automation-platform/ee-minimal-rhel8@sha256:6f25526b662c522db6b886ce896a4fa1fc3f3cb27c8857a15c26b91a444257b9_amd64", "relates_to_product_reference": "8Base-ansible-automation-platform-ee" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:75357202064ca5c4e815863557cf2140da33bd2a801f442fb399ed3093c5d313_ppc64le as a component of Ansible Automation Platform Execution Environments", "product_id": "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:75357202064ca5c4e815863557cf2140da33bd2a801f442fb399ed3093c5d313_ppc64le" }, "product_reference": "ansible-automation-platform/ee-minimal-rhel8@sha256:75357202064ca5c4e815863557cf2140da33bd2a801f442fb399ed3093c5d313_ppc64le", "relates_to_product_reference": "8Base-ansible-automation-platform-ee" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:945c55597448f92bd7b46df53b3907f2835132b25d1d932edcd7c63f7b6e75d9_arm64 as a component of Ansible Automation Platform Execution Environments", "product_id": "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:945c55597448f92bd7b46df53b3907f2835132b25d1d932edcd7c63f7b6e75d9_arm64" }, "product_reference": "ansible-automation-platform/ee-minimal-rhel8@sha256:945c55597448f92bd7b46df53b3907f2835132b25d1d932edcd7c63f7b6e75d9_arm64", "relates_to_product_reference": "8Base-ansible-automation-platform-ee" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:a23c98abc33bb233ee267f92ae6b706b03b67e94bd95280395898400fd8ec85f_ppc64le as a component of Ansible Automation Platform Execution Environments", "product_id": "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:a23c98abc33bb233ee267f92ae6b706b03b67e94bd95280395898400fd8ec85f_ppc64le" }, "product_reference": "ansible-automation-platform/ee-minimal-rhel8@sha256:a23c98abc33bb233ee267f92ae6b706b03b67e94bd95280395898400fd8ec85f_ppc64le", "relates_to_product_reference": "8Base-ansible-automation-platform-ee" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:aaa47e2dd1c71c0d36a4331fc0078a5067ef2cd93bda1902d3863a341e2e6074_s390x as a component of Ansible Automation Platform Execution Environments", "product_id": "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:aaa47e2dd1c71c0d36a4331fc0078a5067ef2cd93bda1902d3863a341e2e6074_s390x" }, "product_reference": "ansible-automation-platform/ee-minimal-rhel8@sha256:aaa47e2dd1c71c0d36a4331fc0078a5067ef2cd93bda1902d3863a341e2e6074_s390x", "relates_to_product_reference": "8Base-ansible-automation-platform-ee" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:ac62c6296c182e61c77f571728c094d35eb11e37bc2133a5984d04c8ffd2830d_s390x as a component of Ansible Automation Platform Execution Environments", "product_id": "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:ac62c6296c182e61c77f571728c094d35eb11e37bc2133a5984d04c8ffd2830d_s390x" }, "product_reference": "ansible-automation-platform/ee-minimal-rhel8@sha256:ac62c6296c182e61c77f571728c094d35eb11e37bc2133a5984d04c8ffd2830d_s390x", "relates_to_product_reference": "8Base-ansible-automation-platform-ee" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:c1d6fe4ed7afe9d13fa292615585f044e412a81311537ef6c7465f9d2e7e19c6_amd64 as a component of Ansible Automation Platform Execution Environments", "product_id": "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:c1d6fe4ed7afe9d13fa292615585f044e412a81311537ef6c7465f9d2e7e19c6_amd64" }, "product_reference": "ansible-automation-platform/ee-minimal-rhel8@sha256:c1d6fe4ed7afe9d13fa292615585f044e412a81311537ef6c7465f9d2e7e19c6_amd64", "relates_to_product_reference": "8Base-ansible-automation-platform-ee" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:c407acff07bde1e61e0990cac320609fb81f97d96b7d1f7780683129a117ccea_arm64 as a component of Ansible Automation Platform Execution Environments", "product_id": "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:c407acff07bde1e61e0990cac320609fb81f97d96b7d1f7780683129a117ccea_arm64" }, "product_reference": "ansible-automation-platform/ee-minimal-rhel8@sha256:c407acff07bde1e61e0990cac320609fb81f97d96b7d1f7780683129a117ccea_arm64", "relates_to_product_reference": "8Base-ansible-automation-platform-ee" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:d8aa73f286779b3b4c49f0ce745f973b09bce51d1338420587515b91deabd5a7_arm64 as a component of Ansible Automation Platform Execution Environments", "product_id": "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:d8aa73f286779b3b4c49f0ce745f973b09bce51d1338420587515b91deabd5a7_arm64" }, "product_reference": "ansible-automation-platform/ee-minimal-rhel8@sha256:d8aa73f286779b3b4c49f0ce745f973b09bce51d1338420587515b91deabd5a7_arm64", "relates_to_product_reference": "8Base-ansible-automation-platform-ee" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:f1e7001759d5f70cd598b59a4a5f2e0786e3dfdd63e1ff70cb382a73b5182dfd_s390x as a component of Ansible Automation Platform Execution Environments", "product_id": "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:f1e7001759d5f70cd598b59a4a5f2e0786e3dfdd63e1ff70cb382a73b5182dfd_s390x" }, "product_reference": "ansible-automation-platform/ee-minimal-rhel8@sha256:f1e7001759d5f70cd598b59a4a5f2e0786e3dfdd63e1ff70cb382a73b5182dfd_s390x", "relates_to_product_reference": "8Base-ansible-automation-platform-ee" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform/ee-minimal-rhel8@sha256:ff3261d84f5062ad13fc080ee9b53991d4e64cec28c2810f78ae5d85fecb80db_amd64 as a component of Ansible Automation Platform Execution Environments", "product_id": "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:ff3261d84f5062ad13fc080ee9b53991d4e64cec28c2810f78ae5d85fecb80db_amd64" }, "product_reference": "ansible-automation-platform/ee-minimal-rhel8@sha256:ff3261d84f5062ad13fc080ee9b53991d4e64cec28c2810f78ae5d85fecb80db_amd64", "relates_to_product_reference": "8Base-ansible-automation-platform-ee" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform/ansible-builder-rhel9@sha256:45b628279885139dd3223b25bf4af3eb2eb04b83781971061a6f1a3f4027bdfc_amd64 as a component of Ansible Automation Platform Execution Environments", "product_id": "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:45b628279885139dd3223b25bf4af3eb2eb04b83781971061a6f1a3f4027bdfc_amd64" }, "product_reference": "ansible-automation-platform/ansible-builder-rhel9@sha256:45b628279885139dd3223b25bf4af3eb2eb04b83781971061a6f1a3f4027bdfc_amd64", "relates_to_product_reference": "9Base-ansible-automation-platform-ee" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform/ansible-builder-rhel9@sha256:48248cdd9d621c2bf0467671eab1913738447245473a0a2f528ff4f82a731f5e_ppc64le as a component of Ansible Automation Platform Execution Environments", "product_id": "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:48248cdd9d621c2bf0467671eab1913738447245473a0a2f528ff4f82a731f5e_ppc64le" }, "product_reference": "ansible-automation-platform/ansible-builder-rhel9@sha256:48248cdd9d621c2bf0467671eab1913738447245473a0a2f528ff4f82a731f5e_ppc64le", "relates_to_product_reference": "9Base-ansible-automation-platform-ee" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform/ansible-builder-rhel9@sha256:79806e62bfc3e9b60cd380d70b66ee1fa52f8066f0d21a981361f5ec45ecc036_s390x as a component of Ansible Automation Platform Execution Environments", "product_id": "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:79806e62bfc3e9b60cd380d70b66ee1fa52f8066f0d21a981361f5ec45ecc036_s390x" }, "product_reference": "ansible-automation-platform/ansible-builder-rhel9@sha256:79806e62bfc3e9b60cd380d70b66ee1fa52f8066f0d21a981361f5ec45ecc036_s390x", "relates_to_product_reference": "9Base-ansible-automation-platform-ee" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform/ansible-builder-rhel9@sha256:fc899a2b4bf476f60dd52a7b8e4ff4c60d48795b32bba14adae38205641537fb_arm64 