Summary
[1:2.14.18-3.1]
- Fix CVE-2026-11332 (prevent arbitrary git configuration via role
requirements) (RHEL-194134)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | ansible-core | 1:2.14.18-3.el9_8.1 |
| Oracle Linux · 9 | ansible-test | 1:2.14.18-3.el9_8.1 |
Vulnerabilities 1
-
High 7.8
Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution
A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git con…