[El-errata] OLAMSA-2025-0007 Critical: Oracle Linux 8 ol-automation-manager security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory OLAMSA-2025-0007

http://linux.oracle.com/errata/OLAMSA-2025-0007.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
ol-automation-manager-2.2.0-38.el8.x86_64.rpm
ol-automation-manager-cli-2.2.0-38.el8.noarch.rpm
python311-olamkit-2.2.0-38.el8.noarch.rpm
python3.11-jinja2-3.1.3-1.0.5.el8.noarch.rpm
python3.11-pulpcore-3.28.26-1.0.6.el8.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates//ol-automation-manager-2.2.0-38.el8.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates//python-jinja2-3.1.3-1.0.5.el8.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates//python-pulpcore-3.28.26-1.0.6.el8.src.rpm

Related CVEs:

CVE-2024-4067
CVE-2024-7143
CVE-2024-56326
CVE-2024-53907
CVE-2024-53908




Description of changes:

ol-automation-manager
[2.2.0-38.el8]
- Fix for CVE-2024-53907
- Fix for CVE-2024-53908

[2.2.0-37.el8]
- OLAM-823 Apply patch for CVE-2024-56326 ( Jinja2 3.1.2 )

[2.2.0-36.el8]
- OLAM-796 Fix for CVE-2024-53907 (Django 4.2.6)

[2.2.0-35.el8]
- OLAM-787 Apply patch for CVE-2024-4067 ( micromatch 4.0.2, 4.0.7 )

python-jinja2
[3.1.3-1.0.5]
- Apply patch for CVE-2024-56326 [JIRA: OLAM-823]

python-pulpcore
[3.28.26-1.0.6]
- OLAM-510 Fix for CVE-2024-7143