OLAMSA-2025-0002

OLAMSA-2025-0002 - OLAM 2.2 security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2025-02-14

Description

ol-automation-manager
[2.2.0-25.el8]
- OLAM-683 Apply patch for CVE-2024-56201 (Jinja2-3.1.2 patched)

[2.2.0-24.el8]
- OLAM-600 Upgrade virtualenv>=20.26.6 to fix CVE-2024-53899
- OLAM-657 Apply patch for CVE-2024-53908 (Django 4.2.6 patched)

[2.2.0-23.el8]
- OLAM-597 Upgrade setuptools>=70.0 to fix CVE-2024-6345

[2.2.0-22.el8]
- OLAM-518 Patch for CVE-2024-26130
- OLAM-519 Patch for CVE-2023-49083

[2.2.0-21.el8]
- OLAM-521 Patch for sqlparse-0.4.4 - CVE-2024-4340

[2.2.0-20.el8]
- OLAM-616 Bump venvctrl to 0.9.0 (python 3.11.11 compatible)

python-django
[4.2.17-1.0.0]
- OLAM 658 Bump version to mitigate CVE-2024-53908

python3.11-cryptography
[41.0.7-1.0.1]
- OLAM-518 Apply patch for CVE-2024-26130

python-jinja2
[3.1.3-1.0.3]
- Apply patch for CVE-2024-56201 [JIRA: OLAM-683]

Related CVEs

CVE-2024-26130

CVE-2023-49083

CVE-2024-6345

CVE-2024-4340

CVE-2024-5620

CVE-2024-53899

CVE-2024-53908

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 8 (x86_64)	ol-automation-manager-2.2.0-25.el8.src.rpm	974bf1c7191e8c892c00a9406a118eb8	-	ol8_x86_64_automation2.2
	python-django-4.2.17-1.0.0.el8.src.rpm	59d169e78a34219d2abf364ff1d70923	-	ol8_x86_64_automation2.2
	python-jinja2-3.1.3-1.0.3.el8.src.rpm	2a9ad6161dbb04e3a921e7229386daa2	-	ol8_x86_64_automation2.2
	python3.11-cryptography-41.0.7-1.0.1.el8.src.rpm	be170aef449e006533c78b2331a7b2da	-	ol8_x86_64_automation2.2
	ol-automation-manager-2.2.0-25.el8.x86_64.rpm	911a1b12102fbeacdbda122a4436708f	-	ol8_x86_64_automation2.2
	ol-automation-manager-cli-2.2.0-25.el8.noarch.rpm	fc2b0f606f028a1bb5660a326ca6b73b	-	ol8_x86_64_automation2.2
	python3.11-cryptography-41.0.7-1.0.1.el8.x86_64.rpm	ba0d0d60dde0f75c4bcc76f2b665096f	-	ol8_x86_64_automation2.2
	python3.11-django-4.2.17-1.0.0.el8.noarch.rpm	e3f4f01f26b0fc5f96a273a33503ec76	-	ol8_x86_64_automation2.2
	python3.11-jinja2-3.1.3-1.0.3.el8.noarch.rpm	7f482eafeaffdc2753cab0d857b2b8c0	-	ol8_x86_64_automation2.2
	python311-olamkit-2.2.0-25.el8.noarch.rpm	1622a8f499067bd0e1f3ea1e5d24cef2	-	ol8_x86_64_automation2.2