ansible-core-2.16.3-4.el8_10.ML.1
エラータID: AXSA:2026-1818:04
リリース日:
2026/09/14 Monday - 18:08
題名:
ansible-core-2.16.3-4.el8_10.ML.1
影響のあるチャネル:
Asianux Server 8 for x86_64
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- ansible-core の ansible-galaxy role install コマンドには、
任意の引数を挿入できてしまう問題があるため、ローカルの攻撃者
により、任意のコードの実行を可能とする脆弱性が存在します。
(CVE-2026-11332)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2026-11332
A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field. This allows arbitrary code execution on the machine of a user who installs the role via ansible-galaxy role install.
A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field. This allows arbitrary code execution on the machine of a user who installs the role via ansible-galaxy role install.
追加情報:
N/A
ダウンロード:
SRPMS
- ansible-core-2.16.3-4.el8_10.ML.1.src.rpm
MD5: cf3800b134e707c006c8fa1e6c4b33be
SHA-256: d6c93bde96203313f20475698fdd6efa5299789e23d62afa6aae80ecdc2cc519
Size: 8.31 MB
Asianux Server 8 for x86_64
- ansible-core-2.16.3-4.el8_10.ML.1.x86_64.rpm
MD5: 033a5c66950906a13bab494166230cdc
SHA-256: 975e71a80689e00bc83b38ab9f2608e64f9fc0acc601a7ca968875feb7bcccf3
Size: 3.63 MB - ansible-test-2.16.3-4.el8_10.ML.1.x86_64.rpm
MD5: e426113dd7797548182221edef80d819
SHA-256: cba7b16bbcb5ec81e91fbe77dd45bb5921b69de6fe64cb226926d659d761e066
Size: 944.72 kB
English