Oracle Errata System Oracle Linux 5.11 2025-08-26T12:49:18 Oracle Linux 8 ol-automation-manager [2.2.0-25.el8] - OLAM-683 Apply patch for CVE-2024-56201 (Jinja2-3.1.2 patched) [2.2.0-24.el8] - OLAM-600 Upgrade virtualenv>=20.26.6 to fix CVE-2024-53899 - OLAM-657 Apply patch for CVE-2024-53908 (Django 4.2.6 patched) [2.2.0-23.el8] - OLAM-597 Upgrade setuptools>=70.0 to fix CVE-2024-6345 [2.2.0-22.el8] - OLAM-518 Patch for CVE-2024-26130 - OLAM-519 Patch for CVE-2023-49083 [2.2.0-21.el8] - OLAM-521 Patch for sqlparse-0.4.4 - CVE-2024-4340 [2.2.0-20.el8] - OLAM-616 Bump venvctrl to 0.9.0 (python 3.11.11 compatible) python-django [4.2.17-1.0.0] - OLAM 658 Bump version to mitigate CVE-2024-53908 python3.11-cryptography [41.0.7-1.0.1] - OLAM-518 Apply patch for CVE-2024-26130 python-jinja2 [3.1.3-1.0.3] - Apply patch for CVE-2024-56201 [JIRA: OLAM-683] IMPORTANT Copyright 2025 Oracle, Inc. CVE-2024-26130 CVE-2023-49083 CVE-2024-6345 CVE-2024-4340 CVE-2024-5620 CVE-2024-53899 CVE-2024-53908 cpe:/a:oracle:linux_automation_manager:2.2 Oracle Linux 8 python-galaxy-ng [4.9.1-0.0.8] - Update axios to 1.8.4 to mitagate CVE-2025-27152 ol-automation-manager [2.2.0-40.el8] - OLAM-506 Apply patch for CVE-2024-37890 ( ws 7.5.9, 8.5.10 ) - OLAM-799 Upgrade jaraco-functools==4.0.0 [2.2.0-39.el8] - OLAM-799 Upgrade setuptools==78.1.1 to fix CVE-2025-47273 MODERATE Copyright 2025 Oracle, Inc. CVE-2025-27151 CVE-2025-47273 CVE-2024-37890 cpe:/a:oracle:linux_automation_manager:2.2 Oracle Linux 8 Release Oracle Automation Manager 2.3 IMPORTANT Copyright 2025 Oracle, Inc. CVE-2024-32650 CVE-2024-53907 CVE-2024-56326 CVE-2025-27516 CVE-2024-53427 CVE-2024-26130 CVE-2025-47273 CVE-2024-4067 CVE-2024-7143 CVE-2024-6345 cpe:/a:oracle:linux_automation_manager:2.2 cpe:/a:oracle:linux_automation_manager:2.3 cpe:/a:oracle:linux_automation_manager:2.1 Oracle Linux 8 ol-automation-manager [2.2.0-38.el8] - Fix for CVE-2024-53907 - Fix for CVE-2024-53908 [2.2.0-37.el8] - OLAM-823 Apply patch for CVE-2024-56326 ( Jinja2 3.1.2 ) [2.2.0-36.el8] - OLAM-796 Fix for CVE-2024-53907 (Django 4.2.6) [2.2.0-35.el8] - OLAM-787 Apply patch for CVE-2024-4067 ( micromatch 4.0.2, 4.0.7 ) python-jinja2 [3.1.3-1.0.5] - Apply patch for CVE-2024-56326 [JIRA: OLAM-823] [3.1.3-1.0.4] - Apply patch for CVE-2025-27516 [JIRA: OLAM-708] [3.1.3-1.0.3] - Apply patch for CVE-2024-56201 [JIRA: OLAM-683] [3.1.3-1.0.2] - Update to 3.1.3 - Rebuild with python 3.11 [3.1.2-1.0.2] - Add 3rd party licenses [3.1.2-1.0.1] - Rebuild for Python 3.9 [JIRA: OLAM-32] * Tue Sep 20 2022 Odilon Sousa 3.1.2-1 - Update to 3.1.2 [3.0.3-2] - Build against python 3.9 [3.0.3-1] - Release python-jinja2 3.0.3 [3.0.2-1] - Release