Red Hat Security Advisory: Red Hat OpenStack Platform 17.1.4 (openstack-ansible-core) security update
An ansible-core rebuild for OpenStack based on python 3.9. Security Fix(es): * Jinja has a sandbox breakout through malicious filenames (CVE-2024-56201) * Jinja has a sandbox breakout through indirect reference to format method (CVE-2024-56326) * Ansible-core user may read/write unauthorized content (CVE-2024-9902) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.
AI Analysis
Technical Summary
This advisory covers a security update for Red Hat OpenStack Platform 17.1.4, specifically a rebuild of ansible-core based on Python 3.9. It addresses three vulnerabilities: two sandbox breakout issues in Jinja (CVE-2024-56201 via malicious filenames and CVE-2024-56326 via indirect reference to the format method) and a vulnerability in ansible-core (CVE-2024-9902) that allows users to read or write unauthorized content. These vulnerabilities affect openstack-ansible-core versions prior to 17.1.4. The update fixes these issues and is classified as Important by Red Hat Product Security.
Potential Impact
The vulnerabilities allow for sandbox breakout in Jinja templates, potentially enabling malicious template code execution beyond intended restrictions, and unauthorized read/write access by ansible-core users. This could lead to unauthorized content access or modification within affected OpenStack deployments. No known exploits in the wild have been reported at the time of this advisory.
Mitigation Recommendations
A security update to openstack-ansible-core version 17.1.4 is available and should be applied to affected Red Hat OpenStack Platform 17.1 deployments. The update rebuilds ansible-core based on Python 3.9 and addresses the identified vulnerabilities. Refer to the Red Hat advisory RHSA-2025:1861 and the update article https://access.redhat.com/articles/11258 for detailed instructions. No additional mitigation steps are indicated by the vendor.
Red Hat Security Advisory: Red Hat OpenStack Platform 17.1.4 (openstack-ansible-core) security update
Description
An ansible-core rebuild for OpenStack based on python 3.9. Security Fix(es): * Jinja has a sandbox breakout through malicious filenames (CVE-2024-56201) * Jinja has a sandbox breakout through indirect reference to format method (CVE-2024-56326) * Ansible-core user may read/write unauthorized content (CVE-2024-9902) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This advisory covers a security update for Red Hat OpenStack Platform 17.1.4, specifically a rebuild of ansible-core based on Python 3.9. It addresses three vulnerabilities: two sandbox breakout issues in Jinja (CVE-2024-56201 via malicious filenames and CVE-2024-56326 via indirect reference to the format method) and a vulnerability in ansible-core (CVE-2024-9902) that allows users to read or write unauthorized content. These vulnerabilities affect openstack-ansible-core versions prior to 17.1.4. The update fixes these issues and is classified as Important by Red Hat Product Security.
Potential Impact
The vulnerabilities allow for sandbox breakout in Jinja templates, potentially enabling malicious template code execution beyond intended restrictions, and unauthorized read/write access by ansible-core users. This could lead to unauthorized content access or modification within affected OpenStack deployments. No known exploits in the wild have been reported at the time of this advisory.
Mitigation Recommendations
A security update to openstack-ansible-core version 17.1.4 is available and should be applied to affected Red Hat OpenStack Platform 17.1 deployments. The update rebuilds ansible-core based on Python 3.9 and addresses the identified vulnerabilities. Refer to the Red Hat advisory RHSA-2025:1861 and the update article https://access.redhat.com/articles/11258 for detailed instructions. No additional mitigation steps are indicated by the vendor.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:1861
- Cve Count
- 3
- Additional Cves
- ["CVE-2024-56201","CVE-2024-56326"]
Threat ID: 6a1f4e8de29bf47b500852eb
Added to database: 06/02/2026, 21:43:41 UTC
Last enriched: 08/11/2026, 20:38:59 UTC
Last updated: 09/10/2026, 19:36:49 UTC
Views: 69
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.