439 matches found
Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.39 security and extras update
Red Hat OpenShift Container Platform release 4.21.39 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a security impact of...
TencentOS Server 3: ansible-core (TSSA-2026:1118)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1118 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
EUVD-2026-95346
A flaw was found in ansible-core. When installing a collection with ansible-galaxy collection install, the archive extractor validates member paths using lexical path normalisation os.path.abspath instead of resolving symbolic links os.path.realpath, and it performs no containment check on...
Linux Distros Unpatched Vulnerability : CVE-2026-89091
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in ansible-core. When installing a collection with ansible-galaxy collection install, the archive extractor validates member paths using lexica...
AZL-107132 CVE-2026-89091 affecting package ansible 2.17.11-1
A flaw was found in ansible-core. When installing a collection with ansible-galaxy collection install, the archive extractor validates member paths using lexical path normalisation os.path.abspath instead of resolving symbolic links os.path.realpath, and it performs no containment check on...
DEBIAN-CVE-2026-89091
A flaw was found in ansible-core. When installing a collection with ansible-galaxy collection install, the archive extractor validates member paths using lexical path normalisation os.path.abspath instead of resolving symbolic links os.path.realpath, and it performs no containment check on...
CVE-2026-89091
A flaw was found in ansible-core. When installing a collection with ansible-galaxy collection install, the archive extractor validates member paths using lexical path normalisation os.path.abspath instead of resolving symbolic links os.path.realpath, and it performs no containment check on...
CVE-2026-89091
A flaw was found in ansible-core. When installing a collection with ansible-galaxy collection install, the archive extractor validates member paths using lexical path normalisation os.path.abspath instead of resolving symbolic links os.path.realpath, and it performs no containment check on...
UBUNTU-CVE-2026-89091
A flaw was found in ansible-core. When installing a collection with ansible-galaxy collection install, the archive extractor validates member paths using lexical path normalisation os.path.abspath instead of resolving symbolic links os.path.realpath, and it performs no containment check on...
CVE-2026-89091
A flaw was found in ansible-core. When installing a collection with ansible-galaxy collection install, the archive extractor validates member paths using lexical path normalisation os.path.abspath instead of resolving symbolic links os.path.realpath, and it performs no containment check on...
CVE-2026-89091
A flaw exists in ansible-core where the archive extractor used in ansible-galaxy collection install validates member paths using lexical path normalization (os.path.abspath ) instead of resolving symbolic links (os.path.realpath ). Because the system performs no containment check on symlink-typed...
CVE-2026-89091 Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution
A flaw was found in ansible-core. When installing a collection with ansible-galaxy collection install, the archive extractor validates member paths using lexical path normalisation os.path.abspath instead of resolving symbolic links os.path.realpath, and it performs no containment check on...
CVE-2026-89091
A flaw was found in ansible-core. When installing a collection with "ansible-galaxy collection install", the archive extractor validates member paths using lexical path normalisation os.path.abspath instead of resolving symbolic links os.path.realpath, and it performs no containment check on...
CVE-2026-89091
A flaw was found in ansible-core. When installing a collection with ansible-galaxy collection install, the archive extractor validates member paths using lexical path normalisation os.path.abspath instead of resolving symbolic links os.path.realpath, and it performs no containment check on...
PT-2026-108281
Name of the Vulnerable Software and Affected Versions ansible-core affected versions not specified Description An issue exists in the archive extractor used during the installation of collections via ansible-galaxy collection install. The extractor uses lexical path normalisation os.path.abspath...
CVE-2026-89091: Improper Link Resolution Before File Access
A flaw was found in ansible-core. When installing a collection with ansible-galaxy collection install, the archive extractor validates member paths using lexical path normalisation os.path.abspath instead of resolving symbolic links os.path.realpath, and it performs no containment check on...
OPENSUSE-SU-2026:12055-1 ansible-core-2.20-2.20.9-2.1 on GA media
These are all security issues fixed in the ansible-core-2.20-2.20.9-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:12054-1 ansible-core-2.19-2.19.13-2.1 on GA media
These are all security issues fixed in the ansible-core-2.19-2.19.13-2.1 package on the GA media of openSUSE Tumbleweed...