[CLSA-2026:1788175790] ansible-core: Fix of CVE-2026-11332
Type:
security
Severity:
Important
Release date:
2026-08-31 11:30:02 UTC
Description:
- CVE-2026-11332: pass the role requirement src and name as positional git clone arguments, so a requirement beginning with a dash can no longer inject git configuration and execute commands during ansible-galaxy role install.
CVEs fixed:
Updated packages:
  • ansible-core-2.14.18-1.el9_6.tuxcare.els1.x86_64.rpm
    sha:f434ddb59cbdd0bcdb53cdb35694a8a96462eb1a746c5644e854bd4d664e417d
  • ansible-test-2.14.18-1.el9_6.tuxcare.els1.x86_64.rpm
    sha:a338c3b83e742268a2be34733d3aa69884af44558bd97636003cc18d7df34f8a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.