RHSA-2025:23133 - Security Advisory

Topic

An update is now available for Red Hat Ansible Automation Platform 2.6

Description

Red Hat Ansible Automation Platform provides an enterprise framework for
building, deploying and managing IT automation at scale. IT Managers can
provide top-down guidelines on how automation is applied to individual
teams, while automation developers retain the freedom to write tasks that
leverage existing knowledge without the overhead. Ansible Automation
Platform makes it possible for users across an organization to share, vet,
and manage automation content by means of a simple, powerful, and agentless
language.

Update(s) and Fix(es):

• Added x-ai-description to controller schema to provide AI-friendly description for each endpoint (AAP-59819)
• Fixed Redis broken pipe error in long-running jobs (AAP-59728)
• Fix an issue with object storage secrets not included in the Automation Hub backup (AAP-59610)
• Doc changes for this are included in the epic AAP-53635 (AAP-59458)
• No additional docs are needed (AAP-59339)
• Removed python wheel files needed only at container build time (AAP-59254)
• Fixed the condition for AnsibleWorkflow job launch (AAP-59106)
• Add missing openshift dependency to the platform resource runner container image (AAP-59032)
• IPv6 and IPv4/IPv6 dual stack support enabled by default (AAP-58923)
• Fixed GitHub App Installation Access Token Lookup to accept Iv2 Client IDs (AAP-58880)
• Developer Preview - Added AnsibleMCPServer support to the AAP Operator (AAP-58869)
• This will add the new AAP MCP Server to 2.6 stream. Documentation-related work is being handled under the epic AAP-53635 (AAP-58863)
• Updated controller to now use the force flag when syncing a project which has 'Allow branch override' enabled (AAP-58533)
• Job template should remain editable after associated project is deleted (AAP-58467)
• Bumped receptor collection to version 2.0.8, which is compatible with RHEL 10 (AAP-58421)
• EDA event-stream mTLS configuration added to installer (AAP-58343)
• This developer preview introduces support for Ansible MCP Servers (AAP-57303)
• This new feature enables users to access the AAP 2.6 API directly from AI tools like Claude Code (AAP-57217)
• Fixes a bug where project status update link on the job details page was broken (AAP-57215)
• Brand logo in the "About" modal appears correctly when the About modal is accessed from any page of the platform UI (AAP-57133)
• Product doc is being updated under AAP-53635 (AAP-56774)
• The Resource Type filter in the Roles page correctly filters by resource types like Credential, Project and Execution Environment that are found in both Automation Execution and Automation Decisions (AAP-56691)
• The "Launched by" field is populated for project updates triggered by automation (AAP-56643)
• Update playbook select dropdown to automatically select a playbook if there is only one in the project (AAP-56279)
• Field for "Source control branch" appears in the inventory source form if the source project has "Allow branch override" enabled (AAP-56149)
• Authenticator label updated from 'Azuread' to 'Azure AD' (AAP-55677)
• Updated various aspects of the OpenAPI Specification in support of MCP MVP (AAP-53640)
• Fixes a bug where the edit form for a survey would not display in the UI if the survey was created without a default value using the ansible.controller collection (AAP-51548)
• Fix descriptions for Remotes and Remote Registries (AAP-49838)
• Adds Source control branch to Project Sync Job Details (AAP-49450)
• Collection name link works correctly when collections are displayed in the card view (AAP-49006)
• Search filter works as expected in the dialog for adding hosts to a group (AAP-47510)
• Improved custom login text for legibility and to allow for HTML markup such as links (AAP-47462)
• Filtering hosts by name works as expected in the dialog for adding hosts to a group (AAP-45534)
• Fixed url to workflow job template output from notifications (AAP-43796)
• Search filter works as expected when invoked from any page within the Hosts list (AAP-42679)
• Updated messaging when job template creation is not available: Job template creation requires project access and the user is not currently assigned to any projects (AAP-40800)
• Fix repository url in details page (AAP-40160)
• Fixes a survey validation issue where the minimum length value of a question could be set to greater than the maximum length value (AAP-39932)
• Fixes survey validation issue with text being treated as a number when evaluating its length (AAP-39931)
• The Create Schedule UI should not present the option to select a constructed inventory when the resource type is Inventory source (AAP-38660)
• Fixes an issue with survey answers not being saved when editing or creating a schedule (AAP-37923)
• Fixes a bug where instance groups on a schedule could not be edited (AAP-37872)
• Fix timestamps in Task Management (AAP-36588)
• The verify_ssl checkbox will appear checked by default in the Create Credential form. If the checkbox is explicitly unchecked, this will be reflected correctly in the API request from the UI (AAP-33889)
• Update formatting of large numbers in the extra vars field (AAP-31805)

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.
For details on how to apply this update, refer to:
https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6#Upgrading

Affected Products

• Red Hat Ansible Automation Platform

Fixes

CVEs

• CVE-2025-62727
• CVE-2025-64459

References

• https://access.redhat.com/security/updates/classification/
• https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6/html/release_notes/patch_releases