Back Linuxsecurity

Fedora 43 ansible-collection-ansible-posix Critical Fix for CVE-2026

Linuxsecurity •LinuxSecurity Advisories • July 17, 2026

Update to 2.2.1. Fixes rhbz#2479556. Mitigates CVE-2026-11837 (rhbz#2487430, rhbz#2487431, rhbz#2487432)

* Wed Jul 8 2026 Maxwell G - 2.2.1-1 - Update to 2.2.1. Fixes rhbz#2479556. - Mitigates CVE-2026-11837 (rhbz#2487430, rhbz#2487431, rhbz#2487432) * Fri Jan 16 2026 Fedora Release Engineering - 2.1.0-3 - Rebuilt for * Fri Jan 16 2026 Fedora Release Engineering - 2.1.0-2 - Rebuilt for

[ 1 ] Bug #2479556 - ansible-collection-ansible-posix-2.2.1 is available [ 2 ] Bug #2487430 - CVE-2026-11837 ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown [fedora-43] [ 3 ] Bug #2487431 - CVE-2026-11837 ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown [fedora-44]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-50e5126be4' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Local Privilege Escalation Fix for Ansible Collection in Fedora On July 8, 2026, an update was released for the ansible-collection-ansible-posix in Fedora 43 and 44 to address CVE-2026-11837, a critical local privilege escalation vulnerability. This vulnerability allows attackers to exploit the ansible.posix authorized_key module through symlink-following chown, potentially leading to unauthorized access. The update, version 2.2.1, fixes bug rhbz#2479556 and mitigates the risks associated with CVE-2026-11837. Users of Fedora 43 and 44 are urged to apply the update immediately to protect against potential exploitation. The vulnerability was published on June 10, 2026, and affects both Fedora 43 and 44 systems. The fix can be installed using the 'dnf' update program. Security professionals should monitor for any signs of exploitation related to this CVE. 2 sources 74

Extracted Entities

Fedora 43 ansible-collection-ansible-posix Critical Fix for CVE-2026

The full story

Extracted Entities

CVEs (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (1)