VDB
RHSA-2025%3A1101
RHSA-2025%3A1101
PUBLISHED
CVSS 5.900000095367432 MEDIUM
A flaw was found in the aiohttp package. The Python parser parses newlines in chunk extensions incorrectly, which can lead to request smuggling vulnerabilities under certain conditions. If a pure Python version of aiohttp is installed, for example, without the usual C extensions, or `AIOHTTP_NO_EXTENSIONS` is enabled, an attacker may be able to execute a request smuggling attack to bypass certain firewalls or proxy protections.
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | ansible-automation-platform/ee-minimal-rhel8@sha256:0bdc55a1bfc7c9c51babf72f72a2e71bc9a909e025c00c327d8670528a7fb749_arm64 as a component of Ansible Automation Platform Execution Environments | ansible-automation-platform/ee-minimal-rhel8@sha256:0bdc55a1bfc7c9c51babf72f72a2e71bc9a909e025c00c327d8670528a7fb749_arm64 |
| Red Hat | ansible-automation-platform/ansible-builder-rhel9@sha256:9d3e3d98bec6bb7fe4bc2608d62cc6cbc7954dd758023475d39674f33b2d57ec_s390x as a component of Ansible Automation Platform Execution Environments | ansible-automation-platform/ansible-builder-rhel9@sha256:9d3e3d98bec6bb7fe4bc2608d62cc6cbc7954dd758023475d39674f33b2d57ec_s390x |
| Red Hat | ansible-automation-platform/ee-minimal-rhel9@sha256:cb4bc9d932e847793c42ee7e15694db704c5e614856cf229d66384e089fd1261_ppc64le as a component of Ansible Automation Platform Execution Environments | ansible-automation-platform/ee-minimal-rhel9@sha256:cb4bc9d932e847793c42ee7e15694db704c5e614856cf229d66384e089fd1261_ppc64le |
| Red Hat | ansible-automation-platform/ee-minimal-rhel9@sha256:573755e9ad4649b064a5664cb35c92f0f329b5bfb37e48249e5760e3e2d405c9_ppc64le as a component of Ansible Automation Platform Execution Environments | * |
| Red Hat | ansible-automation-platform/ee-minimal-rhel8@sha256:9188601682d277118612309666393838d8b6b1e12ca0d81344324ec416800f7d_amd64 as a component of Ansible Automation Platform Execution Environments | * |
| Red Hat | ansible-automation-platform/ee-minimal-rhel8@sha256:3f5ab8458784204ae9513a9d006019c6aaadbc6b2acedb820a16d69bd8dfef57_ppc64le as a component of Ansible Automation Platform Execution Environments | ansible-automation-platform/ee-minimal-rhel8@sha256:3f5ab8458784204ae9513a9d006019c6aaadbc6b2acedb820a16d69bd8dfef57_ppc64le |
| Red Hat | ansible-automation-platform/ee-minimal-rhel8@sha256:213acda21cd0b7f0a93d1e553a9e06daea72f097150cd915d43c74b50e901177_amd64 as a component of Ansible Automation Platform Execution Environments | ansible-automation-platform/ee-minimal-rhel8@sha256:213acda21cd0b7f0a93d1e553a9e06daea72f097150cd915d43c74b50e901177_amd64 |
| Red Hat | ansible-automation-platform/ee-minimal-rhel8@sha256:ae2d1ef5fd50ffa5706f2a3d4cb5c25d23ab78ff4a1592ddf2a6f1e916c0628b_arm64 as a component of Ansible Automation Platform Execution Environments | ansible-automation-platform/ee-minimal-rhel8@sha256:ae2d1ef5fd50ffa5706f2a3d4cb5c25d23ab78ff4a1592ddf2a6f1e916c0628b_arm64 |
| Red Hat | ansible-automation-platform/ee-minimal-rhel8@sha256:0bad1243aa3173df68f5378aa852eb78d172e3a86f10a70b6220f06d2f3b83aa_amd64 as a component of Ansible Automation Platform Execution Environments | ansible-automation-platform/ee-minimal-rhel8@sha256:0bad1243aa3173df68f5378aa852eb78d172e3a86f10a70b6220f06d2f3b83aa_amd64 |
| Red Hat | ansible-automation-platform/ee-minimal-rhel9@sha256:2fc218503ceb650581daf6a8dc74075fcae6e871ef993c989c35b2d7c70f9bc9_arm64 as a component of Ansible Automation Platform Execution Environments | ansible-automation-platform/ee-minimal-rhel9@sha256:2fc218503ceb650581daf6a8dc74075fcae6e871ef993c989c35b2d7c70f9bc9_arm64 |
| Red Hat | ansible-automation-platform/ansible-builder-rhel8@sha256:f7cdc66d822e3705cd4e877bd67b5d870560d89dc18a8fb487ea05ecc6b47852_amd64 as a component of Ansible Automation Platform Execution Environments | ansible-automation-platform/ansible-builder-rhel8@sha256:f7cdc66d822e3705cd4e877bd67b5d870560d89dc18a8fb487ea05ecc6b47852_amd64 |
