Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
Red Hat Ansible Automation Platform 2.5 includes a security update addressing a vulnerability in the automation-controller component where the aiohttp library incorrectly parses chunk extensions, leading to HTTP request smuggling (CVE-2024-52304). This vulnerability is rated as moderate severity by Red Hat. The update also includes various bug fixes and improvements across the platform components. The advisory covers multiple architectures and Red Hat Enterprise Linux versions 8 and 9. No CVSS score is provided for this vulnerability.
AI Analysis
Technical Summary
The Red Hat Ansible Automation Platform 2.5 security advisory (RHSA-2024:10766) addresses a moderate severity vulnerability (CVE-2024-52304) in the automation-controller component. The issue involves the aiohttp library being vulnerable to HTTP request smuggling due to incorrect parsing of chunk extensions. This could potentially allow an attacker to interfere with HTTP request processing. The update to automation-controller version 4.6.3 includes the fix for this vulnerability. Additional bug fixes and enhancements are included in this release for various platform components such as Receptor, container-based and RPM-based Ansible Automation Platform. The advisory affects multiple architectures and RHEL 8 and 9 versions of the platform.
Potential Impact
The vulnerability could allow an attacker to exploit HTTP request smuggling via the automation-controller's use of aiohttp, potentially impacting the integrity of HTTP request handling. Red Hat rates this issue as moderate severity. No evidence of known exploits in the wild is reported. The impact is limited to the automation-controller component within the Ansible Automation Platform 2.5.
Mitigation Recommendations
A security update is available that fixes the vulnerability by updating the automation-controller to version 4.6.3. Users of Red Hat Ansible Automation Platform 2.5 should apply this update promptly. The advisory does not indicate any temporary workarounds or that no action is required. Follow Red Hat's official update process to remediate this issue.
Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
Description
Red Hat Ansible Automation Platform 2.5 includes a security update addressing a vulnerability in the automation-controller component where the aiohttp library incorrectly parses chunk extensions, leading to HTTP request smuggling (CVE-2024-52304). This vulnerability is rated as moderate severity by Red Hat. The update also includes various bug fixes and improvements across the platform components. The advisory covers multiple architectures and Red Hat Enterprise Linux versions 8 and 9. No CVSS score is provided for this vulnerability.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Red Hat Ansible Automation Platform 2.5 security advisory (RHSA-2024:10766) addresses a moderate severity vulnerability (CVE-2024-52304) in the automation-controller component. The issue involves the aiohttp library being vulnerable to HTTP request smuggling due to incorrect parsing of chunk extensions. This could potentially allow an attacker to interfere with HTTP request processing. The update to automation-controller version 4.6.3 includes the fix for this vulnerability. Additional bug fixes and enhancements are included in this release for various platform components such as Receptor, container-based and RPM-based Ansible Automation Platform. The advisory affects multiple architectures and RHEL 8 and 9 versions of the platform.
Potential Impact
The vulnerability could allow an attacker to exploit HTTP request smuggling via the automation-controller's use of aiohttp, potentially impacting the integrity of HTTP request handling. Red Hat rates this issue as moderate severity. No evidence of known exploits in the wild is reported. The impact is limited to the automation-controller component within the Ansible Automation Platform 2.5.
Mitigation Recommendations
A security update is available that fixes the vulnerability by updating the automation-controller to version 4.6.3. Users of Red Hat Ansible Automation Platform 2.5 should apply this update promptly. The advisory does not indicate any temporary workarounds or that no action is required. Follow Red Hat's official update process to remediate this issue.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2024:10766
- Cve Count
- 2
- Additional Cves
- ["CVE-2024-53259"]
Threat ID: 6a1f4e97e29bf47b500862d4
Added to database: 06/02/2026, 21:43:51 UTC
Last enriched: 08/16/2026, 18:49:59 UTC
Last updated: 09/10/2026, 19:36:48 UTC
Views: 93
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.