python-jinja2 3.0.2 * Mon Sep 06 2021 Evgeni Golov - 2.11.3-2 - Build against Python 3.8 * Fri Mar 19 2021 Evgeni Golov 2.11.3-1 - Update to 2.11.3 * Tue Apr 14 2020 Evgeni Golov 2.11.2-1 - Update to 2.11.2 [2.11.1-2] - Bump release to build for el8 * Wed Feb 05 2020 Evgeni Golov 2.11.1-1 - Update to 2.11.1 * Mon Nov 18 2019 Evgeni Golov - 2.10.3-1 - Initial package. python-pulpcore [3.28.26-1.0.6] - OLAM-510 Fix for CVE-2024-7143 [3.28.26-1.0.5] - Add psycopg requires [3.28.26-1.0.4] - Replace psycopg[binary] with psycopg-c requirement [3.28.26-1.0.3] - Removes async-timeout as a dependency [3.28.26-1.0.2] - Use autogenerated pulpcore dependencies instead of manual ones. [3.28.26-1.0.1] - Update to 3.28.26 - Rebuild with python 3.11 - drop cryptography.patch [3.21.4-1.0.2] - Add NOTICE and THIRD_PARTY_LICENSES.txt [3.21.4-1.0.1] - Rebuild for Python 3.9 [JIRA: OLAM-32] [3.21.4-1] - Release python-pulpcore 3.21.4 * Tue Sep 20 2022 Odilon Sousa 3.21.0-1 - Update to 3.21.0 [3.18.10-1] - Release python-pulpcore 3.18.10 [3.18.6-1] - Release python-pulpcore 3.18.6 [3.18.5-2] - Adding a sed to change redis on requirements.txt, from ~= to >= [3.18.5-1] - Release python-pulpcore 3.18.5 [3.18.4-4] - Obsolete the old Python 3.8 package for smooth upgrade [3.18.4-3] - Fixing pulpcore requirements for djangorestframework [3.18.4-2] - Fixing the requirement for url-normalize [3.18.4-1] - Release python-pulpcore 3.18.4 [3.17.3-2] - Build against python 3.9 [3.17.3-1] - Release python-pulpcore 3.17.3 [3.16.1-1] - update to 3.16.1 [3.16.0-2] - Solving conflict with django-filter [3.16.0-1] - Release python-pulpcore 3.16.0 * Tue Oct 26 2021 Evgeni Golov - 3.15.2-4 - Also obsolete python3-pulpcore on EL7 * Wed Oct 20 2021 Evgeni Golov - 3.15.2-3 - Add provides for 'pulpcore' * Wed Sep 29 2021 Evgeni Golov - 3.15.2-2 - Obsolete the old Python 3.6 package for smooth upgrade * Wed Sep 08 2021 Evgeni Golov 3.15.2-1 - Update to 3.15.2 [3.14.5-2] - Release python-pulpcore 3.14.5 [3.14.5-1] - Release python-pulpcore 3.14.5 [3.14.4-1] - Release python-pulpcore 3.14.4 [3.14.3-1] - upgrade to 3.14.3 [3.14.1-1] - update to 3.14.1 * Fri Jul 02 2021 Evgeni Golov - 3.14.0-1 - Release python-pulpcore 3.14.0 * Thu Jun 17 2021 Evgeni Golov - 3.13.0-2 - place the worker wrapper in libexec * Fri Jun 11 2021 Evgeni Golov 3.13.0-1 - Update to 3.13.0 * Mon May 31 2021 Evgeni Golov - 3.11.2-1 - Release python-pulpcore 3.11.2 * Wed May 12 2021 Evgeni Golov 3.11.1-1 - Update to 3.11.1 [3.11.0-2] - add patch for issue 8603 * Fri Mar 19 2021 Evgeni Golov 3.11.0-1 - Update to 3.11.0 * Wed Mar 03 2021 Brian Bouterse - 3.9.1-2 - Increase Pulp worker timeout to 300 seconds * Fri