Summary
[2.16.16-2.0.1.el10_2.1]
- exclude telemetry from Oracle Linux
[1:2.16.16-2.1]
- Fix CVE-2026-11332 (ansible-galaxy role installs could allow
arbitrary git configuration injection via malformed role
requirements) (RHEL-194128)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | ansible-core | 1:2.16.16-2.0.1.el10_2.1 |
| Oracle Linux · 10 | ansible-test | 1:2.16.16-2.0.1.el10_2.1 |
Vulnerabilities 1
-
High 7.8
Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution
A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git con…