Threats Tagged 'cve-2026-16493'

Red Hat Satellite versions 6.19.0 through 6.19.4 for RHEL 9 contain multiple security vulnerabilities affecting various components including ansible-core, openvox-server, puppetserver, rubygem-jwt, python-aiohttp, and python-gitpython. These vulnerabilities enable arbitrary code execution, authentication bypass, denial of service, HTTP request smuggling, information disclosure, and arbitrary file overwrite. Red Hat has released an update in version 6.19.4 addressing these issues.

Red Hat Satellite 6.17.11 update addresses multiple security vulnerabilities in components including jackson-databind, jackson-core, AIOHTTP, ruby-jwt, Eclipse Jetty, and ansible-core. These vulnerabilities enable arbitrary code execution, denial of service, authentication bypass, HTTP request smuggling, and information disclosure. The update fixes these issues for Red Hat Satellite versions from 6.17.0 up to but not including 6.17.11. Several bugs related to upgrade and migration are also resolved.

Red Hat Satellite 6.18 prior to version 6.18.9 contains multiple security vulnerabilities affecting various components such as aiohttp, Eclipse Jetty, jackson-core, ansible-core, puppetserver, and ruby-jwt. These vulnerabilities include HTTP request smuggling, denial of service, information disclosure, arbitrary code execution, and authentication bypass. The update to version 6.18.9 addresses these security issues along with several bugs related to upgrade and functionality.

A command injection vulnerability exists in ansible-core's _extract_collection_from_git() function due to improper construction of git clone commands without an end-of-options separator before user-supplied URLs. This allows an attacker to execute arbitrary commands when a user runs 'ansible-galaxy collection install' with a crafted malicious source URI. This issue is an incomplete fix for a previous vulnerability (CVE-2026-11332) affecting the role install path. The vulnerability has a high severity with a CVSS score of 7.8. Red Hat has released security advisories and updates addressing this flaw as part of their Satellite 6.18 and 6.19 releases.

A flaw was found in ansible-core. The _extract_collection_from_git() function in ansible-core's concrete_artifact_manager.py constructs git clone commands without a '--' (end-of-options) separator before user-supplied URLs when installing collections from git sources. An attacker who provides a crafted collection source URI containing git argument injection payloads can achieve arbitrary command execution when a user runs 'ansible-galaxy collection install' with the malicious source. This is an incomplete fix for CVE-2026-11332, which hardened the role install path but missed the equivalent collection install code path.