| Red Hat | ansible-automation-platform/ansible-builder-rhel8@sha256:b6edec09ee6ecb323cee3d566bc0cd4473468386a8a1250228bdb8ddcd40f6d6_arm64 as a component of Ansible Automation Platform Execution Environments | * |
| Red Hat | ansible-automation-platform/ee-minimal-rhel8@sha256:4ce80fd9b8c37acb6b5f0c5f7e43ec9ff3ed1d284c8d523311b7b9d227470738_amd64 as a component of Ansible Automation Platform Execution Environments | ansible-automation-platform/ee-minimal-rhel8@sha256:4ce80fd9b8c37acb6b5f0c5f7e43ec9ff3ed1d284c8d523311b7b9d227470738_amd64 |
| Red Hat | ansible-automation-platform/ee-minimal-rhel9@sha256:e930b8e316c0764f37dc4525629667b9cc310ae957431dccc0c42bf12f192b39_amd64 as a component of Ansible Automation Platform Execution Environments | ansible-automation-platform/ee-minimal-rhel9@sha256:e930b8e316c0764f37dc4525629667b9cc310ae957431dccc0c42bf12f192b39_amd64 |
| Red Hat | ansible-automation-platform/ee-minimal-rhel9@sha256:a2d818af0bdc5d3d2e8b626a6d730b248fe5d40db08c199c8299a6139a37eafc_amd64 as a component of Ansible Automation Platform Execution Environments | * |
| Red Hat | ansible-automation-platform/ansible-builder-rhel8@sha256:66b7cbf91db0428fbc412fda36816bc8ded2acfa5a2bb430da0bc2a33269f69b_s390x as a component of Ansible Automation Platform Execution Environments | ansible-automation-platform/ansible-builder-rhel8@sha256:66b7cbf91db0428fbc412fda36816bc8ded2acfa5a2bb430da0bc2a33269f69b_s390x |
| Red Hat | ansible-automation-platform/ee-minimal-rhel8@sha256:9e68c4aa8c1a1cf9ac289467f949055b4f8853aa1989f6955cb638b555b7c7c1_s390x as a component of Ansible Automation Platform Execution Environments | ansible-automation-platform/ee-minimal-rhel8@sha256:9e68c4aa8c1a1cf9ac289467f949055b4f8853aa1989f6955cb638b555b7c7c1_s390x |
| Red Hat | ansible-automation-platform/ee-minimal-rhel9@sha256:ca8b00e87d06f709665de9cec103e5f063075d975f52556ce7be03c4cd77a877_ppc64le as a component of Ansible Automation Platform Execution Environments | ansible-automation-platform/ee-minimal-rhel9@sha256:ca8b00e87d06f709665de9cec103e5f063075d975f52556ce7be03c4cd77a877_ppc64le |
| Red Hat | ansible-automation-platform/ee-29-rhel8@sha256:ccac23c975c65f04ff5f8535988bd09a3309dcf4e70eaaa200e6ad5c1792bf81_amd64 as a component of Ansible Automation Platform Execution Environments | ansible-automation-platform/ee-29-rhel8@sha256:ccac23c975c65f04ff5f8535988bd09a3309dcf4e70eaaa200e6ad5c1792bf81_amd64 |
| Red Hat | ansible-automation-platform/ansible-builder-rhel8@sha256:79eb2ec9754de91f42d33d3cbb073c8fc506c9a007c5d7e5b85261f75ab67da7_amd64 as a component of Ansible Automation Platform Execution Environments | ansible-automation-platform/ansible-builder-rhel8@sha256:79eb2ec9754de91f42d33d3cbb073c8fc506c9a007c5d7e5b85261f75ab67da7_amd64 |
…and 25 more
Timeline
- Feb 5, 2025 CVE Published
- Apr 24, 2026 CVE Updated
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2025:1101 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2327130 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2333854 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2333856 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1101.json advisory
- https://access.redhat.com/security/cve/CVE-2024-52304 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-52304 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-52304 advisory
- https://github.com/aio-libs/aiohttp/commit/259edc369075de63e6f3a4eaade058c62af0df71 advisory
- https://github.com/aio-libs/aiohttp/security/advisories/GHSA-8495-4g3g-x7pr advisory
- https://access.redhat.com/security/cve/CVE-2024-56201 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-56201 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-56201 advisory
- https://github.com/pallets/jinja/commit/767b23617628419ae3709ccfb02f9602ae9fe51f advisory
- https://github.com/pallets/jinja/issues/1792 advisory
- https://github.com/pallets/jinja/releases/tag/3.1.5 advisory
- https://github.com/pallets/jinja/security/advisories/GHSA-gmj6-6f8f-6699 advisory
- https://access.redhat.com/security/cve/CVE-2024-56326 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-56326 advisory
…and 3 more