Installer Fix and CVE Updates
At the Foreman Release Team Meeting on July 1, 2026, it was reported that the previously malfunctioning foreman-installer-source-release is now working again. The issue was resolved by two pull requests that restored compatibility between Podman and puppetlabs-concat. In the Nightly branch, as well as in the stable branches 3.18 and 3.19, four CVE fixes will also be released on the same day.
Candlepin 4.8 and OCI Images
In addition, Candlepin version 4.8 has been released, and the Foreman OCI team is currently working on updating the corresponding Candlepin image to version 4.8.2. At the same time, Odilon is working to ensure that genuine Nightly containers are automatically created in the future as soon as the katello-nightly-rpm pipeline runs successfully, rather than only when merges are made into the OCI repositories, as has been the case so far.
Foreman 3.18 and 3.19
For Foreman 3.19, version 3.19.0 is currently the latest version, and a release of 3.19.1 is expected today or tomorrow. In Foreman 3.18, the CI is green, which is why version 3.18.2 is also expected shortly.
Katello 4.20 and 4.21
On the Katello side, version 4.21.0 has already been officially released, while version 4.20.1 is available in the 4.20 series; although there is discussion of a possible 4.20.2, its release is considered rather unlikely. There was no news regarding Pulp integration this time.
