RHBA-2025:9987 - Bug Fix Advisory

Topic

An update is now available for Red Hat Ansible Automation Platform 2.5

Description

Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language.

Update(s) and Fix(es):

• Ansible Lightspeed has been updated to 2.5.250702
• The ansible.controller collection has been updated to 4.6.16
• The ansible.eda collection has been updated to 2.8.1
• The ansible.platform collection has been updated to 2.5.20250702
• Fixed PVC support for AnsibleAutomationPlatformRestores (AAP-48388)
• Fixed jquery version in the redirect page (AAP-47160)
• Ingress class name can be configured on the Automation Hub CR (AAP-47054)
• Added missing resources limit on Automation Hub API init containers (AAP-47053)
• Fixed default values for worker pods (AAP-47045)
• Fixed readinessProbe configuration in the PostgreSQL statefulset definition (AAP-47043)
• Fixed a bug on k8s-based deployments where activations hung while being deleted or disabled (AAP-46559)
• Annotation can be added to the Route by specifying spec.route_annotations on theAnsibleAutoamationPlatform and AutomationController custom resources (AAP-45952)
• In Openshift, you can now idle AAP while keeping the managed database up and running with the AAP.spec.database.idle_disabled parameter (AAP-45951)
• The EDA Operator now has the ability to migrate the database from another deployment of AAP to a new AAP instance. This can be used to move from one openshift cluster or namespace to another (AAP-45818)
• New installations of Ansible Lightspeed using the Ansible Automation Platform Custom Resource will automatically integrate with AAP's OAuth mechanism. The "auth_config_secret_name" setting is optional (AAP-45686)
• You can now idle AAP without idling the managed PostgreSQL database (AAP-45432)
• Fixed a bug where the activation could get stuck in "disabling" or "deleting" state under openshift (AAP-45298)
• New installations of Ansible Lightspeed using the Ansible Automation Platform Custom Resource will automatically integrate with AAP's OAuth mechanism. The "auth_config_secret_name" setting is optional (AAP-41659)

Solution

Red Hat Ansible Automation Platform

Affected Products

• Red Hat Ansible Automation Platform 2.5 for RHEL 9 x86_64
• Red Hat Ansible Automation Platform 2.5 for RHEL 9 s390x
• Red Hat Ansible Automation Platform 2.5 for RHEL 9 ppc64le
• Red Hat Ansible Automation Platform 2.5 for RHEL 9 aarch64
• Red Hat Ansible Automation Platform 2.5 for RHEL 8 x86_64
• Red Hat Ansible Automation Platform 2.5 for RHEL 8 s390x
• Red Hat Ansible Automation Platform 2.5 for RHEL 8 ppc64le
• Red Hat Ansible Automation Platform 2.5 for RHEL 8 aarch64

Fixes

CVEs

• CVE-2016-9840
• CVE-2023-40403
• CVE-2024-52005
• CVE-2025-3576
• CVE-2025-4802
• CVE-2025-22871
• CVE-2025-32414

References

(none)