Jan 22 2021 Evgeni Golov - 3.9.1-1 - Release python-pulpcore 3.9.1 * Mon Jan 11 2021 Evgeni Golov - 3.9.0-1 - Update to 3.9.0 * Mon Dec 21 2020 Evgeni Golov - 3.8.1-2 - Drop django-storages requirement, it was an oversight to add it * Fri Dec 11 2020 Evgeni Golov 3.8.1-1 - Update to 3.8.1 * Tue Nov 03 2020 Evgeni Golov 3.7.3-1 - Update to 3.7.3 * Fri Oct 23 2020 Evgeni Golov - 3.7.2-1 - Release python-pulpcore 3.7.2 * Fri Oct 09 2020 Evgeni Golov - 3.7.1-3 - Bump dynaconf Requires to skip RCs [3.7.1-2] - Add libexec wrappers for gunicorn and rq * Wed Sep 30 2020 Evgeni Golov 3.7.1-1 - Update to 3.7.1 * Mon Sep 07 2020 Evgeni Golov 3.6.3-1 - Update to 3.6.3 [3.6.2-2] - add missing jinja2 dep * Thu Sep 03 2020 Evgeni Golov 3.6.2-1 - Update to 3.6.2 * Tue Aug 25 2020 Evgeni Golov 3.6.0-1 - Update to 3.6.0 * Thu Jun 04 2020 Evgeni Golov 3.4.1-1 - Update to 3.4.1 * Fri May 08 2020 Evgeni Golov 3.3.1-1 - Update to 3.3.1 * Tue Apr 28 2020 Evgeni Golov 3.3.0-1 - Update to 3.3.0 * Wed Mar 18 2020 Samir Jha 3.2.1-1 - Update to 3.2.1 [3.0.1-2] - Bump release to build for el8 * Fri Jan 17 2020 Evgeni Golov 3.0.1-1 - Update to 3.0.1 * Fri Dec 13 2019 Evgeni Golov 3.0.0-1 - Update to 3.0.0 * Mon Nov 18 2019 Evgeni Golov - 3.0.0rc8-1 - Initial package. CRITICAL Copyright 2025 Oracle, Inc. CVE-2024-53908 CVE-2024-7143 CVE-2024-56326 CVE-2024-4067 CVE-2024-53907 cpe:/a:oracle:linux_automation_manager:2.2 Oracle Linux 8 [2.2.0-33.el8] - OLAM-707 Apply patch for CVE-2025-27152 [2.2.0-32.el8] - OLAM-318 Replace var ANSIBLE_COLLECTIONS_PATHS for singular form (ANSIBLE_COLLECTIONS_PATH). MODERATE Copyright 2025 Oracle, Inc. CVE-2025-27152 cpe:/a:oracle:linux_automation_manager:2.2 Oracle Linux 8 ol-automation-manager [2.2.0-31.el8] - Remove restart on failure option for receptor-awx.service [2.2.0-30.el8] - OLAM-708 Apply patch for CVE-2025-27516 - OLAM-719 Apply patch for CVE-2025-26699 [2.2.0-29.el8] - OLAM-677 Apply patch for CVE-2024-52304 [2.2.0-28.el8] - OLAM-676 Apply patch for CVE-2024-35195 (requests-2.28.1 and requests-2.31.0 patched) [2.2.0-27.el8] - OLAM-502 Upgrade certifi 2025.1.31 to fix CVE-2024-39689 [2.2.0-26.el8] - Adds restart on failure option for receptor-awx.service [Orabug: 37199481] python-aiohttp [3.9.3-1.0.3] - OLAM-677 Apply patch for CVE-2024-52304 python-django [4.2.17-1.0.1] - Apply patch for CVE-2025-26699 [JIRA: OLAM-719] python-requests [2.31.0-1.0.3] - OLAM-676 Apply patch for CVE-2024-35195 python-jinja2 [3.1.3-1.0.4] - Apply patch for CVE-2025-27516 [JIRA: OLAM-708] IMPORTANT Copyright 2025 Oracle, Inc. CVE-2025-27516 CVE-2024-52304 CVE-2024-35195 CVE-2024-39689 CVE-2025-26699 cpe:/a:oracle:linux_automation_manager:2.2