AlmaLinux 9.6 [TuxCare] Security Update: ansible-core / ansible-test (ALMALINUX9.6:CLSA-2026:1788175790)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1788175790 advisory. - A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's...

Rocky Linux 9.6 [TuxCare] Security Update: ansible-core / ansible-test (ALMALINUX9.6:CLSA-2026:1788175790)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1788175790 advisory. - A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's...

Important: ansible-core

Issue Overview: A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags throu...

Arbitrary Argument Injection

Overview ansible-core is an a radically simple IT automation system. It handles configuration management, application deployment, cloud provisioning, ad-hoc task execution, network automation, and multi-node orchestration. Ansible makes complex changes like zero-downtime rolling updates with load...

PT-2026-60672

A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field...

CVE-2026-11332: Improper Neutralization of Argument Delimiters in a Command

A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field...