as a component of Ansible Automation Platform Execution Environments", "product_id": "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:fc899a2b4bf476f60dd52a7b8e4ff4c60d48795b32bba14adae38205641537fb_arm64" }, "product_reference": "ansible-automation-platform/ansible-builder-rhel9@sha256:fc899a2b4bf476f60dd52a7b8e4ff4c60d48795b32bba14adae38205641537fb_arm64", "relates_to_product_reference": "9Base-ansible-automation-platform-ee" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform/ee-minimal-rhel9@sha256:032b5590181bf1e67df6d12c0af3856a2fc0fd79091f93f80e7b63653a91297c_arm64 as a component of Ansible Automation Platform Execution Environments", "product_id": "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:032b5590181bf1e67df6d12c0af3856a2fc0fd79091f93f80e7b63653a91297c_arm64" }, "product_reference": "ansible-automation-platform/ee-minimal-rhel9@sha256:032b5590181bf1e67df6d12c0af3856a2fc0fd79091f93f80e7b63653a91297c_arm64", "relates_to_product_reference": "9Base-ansible-automation-platform-ee" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform/ee-minimal-rhel9@sha256:4db03217fe090a2ad774fab7250a1eadd5a075d01ca731f75074339ec18b4c9c_s390x as a component of Ansible Automation Platform Execution Environments", "product_id": "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:4db03217fe090a2ad774fab7250a1eadd5a075d01ca731f75074339ec18b4c9c_s390x" }, "product_reference": "ansible-automation-platform/ee-minimal-rhel9@sha256:4db03217fe090a2ad774fab7250a1eadd5a075d01ca731f75074339ec18b4c9c_s390x", "relates_to_product_reference": "9Base-ansible-automation-platform-ee" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform/ee-minimal-rhel9@sha256:6e295d75c78943c21d120dd1d965b0a14f732a3ec9309c75471cf2bb92410922_ppc64le as a component of Ansible Automation Platform Execution Environments", "product_id": "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:6e295d75c78943c21d120dd1d965b0a14f732a3ec9309c75471cf2bb92410922_ppc64le" }, "product_reference": "ansible-automation-platform/ee-minimal-rhel9@sha256:6e295d75c78943c21d120dd1d965b0a14f732a3ec9309c75471cf2bb92410922_ppc64le", "relates_to_product_reference": "9Base-ansible-automation-platform-ee" }, { "category": "default_component_of", "full_product_name": { "name": "ansible-automation-platform/ee-minimal-rhel9@sha256:db6a3af8b9768035d9c2733d2a6a2f48ac67ce570e5533f446c6be73a7a6c296_amd64 as a component of Ansible Automation Platform Execution Environments", "product_id": "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:db6a3af8b9768035d9c2733d2a6a2f48ac67ce570e5533f446c6be73a7a6c296_amd64" }, "product_reference": "ansible-automation-platform/ee-minimal-rhel9@sha256:db6a3af8b9768035d9c2733d2a6a2f48ac67ce570e5533f446c6be73a7a6c296_amd64", "relates_to_product_reference": "9Base-ansible-automation-platform-ee" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-52304", "cwe": { "id": "CWE-444", "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)" }, "discovery_date": "2024-11-18T21:01:46.925641+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:6482c85063d9a9b0c004ab820864b8ee4ad539411a4201d7986ec539a9ff4065_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:81429faee24a766d27e9e53e525307f004a0a1e3565c7b343894ebc00c97be6e_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:94633e88e68654792939437c4e88124607d0ce78cc29a9b3adc4f6741dd6ad40_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:9e237d9484aafa8663cc8df9b762e4f720a4bd4702035a9a2c7f52761be03c89_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:f5487d83e07fbfede2d9724cea2fa1947aaf9207f2b80ed2091ea63677a1a37b_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-29-rhel8@sha256:afc0732dabb2e714ad61602ccc323dfa94fc761527d2209dd35d8acf347e1cdd_amd64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:45b628279885139dd3223b25bf4af3eb2eb04b83781971061a6f1a3f4027bdfc_amd64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:48248cdd9d621c2bf0467671eab1913738447245473a0a2f528ff4f82a731f5e_ppc64le", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:79806e62bfc3e9b60cd380d70b66ee1fa52f8066f0d21a981361f5ec45ecc036_s390x", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:fc899a2b4bf476f60dd52a7b8e4ff4c60d48795b32bba14adae38205641537fb_arm64" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2327130" } ], "notes": [ { "category": "description", "text": "A flaw was found in the aiohttp package. The Python parser parses newlines in chunk extensions incorrectly, which can lead to request smuggling vulnerabilities under certain conditions. If a pure Python version of aiohttp is installed, for example, without the usual C extensions, or `AIOHTTP_NO_EXTENSIONS` is enabled, an attacker may be able to execute a request smuggling attack to bypass certain firewalls or proxy protections.", "title": "Vulnerability description" }, { "category": "summary", "text": "aiohttp: aiohttp vulnerable to request smuggling due to incorrect parsing of chunk extensions", "title": "Vulnerability summary" }, { "category": "other", "text": "Within regulated environments, a combination of the following controls acts as a significant barrier to successfully exploiting a CWE-444: Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027) vulnerability and therefore downgrades the severity of this particular CVE from Moderate to Low.\n\nThe platform uses secure, encrypted HTTPS connections over TLS 1.2 to reduce the risk of smuggling attacks by preventing the injection of ambiguous or malformed requests between components. The environment employs IPS/IDS and antimalware solutions to detect and block malicious code while ensuring consistent interpretation of HTTP requests across network layers, mitigating request/response inconsistencies. Event logs are collected and analyzed for centralization, correlation, monitoring, alerting, and retention, enabling the detection of malformed or suspicious HTTP traffic. Static code analysis and peer reviews enforce strong input validation and error handling to ensure all user inputs adhere to HTTP protocol specifications.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:0cec10d9a6e61ee12691ad1f441947b2019c29db163c2f3872851ebb6ef32cc2_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:0cf19f239c3ac9697d64e522ba35b0b509543179f2ba68c363281bcd3d6df8e2_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:1581e584e3ff8fa919eecdcd5c9517426a14061fe268c8ba6c277ac5e4cd6486_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:2e82c21518bcc5a825c0a84a97eb49745e752073097739f0425d45dbfd432eb1_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:446ece6a25bcd6f2a4c2aba033938591c2617e643c4f3de33c8bdb7b8d0f514a_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:57ed3d64f3acf810747fe88627901aeead08bd3d892b12b7206c14fa024a1930_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:5d32871a9c5fd57bf54cbadb5ffc882d9c158b40cbd8c3a596e7a0d668643167_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:66a83c19cee27a007f0a1c9e9a82d669ba3f97f0dcce2308a0ce32d3e1cd3a7f_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:6f25526b662c522db6b886ce896a4fa1fc3f3cb27c8857a15c26b91a444257b9_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:75357202