ansible-core-2.14.18-3.el9_8.1.ML.1
エラータID: AXSA:2026-1731:02
リリース日:
2026/09/02 Wednesday - 14:38
題名:
ansible-core-2.14.18-3.el9_8.1.ML.1
影響のあるチャネル:
MIRACLE LINUX 9 for x86_64
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- ansible-core の ansible-galaxy role install コマンドには、
任意の引数を挿入できてしまう問題があるため、ローカルの攻撃者により、
任意のコードの実行を可能とする脆弱性が存在します。(CVE-2026-11332)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2026-11332
A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field. This allows arbitrary code execution on the machine of a user who installs the role via ansible-galaxy role install.
A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field. This allows arbitrary code execution on the machine of a user who installs the role via ansible-galaxy role install.
追加情報:
N/A
ダウンロード:
SRPMS
- ansible-core-2.14.18-3.el9_8.1.ML.1.src.rpm
MD5: 148f879ca389c4e89f076629093e13b1
SHA-256: 599d8b179bd3274451b7ec79b064c17e79e53aa27f9eea2b09b930a883d3aff3
Size: 11.26 MB
Asianux Server 9 for x86_64
- ansible-core-2.14.18-3.el9_8.1.ML.1.x86_64.rpm
MD5: 1d3c66ac3e603d9dae788df5a19b6853
SHA-256: bcccd34d649ac6654ac1625f459a150176578556629deacc39438dcaad32c73e
Size: 2.57 MB - ansible-test-2.14.18-3.el9_8.1.ML.1.x86_64.rpm
MD5: f91b0e2ea54e10f0dc9c5b27e90bb2db
SHA-256: 85a00fe58c9965f138b6b14bce4590fd747a4770360dfdb6042da93778988a88
Size: 846.73 kB
English