OLAMSA-2025-0003

OLAMSA-2025-0003 - OLAM2.2 Security Update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2025-04-14

Description

ol-automation-manager
[2.2.0-31.el8]
- Remove restart on failure option for receptor-awx.service

[2.2.0-30.el8]
- OLAM-708 Apply patch for CVE-2025-27516
- OLAM-719 Apply patch for CVE-2025-26699

[2.2.0-29.el8]
- OLAM-677 Apply patch for CVE-2024-52304

[2.2.0-28.el8]
- OLAM-676 Apply patch for CVE-2024-35195 (requests-2.28.1 and requests-2.31.0 patched)

[2.2.0-27.el8]
- OLAM-502 Upgrade certifi 2025.1.31 to fix CVE-2024-39689

[2.2.0-26.el8]
- Adds restart on failure option for receptor-awx.service [Orabug: 37199481]

python-aiohttp
[3.9.3-1.0.3]
- OLAM-677 Apply patch for CVE-2024-52304

python-django
[4.2.17-1.0.1]
- Apply patch for CVE-2025-26699 [JIRA: OLAM-719]

python-requests
[2.31.0-1.0.3]
- OLAM-676 Apply patch for CVE-2024-35195

python-jinja2
[3.1.3-1.0.4]
- Apply patch for CVE-2025-27516 [JIRA: OLAM-708]

Related CVEs

CVE-2025-27516

CVE-2024-52304

CVE-2024-35195

CVE-2024-39689

CVE-2025-26699

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (x86_64)	ol-automation-manager-2.2.0-31.el8.src.rpm	51329fb153bf39b1c4a3f2b92bd90048b52098b1d9496d19a540f61137c709dd	-	ol8_x86_64_automation2.2
	python-aiohttp-3.9.3-1.0.3.el8.src.rpm	5fb5f73ecc6db18585735f4399a63e317cf1907bdf210f369db54dfd60aeeddb	-	ol8_x86_64_automation2.2
	python-django-4.2.17-1.0.1.el8.src.rpm	56568765e184c7a51e657f46170999f11260cef838ea54c83337b12cfc118eaa	-	ol8_x86_64_automation2.2
	python-jinja2-3.1.3-1.0.4.el8.src.rpm	cd0a7acccb3a9f7ac08a51604151f9efd3b28059218d9717da4a35fbe9635a7f	-	ol8_x86_64_automation2.2
	python-requests-2.31.0-1.0.3.el8.src.rpm	a263ae0ba1e826edb812fff500a2421ca18f3cffbd0143ad0afc4307e4d8d8e1	-	ol8_x86_64_automation2.2
	ol-automation-manager-2.2.0-31.el8.x86_64.rpm	0968f71d5f2ff9df8a0447f66cfc561df7a1c088b20a040bec77a61d5e48026d	-	ol8_x86_64_automation2.2
	ol-automation-manager-cli-2.2.0-31.el8.noarch.rpm	8b3569cd9f4cb6b7c6e966d479c291eab097519cd1faf98aec497bac98a41b6d	-	ol8_x86_64_automation2.2
	python3.11-aiohttp-3.9.3-1.0.3.el8.x86_64.rpm	c30c7ffe417bc1092a839cb26ee5e858572f758c66fe73b3128ce07e856d63f9	-	ol8_x86_64_automation2.2
	python3.11-django-4.2.17-1.0.1.el8.noarch.rpm	f40fbcff82a2493d6bc6f164220c12ea3cd3fb89c8feaa6498f4aab81fd621f1	-	ol8_x86_64_automation2.2
	python3.11-jinja2-3.1.3-1.0.4.el8.noarch.rpm	8f123a5608301a816cdf40d4b3413e499f9c2779be8fc2be9d96e6f3405edadd	-	ol8_x86_64_automation2.2
	python3.11-requests-2.31.0-1.0.3.el8.noarch.rpm	80dcc3f1858040c79ca4b0432d2bbade229a751cb452afd541c893f74f27cfdd	-	ol8_x86_64_automation2.2
	python311-olamkit-2.2.0-31.el8.noarch.rpm	913ed11cce4fa84d3054aab514f777119bbc2ed0194073b97d9e365c34c6282c	-	ol8_x86_64_automation2.2

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team