[El-errata] OLAMSA-2025-0003 Important: Oracle Linux 8 OLAM2.2 Security Update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory OLAMSA-2025-0003

http://linux.oracle.com/errata/OLAMSA-2025-0003.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
ol-automation-manager-2.2.0-31.el8.x86_64.rpm
ol-automation-manager-cli-2.2.0-31.el8.noarch.rpm
python311-olamkit-2.2.0-31.el8.noarch.rpm
python3.11-aiohttp-3.9.3-1.0.3.el8.x86_64.rpm
python3.11-django-4.2.17-1.0.1.el8.noarch.rpm
python3.11-requests-2.31.0-1.0.3.el8.noarch.rpm
python3.11-jinja2-3.1.3-1.0.4.el8.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates//ol-automation-manager-2.2.0-31.el8.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates//python-aiohttp-3.9.3-1.0.3.el8.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates//python-django-4.2.17-1.0.1.el8.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates//python-requests-2.31.0-1.0.3.el8.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates//python-jinja2-3.1.3-1.0.4.el8.src.rpm

Related CVEs:

CVE-2025-26699
CVE-2024-52304
CVE-2024-35195
CVE-2025-27516
CVE-2024-39689




Description of changes:


ol-automation-manager
[2.2.0-31.el8]
- Remove restart on failure option for receptor-awx.service

[2.2.0-30.el8]
- OLAM-708 Apply patch for CVE-2025-27516
- OLAM-719 Apply patch for CVE-2025-26699

[2.2.0-29.el8]
- OLAM-677 Apply patch for CVE-2024-52304

[2.2.0-28.el8]
- OLAM-676 Apply patch for CVE-2024-35195 (requests-2.28.1 and requests-2.31.0 patched)

[2.2.0-27.el8]
- OLAM-502 Upgrade certifi 2025.1.31 to fix CVE-2024-39689

[2.2.0-26.el8]
- Adds restart on failure option for receptor-awx.service [Orabug: 37199481]

python-aiohttp
[3.9.3-1.0.3]
- OLAM-677 Apply patch for CVE-2024-52304

python-django
[4.2.17-1.0.1]
- Apply patch for CVE-2025-26699 [JIRA: OLAM-719]

python-requests
[2.31.0-1.0.3]
- OLAM-676 Apply patch for CVE-2024-35195

python-jinja2
[3.1.3-1.0.4]
- Apply patch for CVE-2025-27516 [JIRA: OLAM-708]1