064ca5c4e815863557cf2140da33bd2a801f442fb399ed3093c5d313_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:945c55597448f92bd7b46df53b3907f2835132b25d1d932edcd7c63f7b6e75d9_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:a23c98abc33bb233ee267f92ae6b706b03b67e94bd95280395898400fd8ec85f_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:aaa47e2dd1c71c0d36a4331fc0078a5067ef2cd93bda1902d3863a341e2e6074_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:ac62c6296c182e61c77f571728c094d35eb11e37bc2133a5984d04c8ffd2830d_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:c1d6fe4ed7afe9d13fa292615585f044e412a81311537ef6c7465f9d2e7e19c6_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:c407acff07bde1e61e0990cac320609fb81f97d96b7d1f7780683129a117ccea_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:d8aa73f286779b3b4c49f0ce745f973b09bce51d1338420587515b91deabd5a7_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:f1e7001759d5f70cd598b59a4a5f2e0786e3dfdd63e1ff70cb382a73b5182dfd_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:ff3261d84f5062ad13fc080ee9b53991d4e64cec28c2810f78ae5d85fecb80db_amd64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:032b5590181bf1e67df6d12c0af3856a2fc0fd79091f93f80e7b63653a91297c_arm64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:4db03217fe090a2ad774fab7250a1eadd5a075d01ca731f75074339ec18b4c9c_s390x", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:6e295d75c78943c21d120dd1d965b0a14f732a3ec9309c75471cf2bb92410922_ppc64le", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:db6a3af8b9768035d9c2733d2a6a2f48ac67ce570e5533f446c6be73a7a6c296_amd64" ], "known_not_affected": [ "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:6482c85063d9a9b0c004ab820864b8ee4ad539411a4201d7986ec539a9ff4065_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:81429faee24a766d27e9e53e525307f004a0a1e3565c7b343894ebc00c97be6e_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:94633e88e68654792939437c4e88124607d0ce78cc29a9b3adc4f6741dd6ad40_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:9e237d9484aafa8663cc8df9b762e4f720a4bd4702035a9a2c7f52761be03c89_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:f5487d83e07fbfede2d9724cea2fa1947aaf9207f2b80ed2091ea63677a1a37b_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-29-rhel8@sha256:afc0732dabb2e714ad61602ccc323dfa94fc761527d2209dd35d8acf347e1cdd_amd64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:45b628279885139dd3223b25bf4af3eb2eb04b83781971061a6f1a3f4027bdfc_amd64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:48248cdd9d621c2bf0467671eab1913738447245473a0a2f528ff4f82a731f5e_ppc64le", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:79806e62bfc3e9b60cd380d70b66ee1fa52f8066f0d21a981361f5ec45ecc036_s390x", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:fc899a2b4bf476f60dd52a7b8e4ff4c60d48795b32bba14adae38205641537fb_arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-52304" }, { "category": "external", "summary": "RHBZ#2327130", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2327130" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-52304", "url": "https://www.cve.org/CVERecord?id=CVE-2024-52304" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-52304", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52304" }, { "category": "external", "summary": "https://github.com/aio-libs/aiohttp/commit/259edc369075de63e6f3a4eaade058c62af0df71", "url": "https://github.com/aio-libs/aiohttp/commit/259edc369075de63e6f3a4eaade058c62af0df71" }, { "category": "external", "summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-8495-4g3g-x7pr", "url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-8495-4g3g-x7pr" } ], "release_date": "2024-11-18T20:12:48.612000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2025-01-28T01:03:48+00:00", "details": "Red Hat Ansible Automation Platform Execution Environments", "product_ids": [ "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:0cec10d9a6e61ee12691ad1f441947b2019c29db163c2f3872851ebb6ef32cc2_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:0cf19f239c3ac9697d64e522ba35b0b509543179f2ba68c363281bcd3d6df8e2_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:1581e584e3ff8fa919eecdcd5c9517426a14061fe268c8ba6c277ac5e4cd6486_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:2e82c21518bcc5a825c0a84a97eb49745e752073097739f0425d45dbfd432eb1_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:446ece6a25bcd6f2a4c2aba033938591c2617e643c4f3de33c8bdb7b8d0f514a_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:57ed3d64f3acf810747fe88627901aeead08bd3d892b12b7206c14fa024a1930_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:5d32871a9c5fd57bf54cbadb5ffc882d9c158b40cbd8c3a596e7a0d668643167_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:66a83c19cee27a007f0a1c9e9a82d669ba3f97f0dcce2308a0ce32d3e1cd3a7f_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:6f25526b662c522db6b886ce896a4fa1fc3f3cb27c8857a15c26b91a444257b9_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:75357202064ca5c4e815863557cf2140da33bd2a801f442fb399ed3093c5d313_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:945c55597448f92bd7b46df53b3907f2835132b25d1d932edcd7c63f7b6e75d9_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:a23c98abc33bb233ee267f92ae6b706b03b67e94bd95280395898400fd8ec85f_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:aaa47e2dd1c71c0d36a4331fc0078a5067ef2cd93bda1902d3863a341e2e6074_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:ac62c6296c182e61c77f571728c094d35eb11e37bc2133a5984d04c8ffd2830d_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:c1d6fe4ed7afe9d13fa292615585f044e412a81311537ef6c7465f9d2e7e19c6_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:c407acff07bde1e61e0990cac320609fb81f97d96b7d1f7780683129a117ccea_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:d8aa73f286779b3b4c49f0ce745f973b09bce51d1338420587515b91deabd5a7_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:f1e7001759d5f70cd598b59a4a5f2e0786e3dfdd63e1ff70cb382a73b5182dfd_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:ff3261d84f5062ad13fc080ee9b53991d4e64cec28c2810f78ae5d85fecb80db_amd64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:032b5590181bf1e67df6d12c0af3856a2fc0fd79091f93f80e7b63653a91297c_arm64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:4db03217fe090a2ad774fab7250a1eadd5a075d01ca731f75074339ec18b4c9c_s390x", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:6e295d75c78943c21d120dd1d965b0a14f732a3ec9309c75471cf2bb92410922_ppc64le", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:db6a3af8b9768035d9c2733d2a6a2f48ac67ce570e5533f446c6be73a7a6c296_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2025:0753" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:6482c85063d9a9b0c004ab820864b8ee4ad539411a4201d7986ec539a9ff4065_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:81429faee24a766d27e9e53e525307f004a0a1e3565c7b343894ebc00c97be6e_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:94633e88e68654792939437c4e88124607d0ce78cc29a9b3adc4f6741dd6ad40_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:9e237d9484aafa8663cc8df9b762e4f720a4bd4702035a9a2c7f52761be03c89_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:f5487d83e07fbfede2d9724cea2fa1947aaf9207f2b80ed2091ea63677a1a37b_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-29-rhel8@sha256:afc0732dabb2e714ad61602ccc323dfa94fc761527d2209dd35d8acf347e1cdd_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:0cec10d9a6e61ee12691ad1f441947b2019c29db163c2f3872851ebb6ef32cc2_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:0cf19f239c3ac9697d64e522ba35b0b509543179f2ba68c363281bcd3d6df8e2_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:1581e584e3ff8fa919eecdcd5c9517426a14061fe268c8ba6c277ac5e4cd6486_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:2e82c21518bcc5a825c0a84a97eb49745e752073097739f0425d45dbfd432eb1_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:446ece6a25bcd6f2a4c2aba033938591c2617e643c4f3de33c8bdb7b8d0f514a_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:57ed3d64f3acf810747fe88627901aeead08bd3d892b12b7206c14fa024a1930_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:5d32871a9c5fd57bf54cbadb5ffc882d9c158b40cbd8c3a596e7a0d668643167_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:66a83c19cee27a007f0a1c9e9a82d669ba3f97f0dcce2308a0ce32d3e1cd3a7f_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:6f25526b662c522db6b886ce896a4fa1fc3f3cb27c8857a15c26b91a444257b9_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:75357202064ca5c4e815863557cf2140da33bd2a801f442fb399ed3093c5d313_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:945c55597448f92bd7b46df53b3907f2835132b25d1d932edcd7c63f7b6e75d9_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:a23c98abc33bb233ee267f92ae6b706b03b67e94bd95280395898400fd8ec85f_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:aaa47e2dd1c71c0d36a4331fc0078a5067ef2cd93bda1902d3863a341e2e6074_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:ac62c6296c182e61c77f571728c094d35eb11e37bc2133a5984d04c8ffd2830d_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:c1d6fe4ed7afe9d13fa292615585f044e412a81311537ef6c7465f9d2e7e19c6_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:c407acff07bde1e61e0990cac320609fb81f97d96b7d1f7780683129a117ccea_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:d8aa73f286779b3b4c49f0ce745f973b09bce51d1338420587515b91deabd5a7_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:f1e7001759d5f70cd598b59a4a5f2e0786e3dfdd63e1ff70cb382a73b5182dfd_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:ff3261d84f5062ad13fc080ee9b53991d4e64cec28c2810f78ae5d85fecb80db_amd64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:45b628279885139dd3223b25bf4af3eb2eb04b83781971061a6f1a3f4027bdfc_amd64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:48248cdd9d621c2bf0467671eab1913738447245473a0a2f528ff4f82a731f5e_ppc64le", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:79806e62bfc3e9b60cd380d70b66ee1fa52f8066f0d21a981361f5ec45ecc036_s390x", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:fc899a2b4bf476f60dd52a7b8e4ff4c60d48795b32bba14adae38205641537fb_arm64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:032b5590181bf1e67df6d12c0af3856a2fc0fd79091f93f80e7b63653a91297c_arm64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:4db03217fe090a2ad774fab7250a1eadd5a075d01ca731f75074339ec18b4c9c_s390x", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:6e295d75c78943c21d120dd1d965b0a14f732a3ec9309c75471cf2bb92410922_ppc64le", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:db6a3af8b9768035d9c2733d2a6a2f48ac67ce570e5533f446c6be73a7a6c296_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "aiohttp: aiohttp vulnerable to request smuggling due to incorrect parsing of chunk extensions" }, { "cve": "CVE-2024-56201", "cwe": { "id": "CWE-150", "name": "Improper Neutralization of Escape, Meta, or Control Sequences" }, "discovery_date": "2024-12-23T16:00:38.768252+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:6482c85063d9a9b0c004ab820864b8ee4ad539411a4201d7986ec539a9ff4065_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:81429faee24a766d27e9e53e525307f004a0a1e3565c7b343894ebc00c97be6e_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:94633e88e68654792939437c4e88124607d0ce78cc29a9b3adc4f6741dd6ad40_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:9e237d9484aafa8663cc8df9b762e4f720a4bd4702035a9a2c7f52761be03c89_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:f5487d83e07fbfede2d9724cea2fa1947aaf9207f2b80ed2091ea63677a1a37b_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-29-rhel8@sha256:afc0732dabb2e714ad61602ccc323dfa94fc761527d2209dd35d8acf347e1cdd_amd64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:45b628279885139dd3223b25bf4af3eb2eb04b83781971061a6f1a3f4027bdfc_amd64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:48248cdd9d621c2bf0467671eab1913738447245473a0a2f528ff4f82a731f5e_ppc64le", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:79806e62bfc3e9b60cd380d70b66ee1fa52f8066f0d21a981361f5ec45ecc036_s390x", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:fc899a2b4bf476f60dd52a7b8e4ff4c60d48795b32bba14adae38205641537fb_arm64" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2333854" } ], "notes": [ { "category": "description", "text": "A flaw was found in the Jinja2 package. A bug in the Jinja compiler allows an attacker that controls both the content and filename of a template to execute arbitrary Python code, regardless of Jinja\u0027s sandbox being used. An attacker needs to be able to control both the filename and the contents of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications that execute untrusted templates where the template author can also choose the template filename.", "title": "Vulnerability description" }, { "category": "summary", "text": "jinja2: Jinja has a sandbox breakout through malicious filenames", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability has rated as a IMPORTANT flaw because an attacker controlling both the template content and filename to execute arbitrary Python code, bypassing the sandbox.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:0cec10d9a6e61ee12691ad1f441947b2019c29db163c2f3872851ebb6ef32cc2_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:0cf19f239c3ac9697d64e522ba35b0b509543179f2ba68c363281bcd3d6df8e2_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:1581e584e3ff8fa919eecdcd5c9517426a14061fe268c8ba6c277ac5e4cd6486_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:2e82c21518bcc5a825c0a84a97eb49745e752073097739f0425d45dbfd432eb1_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:446ece6a25bcd6f2a4c2aba033938591c2617e643c4f3de33c8bdb7b8d0f514a_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:57ed3d64f3acf810747fe88627901aeead08bd3d892b12b7206c14fa024a1930_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:5d32871a9c5fd57bf54cbadb5ffc882d9c158b40cbd8c3a596e7a0d668643167_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:66a83c19cee27a007f0a1c9e9a82d669ba3f97f0dcce2308a0ce32d3e1cd3a7f_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:6f25526b662c522db6b886ce896a4fa1fc3f3cb27c8857a15c26b91a444257b9_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:75357202064ca5c4e815863557cf2140da33bd2a801f442fb399ed3093c5d313_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:945c55597448f92bd7b46df53b3907f2835132b25d1d932edcd7c63f7b6e75d9_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:a23c98abc33bb233ee267f92ae6b706b03b67e94bd95280395898400fd8ec85f_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:aaa47e2dd1c71c0d36a4331fc0078a5067ef2cd93bda1902d3863a341e2e6074_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:ac62c6296c182e61c77f571728c094d35eb11e37bc2133a5984d04c8ffd2830d_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:c1d6fe4ed7afe9d13fa292615585f044e412a81311537ef6c7465f9d2e7e19c6_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:c407acff07bde1e61e0990cac320609fb81f97d96b7d1f7780683129a117ccea_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:d8aa73f286779b3b4c49f0ce745f973b09bce51d1338420587515b91deabd5a7_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:f1e7001759d5f70cd598b59a4a5f2e0786e3dfdd63e1ff70cb382a73b5182dfd_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:ff3261d84f5062ad13fc080ee9b53991d4e64cec28c2810f78ae5d85fecb80db_amd64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:032b5590181bf1e67df6d12c0af3856a2fc0fd79091f93f80e7b63653a91297c_arm64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:4db03217fe090a2ad774fab7250a1eadd5a075d01ca731f75074339ec18b4c9c_s390x", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:6e295d75c78943c21d120dd1d965b0a14f732a3ec9309c75471cf2bb92410922_ppc64le", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:db6a3af8b9768035d9c2733d2a6a2f48ac67ce570e5533f446c6be73a7a6c296_amd64" ], "known_not_affected": [ "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:6482c85063d9a9b0c004ab820864b8ee4ad539411a4201d7986ec539a9ff4065_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:81429faee24a766d27e9e53e525307f004a0a1e3565c7b343894ebc00c97be6e_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:94633e88e68654792939437c4e88124607d0ce78cc29a9b3adc4f6741dd6ad40_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:9e237d9484aafa8663cc8df9b762e4f720a4bd4702035a9a2c7f52761be03c89_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:f5487d83e07fbfede2d9724cea2fa1947aaf9207f2b80ed2091ea63677a1a37b_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-29-rhel8@sha256:afc0732dabb2e714ad61602ccc323dfa94fc761527d2209dd35d8acf347e1cdd_amd64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:45b628279885139dd3223b25bf4af3eb2eb04b83781971061a6f1a3f4027bdfc_amd64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:48248cdd9d621c2bf0467671eab1913738447245473a0a2f528ff4f82a731f5e_ppc64le", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:79806e62bfc3e9b60cd380d70b66ee1fa52f8066f0d21a981361f5ec45ecc036_s390x", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:fc899a2b4bf476f60dd52a7b8e4ff4c60d48795b32bba14adae38205641537fb_arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-56201" }, { "category": "external", "summary": "RHBZ#2333854", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2333854" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-56201", "url": "https://www.cve.org/CVERecord?id=CVE-2024-56201" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-56201", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56201" }, { "category": "external", "summary": "https://github.com/pallets/jinja/commit/767b23617628419ae3709ccfb02f9602ae9fe51f", "url": "https://github.com/pallets/jinja/commit/767b23617628419ae3709ccfb02f9602ae9fe51f" }, { "category": "external", "summary": "https://github.com/pallets/jinja/issues/1792", "url": "https://github.com/pallets/jinja/issues/1792" }, { "category": "external", "summary": "https://github.com/pallets/jinja/releases/tag/3.1.5", "url": "https://github.com/pallets/jinja/releases/tag/3.1.5" }, { "category": "external", "summary": "https://github.com/pallets/jinja/security/advisories/GHSA-gmj6-6f8f-6699", "url": "https://github.com/pallets/jinja/security/advisories/GHSA-gmj6-6f8f-6699" } ], "release_date": "2024-12-23T15:37:36.110000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2025-01-28T01:03:48+00:00", "details": "Red Hat Ansible Automation Platform Execution Environments", "product_ids": [ "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:0cec10d9a6e61ee12691ad1f441947b2019c29db163c2f3872851ebb6ef32cc2_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:0cf19f239c3ac9697d64e522ba35b0b509543179f2ba68c363281bcd3d6df8e2_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:1581e584e3ff8fa919eecdcd5c9517426a14061fe268c8ba6c277ac5e4cd6486_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:2e82c21518bcc5a825c0a84a97eb49745e752073097739f0425d45dbfd432eb1_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:446ece6a25bcd6f2a4c2aba033938591c2617e643c4f3de33c8bdb7b8d0f514a_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:57ed3d64f3acf810747fe88627901aeead08bd3d892b12b7206c14fa024a1930_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:5d32871a9c5fd57bf54cbadb5ffc882d9c158b40cbd8c3a596e7a0d668643167_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:66a83c19cee27a007f0a1c9e9a82d669ba3f97f0dcce2308a0ce32d3e1cd3a7f_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:6f25526b662c522db6b886ce896a4fa1fc3f3cb27c8857a15c26b91a444257b9_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:75357202064ca5c4e815863557cf2140da33bd2a801f442fb399ed3093c5d313_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:945c55597448f92bd7b46df53b3907f2835132b25d1d932edcd7c63f7b6e75d9_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:a23c98abc33bb233ee267f92ae6b706b03b67e94bd95280395898400fd8ec85f_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:aaa47e2dd1c71c0d36a4331fc0078a5067ef2cd93bda1902d3863a341e2e6074_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:ac62c6296c182e61c77f571728c094d35eb11e37bc2133a5984d04c8ffd2830d_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:c1d6fe4ed7afe9d13fa292615585f044e412a81311537ef6c7465f9d2e7e19c6_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:c407acff07bde1e61e0990cac320609fb81f97d96b7d1f7780683129a117ccea_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:d8aa73f286779b3b4c49f0ce745f973b09bce51d1338420587515b91deabd5a7_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:f1e7001759d5f70cd598b59a4a5f2e0786e3dfdd63e1ff70cb382a73b5182dfd_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:ff3261d84f5062ad13fc080ee9b53991d4e64cec28c2810f78ae5d85fecb80db_amd64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:032b5590181bf1e67df6d12c0af3856a2fc0fd79091f93f80e7b63653a91297c_arm64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:4db03217fe090a2ad774fab7250a1eadd5a075d01ca731f75074339ec18b4c9c_s390x", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:6e295d75c78943c21d120dd1d965b0a14f732a3ec9309c75471cf2bb92410922_ppc64le", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:db6a3af8b9768035d9c2733d2a6a2f48ac67ce570e5533f446c6be73a7a6c296_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2025:0753" }, { "category": "workaround", "details": "To mitigate this vulnerabilty restrict user-controlled template filenames, ensuring they follow a predefined templates.", "product_ids": [ "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:6482c85063d9a9b0c004ab820864b8ee4ad539411a4201d7986ec539a9ff4065_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:81429faee24a766d27e9e53e525307f004a0a1e3565c7b343894ebc00c97be6e_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:94633e88e68654792939437c4e88124607d0ce78cc29a9b3adc4f6741dd6ad40_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:9e237d9484aafa8663cc8df9b762e4f720a4bd4702035a9a2c7f52761be03c89_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:f5487d83e07fbfede2d9724cea2fa1947aaf9207f2b80ed2091ea63677a1a37b_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-29-rhel8@sha256:afc0732dabb2e714ad61602ccc323dfa94fc761527d2209dd35d8acf347e1cdd_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:0cec10d9a6e61ee12691ad1f441947b2019c29db163c2f3872851ebb6ef32cc2_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:0cf19f239c3ac9697d64e522ba35b0b509543179f2ba68c363281bcd3d6df8e2_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:1581e584e3ff8fa919eecdcd5c9517426a14061fe268c8ba6c277ac5e4cd6486_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:2e82c21518bcc5a825c0a84a97eb49745e752073097739f0425d45dbfd432eb1_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:446ece6a25bcd6f2a4c2aba033938591c2617e643c4f3de33c8bdb7b8d0f514a_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:57ed3d64f3acf810747fe88627901aeead08bd3d892b12b7206c14fa024a1930_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:5d32871a9c5fd57bf54cbadb5ffc882d9c158b40cbd8c3a596e7a0d668643167_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:66a83c19cee27a007f0a1c9e9a82d669ba3f97f0dcce2308a0ce32d3e1cd3a7f_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:6f25526b662c522db6b886ce896a4fa1fc3f3cb27c8857a15c26b91a444257b9_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:75357202064ca5c4e815863557cf2140da33bd2a801f442fb399ed3093c5d313_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:945c55597448f92bd7b46df53b3907f2835132b25d1d932edcd7c63f7b6e75d9_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:a23c98abc33bb233ee267f92ae6b706b03b67e94bd95280395898400fd8ec85f_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:aaa47e2dd1c71c0d36a4331fc0078a5067ef2cd93bda1902d3863a341e2e6074_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:ac62c6296c182e61c77f571728c094d35eb11e37bc2133a5984d04c8ffd2830d_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:c1d6fe4ed7afe9d13fa292615585f044e412a81311537ef6c7465f9d2e7e19c6_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:c407acff07bde1e61e0990cac320609fb81f97d96b7d1f7780683129a117ccea_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:d8aa73f286779b3b4c49f0ce745f973b09bce51d1338420587515b91deabd5a7_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:f1e7001759d5f70cd598b59a4a5f2e0786e3dfdd63e1ff70cb382a73b5182dfd_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:ff3261d84f5062ad13fc080ee9b53991d4e64cec28c2810f78ae5d85fecb80db_amd64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:45b628279885139dd3223b25bf4af3eb2eb04b83781971061a6f1a3f4027bdfc_amd64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:48248cdd9d621c2bf0467671eab1913738447245473a0a2f528ff4f82a731f5e_ppc64le", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:79806e62bfc3e9b60cd380d70b66ee1fa52f8066f0d21a981361f5ec45ecc036_s390x", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:fc899a2b4bf476f60dd52a7b8e4ff4c60d48795b32bba14adae38205641537fb_arm64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:032b5590181bf1e67df6d12c0af3856a2fc0fd79091f93f80e7b63653a91297c_arm64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:4db03217fe090a2ad774fab7250a1eadd5a075d01ca731f75074339ec18b4c9c_s390x", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:6e295d75c78943c21d120dd1d965b0a14f732a3ec9309c75471cf2bb92410922_ppc64le", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:db6a3af8b9768035d9c2733d2a6a2f48ac67ce570e5533f446c6be73a7a6c296_amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:6482c85063d9a9b0c004ab820864b8ee4ad539411a4201d7986ec539a9ff4065_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:81429faee24a766d27e9e53e525307f004a0a1e3565c7b343894ebc00c97be6e_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:94633e88e68654792939437c4e88124607d0ce78cc29a9b3adc4f6741dd6ad40_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:9e237d9484aafa8663cc8df9b762e4f720a4bd4702035a9a2c7f52761be03c89_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:f5487d83e07fbfede2d9724cea2fa1947aaf9207f2b80ed2091ea63677a1a37b_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-29-rhel8@sha256:afc0732dabb2e714ad61602ccc323dfa94fc761527d2209dd35d8acf347e1cdd_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:0cec10d9a6e61ee12691ad1f441947b2019c29db163c2f3872851ebb6ef32cc2_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:0cf19f239c3ac9697d64e522ba35b0b509543179f2ba68c363281bcd3d6df8e2_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:1581e584e3ff8fa919eecdcd5c9517426a14061fe268c8ba6c277ac5e4cd6486_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:2e82c21518bcc5a825c0a84a97eb49745e752073097739f0425d45dbfd432eb1_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:446ece6a25bcd6f2a4c2aba033938591c2617e643c4f3de33c8bdb7b8d0f514a_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:57ed3d64f3acf810747fe88627901aeead08bd3d892b12b7206c14fa024a1930_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:5d32871a9c5fd57bf54cbadb5ffc882d9c158b40cbd8c3a596e7a0d668643167_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:66a83c19cee27a007f0a1c9e9a82d669ba3f97f0dcce2308a0ce32d3e1cd3a7f_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:6f25526b662c522db6b886ce896a4fa1fc3f3cb27c8857a15c26b91a444257b9_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:75357202064ca5c4e815863557cf2140da33bd2a801f442fb399ed3093c5d313_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:945c55597448f92bd7b46df53b3907f2835132b25d1d932edcd7c63f7b6e75d9_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:a23c98abc33bb233ee267f92ae6b706b03b67e94bd95280395898400fd8ec85f_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:aaa47e2dd1c71c0d36a4331fc0078a5067ef2cd93bda1902d3863a341e2e6074_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:ac62c6296c182e61c77f571728c094d35eb11e37bc2133a5984d04c8ffd2830d_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:c1d6fe4ed7afe9d13fa292615585f044e412a81311537ef6c7465f9d2e7e19c6_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:c407acff07bde1e61e0990cac320609fb81f97d96b7d1f7780683129a117ccea_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:d8aa73f286779b3b4c49f0ce745f973b09bce51d1338420587515b91deabd5a7_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:f1e7001759d5f70cd598b59a4a5f2e0786e3dfdd63e1ff70cb382a73b5182dfd_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:ff3261d84f5062ad13fc080ee9b53991d4e64cec28c2810f78ae5d85fecb80db_amd64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:45b628279885139dd3223b25bf4af3eb2eb04b83781971061a6f1a3f4027bdfc_amd64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:48248cdd9d621c2bf0467671eab1913738447245473a0a2f528ff4f82a731f5e_ppc64le", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:79806e62bfc3e9b60cd380d70b66ee1fa52f8066f0d21a981361f5ec45ecc036_s390x", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:fc899a2b4bf476f60dd52a7b8e4ff4c60d48795b32bba14adae38205641537fb_arm64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:032b5590181bf1e67df6d12c0af3856a2fc0fd79091f93f80e7b63653a91297c_arm64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:4db03217fe090a2ad774fab7250a1eadd5a075d01ca731f75074339ec18b4c9c_s390x", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:6e295d75c78943c21d120dd1d965b0a14f732a3ec9309c75471cf2bb92410922_ppc64le", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:db6a3af8b9768035d9c2733d2a6a2f48ac67ce570e5533f446c6be73a7a6c296_amd64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "jinja2: Jinja has a sandbox breakout through malicious filenames" }, { "cve": "CVE-2024-56326", "cwe": { "id": "CWE-693", "name": "Protection Mechanism