[ALSA-2026:66248] Important: ansible-core security update
Type:
security
Severity:
important
Release date:
2026-09-10
Description:
Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred to managed machines automatically. Security Fix(es): * ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution (CVE-2026-11332) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 ansible-core-2.16.3-4.el8_10.aarch64.rpm 63544abf7eb1d816274fa94f1d0d13869e6df252b42a5d4bcded53b4d45d9f4e
aarch64 ansible-test-2.16.3-4.el8_10.aarch64.rpm e185e8b60984bacdcbec4d0f759563dd5638b2ec8f53e2cefbbd0e2ded2cd910
ppc64le ansible-test-2.16.3-4.el8_10.ppc64le.rpm 6b4867a65bbce1cad8976e6b1fa715ca3f974db762c5fce7ef34f2f470c09692
ppc64le ansible-core-2.16.3-4.el8_10.ppc64le.rpm fb72c4f2219ad08946f3a3cd870695a6d830fbc03be6c9d43db5b37e5acea5c5
s390x ansible-test-2.16.3-4.el8_10.s390x.rpm 61c906f4b32c719ed58d04ece771c833ce68d24d862f3d1972637efbe45e3c7c
s390x ansible-core-2.16.3-4.el8_10.s390x.rpm f9f016549b993cde59b4816e947df2a225cc54e485175576874815625e2c5d78
x86_64 ansible-test-2.16.3-4.el8_10.x86_64.rpm 17f802553c89c8c9328e106aca4a2f19b3e57e0fa7d047a5fc28c37101ea3f05
x86_64 ansible-core-2.16.3-4.el8_10.x86_64.rpm fbcc0cc4ab6561ab8d0284e08f2a01ae7f9bd7cb24171a1876883c961c8c275d
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.