Failure" }, "discovery_date": "2024-12-23T16:00:46.619763+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:6482c85063d9a9b0c004ab820864b8ee4ad539411a4201d7986ec539a9ff4065_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:81429faee24a766d27e9e53e525307f004a0a1e3565c7b343894ebc00c97be6e_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:94633e88e68654792939437c4e88124607d0ce78cc29a9b3adc4f6741dd6ad40_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:9e237d9484aafa8663cc8df9b762e4f720a4bd4702035a9a2c7f52761be03c89_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:f5487d83e07fbfede2d9724cea2fa1947aaf9207f2b80ed2091ea63677a1a37b_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-29-rhel8@sha256:afc0732dabb2e714ad61602ccc323dfa94fc761527d2209dd35d8acf347e1cdd_amd64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:45b628279885139dd3223b25bf4af3eb2eb04b83781971061a6f1a3f4027bdfc_amd64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:48248cdd9d621c2bf0467671eab1913738447245473a0a2f528ff4f82a731f5e_ppc64le", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:79806e62bfc3e9b60cd380d70b66ee1fa52f8066f0d21a981361f5ec45ecc036_s390x", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:fc899a2b4bf476f60dd52a7b8e4ff4c60d48795b32bba14adae38205641537fb_arm64" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2333856" } ], "notes": [ { "category": "description", "text": "A flaw was found in the Jinja package. In affected versions of Jinja, an oversight in how the Jinja sandboxed environment detects calls to str.format allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the content of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications that execute untrusted templates. Jinja\u0027s sandbox does catch calls to str.format and ensures they don\u0027t escape the sandbox. However, storing a reference to a malicious string\u0027s format method is possible, then passing that to a filter that calls it. No such filters are built into Jinja but could be present through custom filters in an application. After the fix, such indirect calls are also handled by the sandbox.", "title": "Vulnerability description" }, { "category": "summary", "text": "jinja2: Jinja has a sandbox breakout through indirect reference to format method", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability is rated as Moderate due to an oversight in Jinja\u0027s sandbox environment, allowing attackers to execute arbitrary Python code through controlled template content. This requires control over template content, making exploitation possible only in specific applications, thus limiting its overall impact.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:0cec10d9a6e61ee12691ad1f441947b2019c29db163c2f3872851ebb6ef32cc2_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:0cf19f239c3ac9697d64e522ba35b0b509543179f2ba68c363281bcd3d6df8e2_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:1581e584e3ff8fa919eecdcd5c9517426a14061fe268c8ba6c277ac5e4cd6486_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:2e82c21518bcc5a825c0a84a97eb49745e752073097739f0425d45dbfd432eb1_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:446ece6a25bcd6f2a4c2aba033938591c2617e643c4f3de33c8bdb7b8d0f514a_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:57ed3d64f3acf810747fe88627901aeead08bd3d892b12b7206c14fa024a1930_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:5d32871a9c5fd57bf54cbadb5ffc882d9c158b40cbd8c3a596e7a0d668643167_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:66a83c19cee27a007f0a1c9e9a82d669ba3f97f0dcce2308a0ce32d3e1cd3a7f_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:6f25526b662c522db6b886ce896a4fa1fc3f3cb27c8857a15c26b91a444257b9_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:75357202064ca5c4e815863557cf2140da33bd2a801f442fb399ed3093c5d313_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:945c55597448f92bd7b46df53b3907f2835132b25d1d932edcd7c63f7b6e75d9_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:a23c98abc33bb233ee267f92ae6b706b03b67e94bd95280395898400fd8ec85f_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:aaa47e2dd1c71c0d36a4331fc0078a5067ef2cd93bda1902d3863a341e2e6074_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:ac62c6296c182e61c77f571728c094d35eb11e37bc2133a5984d04c8ffd2830d_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:c1d6fe4ed7afe9d13fa292615585f044e412a81311537ef6c7465f9d2e7e19c6_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:c407acff07bde1e61e0990cac320609fb81f97d96b7d1f7780683129a117ccea_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:d8aa73f286779b3b4c49f0ce745f973b09bce51d1338420587515b91deabd5a7_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:f1e7001759d5f70cd598b59a4a5f2e0786e3dfdd63e1ff70cb382a73b5182dfd_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:ff3261d84f5062ad13fc080ee9b53991d4e64cec28c2810f78ae5d85fecb80db_amd64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:032b5590181bf1e67df6d12c0af3856a2fc0fd79091f93f80e7b63653a91297c_arm64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:4db03217fe090a2ad774fab7250a1eadd5a075d01ca731f75074339ec18b4c9c_s390x", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:6e295d75c78943c21d120dd1d965b0a14f732a3ec9309c75471cf2bb92410922_ppc64le", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:db6a3af8b9768035d9c2733d2a6a2f48ac67ce570e5533f446c6be73a7a6c296_amd64" ], "known_not_affected": [ "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:6482c85063d9a9b0c004ab820864b8ee4ad539411a4201d7986ec539a9ff4065_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:81429faee24a766d27e9e53e525307f004a0a1e3565c7b343894ebc00c97be6e_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:94633e88e68654792939437c4e88124607d0ce78cc29a9b3adc4f6741dd6ad40_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:9e237d9484aafa8663cc8df9b762e4f720a4bd4702035a9a2c7f52761be03c89_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:f5487d83e07fbfede2d9724cea2fa1947aaf9207f2b80ed2091ea63677a1a37b_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-29-rhel8@sha256:afc0732dabb2e714ad61602ccc323dfa94fc761527d2209dd35d8acf347e1cdd_amd64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:45b628279885139dd3223b25bf4af3eb2eb04b83781971061a6f1a3f4027bdfc_amd64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:48248cdd9d621c2bf0467671eab1913738447245473a0a2f528ff4f82a731f5e_ppc64le", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:79806e62bfc3e9b60cd380d70b66ee1fa52f8066f0d21a981361f5ec45ecc036_s390x", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:fc899a2b4bf476f60dd52a7b8e4ff4c60d48795b32bba14adae38205641537fb_arm64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-56326" }, { "category": "external", "summary": "RHBZ#2333856", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2333856" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-56326", "url": "https://www.cve.org/CVERecord?id=CVE-2024-56326" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-56326", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56326" }, { "category": "external", "summary": "https://github.com/pallets/jinja/commit/48b0687e05a5466a91cd5812d604fa37ad0943b4", "url": "https://github.com/pallets/jinja/commit/48b0687e05a5466a91cd5812d604fa37ad0943b4" }, { "category": "external", "summary": "https://github.com/pallets/jinja/releases/tag/3.1.5", "url": "https://github.com/pallets/jinja/releases/tag/3.1.5" }, { "category": "external", "summary": "https://github.com/pallets/jinja/security/advisories/GHSA-q2x7-8rv6-6q7h", "url": "https://github.com/pallets/jinja/security/advisories/GHSA-q2x7-8rv6-6q7h" } ], "release_date": "2024-12-23T15:43:49.400000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2025-01-28T01:03:48+00:00", "details": "Red Hat Ansible Automation Platform Execution Environments", "product_ids": [ "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:0cec10d9a6e61ee12691ad1f441947b2019c29db163c2f3872851ebb6ef32cc2_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:0cf19f239c3ac9697d64e522ba35b0b509543179f2ba68c363281bcd3d6df8e2_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:1581e584e3ff8fa919eecdcd5c9517426a14061fe268c8ba6c277ac5e4cd6486_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:2e82c21518bcc5a825c0a84a97eb49745e752073097739f0425d45dbfd432eb1_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:446ece6a25bcd6f2a4c2aba033938591c2617e643c4f3de33c8bdb7b8d0f514a_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:57ed3d64f3acf810747fe88627901aeead08bd3d892b12b7206c14fa024a1930_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:5d32871a9c5fd57bf54cbadb5ffc882d9c158b40cbd8c3a596e7a0d668643167_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:66a83c19cee27a007f0a1c9e9a82d669ba3f97f0dcce2308a0ce32d3e1cd3a7f_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:6f25526b662c522db6b886ce896a4fa1fc3f3cb27c8857a15c26b91a444257b9_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:75357202064ca5c4e815863557cf2140da33bd2a801f442fb399ed3093c5d313_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:945c55597448f92bd7b46df53b3907f2835132b25d1d932edcd7c63f7b6e75d9_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:a23c98abc33bb233ee267f92ae6b706b03b67e94bd95280395898400fd8ec85f_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:aaa47e2dd1c71c0d36a4331fc0078a5067ef2cd93bda1902d3863a341e2e6074_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:ac62c6296c182e61c77f571728c094d35eb11e37bc2133a5984d04c8ffd2830d_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:c1d6fe4ed7afe9d13fa292615585f044e412a81311537ef6c7465f9d2e7e19c6_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:c407acff07bde1e61e0990cac320609fb81f97d96b7d1f7780683129a117ccea_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:d8aa73f286779b3b4c49f0ce745f973b09bce51d1338420587515b91deabd5a7_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:f1e7001759d5f70cd598b59a4a5f2e0786e3dfdd63e1ff70cb382a73b5182dfd_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:ff3261d84f5062ad13fc080ee9b53991d4e64cec28c2810f78ae5d85fecb80db_amd64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:032b5590181bf1e67df6d12c0af3856a2fc0fd79091f93f80e7b63653a91297c_arm64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:4db03217fe090a2ad774fab7250a1eadd5a075d01ca731f75074339ec18b4c9c_s390x", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:6e295d75c78943c21d120dd1d965b0a14f732a3ec9309c75471cf2bb92410922_ppc64le", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:db6a3af8b9768035d9c2733d2a6a2f48ac67ce570e5533f446c6be73a7a6c296_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2025:0753" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:6482c85063d9a9b0c004ab820864b8ee4ad539411a4201d7986ec539a9ff4065_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:81429faee24a766d27e9e53e525307f004a0a1e3565c7b343894ebc00c97be6e_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:94633e88e68654792939437c4e88124607d0ce78cc29a9b3adc4f6741dd6ad40_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:9e237d9484aafa8663cc8df9b762e4f720a4bd4702035a9a2c7f52761be03c89_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel8@sha256:f5487d83e07fbfede2d9724cea2fa1947aaf9207f2b80ed2091ea63677a1a37b_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-29-rhel8@sha256:afc0732dabb2e714ad61602ccc323dfa94fc761527d2209dd35d8acf347e1cdd_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:0cec10d9a6e61ee12691ad1f441947b2019c29db163c2f3872851ebb6ef32cc2_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:0cf19f239c3ac9697d64e522ba35b0b509543179f2ba68c363281bcd3d6df8e2_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:1581e584e3ff8fa919eecdcd5c9517426a14061fe268c8ba6c277ac5e4cd6486_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:2e82c21518bcc5a825c0a84a97eb49745e752073097739f0425d45dbfd432eb1_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:446ece6a25bcd6f2a4c2aba033938591c2617e643c4f3de33c8bdb7b8d0f514a_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:57ed3d64f3acf810747fe88627901aeead08bd3d892b12b7206c14fa024a1930_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:5d32871a9c5fd57bf54cbadb5ffc882d9c158b40cbd8c3a596e7a0d668643167_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:66a83c19cee27a007f0a1c9e9a82d669ba3f97f0dcce2308a0ce32d3e1cd3a7f_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:6f25526b662c522db6b886ce896a4fa1fc3f3cb27c8857a15c26b91a444257b9_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:75357202064ca5c4e815863557cf2140da33bd2a801f442fb399ed3093c5d313_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:945c55597448f92bd7b46df53b3907f2835132b25d1d932edcd7c63f7b6e75d9_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:a23c98abc33bb233ee267f92ae6b706b03b67e94bd95280395898400fd8ec85f_ppc64le", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:aaa47e2dd1c71c0d36a4331fc0078a5067ef2cd93bda1902d3863a341e2e6074_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:ac62c6296c182e61c77f571728c094d35eb11e37bc2133a5984d04c8ffd2830d_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:c1d6fe4ed7afe9d13fa292615585f044e412a81311537ef6c7465f9d2e7e19c6_amd64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:c407acff07bde1e61e0990cac320609fb81f97d96b7d1f7780683129a117ccea_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:d8aa73f286779b3b4c49f0ce745f973b09bce51d1338420587515b91deabd5a7_arm64", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:f1e7001759d5f70cd598b59a4a5f2e0786e3dfdd63e1ff70cb382a73b5182dfd_s390x", "8Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel8@sha256:ff3261d84f5062ad13fc080ee9b53991d4e64cec28c2810f78ae5d85fecb80db_amd64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:45b628279885139dd3223b25bf4af3eb2eb04b83781971061a6f1a3f4027bdfc_amd64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:48248cdd9d621c2bf0467671eab1913738447245473a0a2f528ff4f82a731f5e_ppc64le", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:79806e62bfc3e9b60cd380d70b66ee1fa52f8066f0d21a981361f5ec45ecc036_s390x", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ansible-builder-rhel9@sha256:fc899a2b4bf476f60dd52a7b8e4ff4c60d48795b32bba14adae38205641537fb_arm64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:032b5590181bf1e67df6d12c0af3856a2fc0fd79091f93f80e7b63653a91297c_arm64", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:4db03217fe090a2ad774fab7250a1eadd5a075d01ca731f75074339ec18b4c9c_s390x", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:6e295d75c78943c21d120dd1d965b0a14f732a3ec9309c75471cf2bb92410922_ppc64le", "9Base-ansible-automation-platform-ee:ansible-automation-platform/ee-minimal-rhel9@sha256:db6a3af8b9768035d9c2733d2a6a2f48ac67ce570e5533f446c6be73a7a6c296_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "jinja2: Jinja has a sandbox breakout through indirect reference to format method" } ] }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…