Back Linuxsecurity

Fedora 44 Ansible Collection Ansible Posix Major Local Escalation Fix

Linuxsecurity •LinuxSecurity Advisories • July 17, 2026

Update to 2.2.1. Fixes rhbz#2479556. Mitigates CVE-2026-11837 (rhbz#2487430, rhbz#2487431, rhbz#2487432)

* Wed Jul 8 2026 Maxwell G - 2.2.1-1 - Update to 2.2.1. Fixes rhbz#2479556. - Mitigates CVE-2026-11837 (rhbz#2487430, rhbz#2487431, rhbz#2487432)

[ 1 ] Bug #2479556 - ansible-collection-ansible-posix-2.2.1 is available [ 2 ] Bug #2487430 - CVE-2026-11837 ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown [fedora-43] [ 3 ] Bug #2487431 - CVE-2026-11837 ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown [fedora-44]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-0f941ecaa6' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Local Privilege Escalation Fix for Ansible Collection in Fedora On July 8, 2026, an update was released for the ansible-collection-ansible-posix in Fedora 43 and 44 to address CVE-2026-11837, a critical local privilege escalation vulnerability. This vulnerability allows attackers to exploit the ansible.posix authorized_key module through symlink-following chown, potentially leading to unauthorized access. The update, version 2.2.1, fixes bug rhbz#2479556 and mitigates the risks associated with CVE-2026-11837. Users of Fedora 43 and 44 are urged to apply the update immediately to protect against potential exploitation. The vulnerability was published on June 10, 2026, and affects both Fedora 43 and 44 systems. The fix can be installed using the 'dnf' update program. Security professionals should monitor for any signs of exploitation related to this CVE. 2 sources 74

Extracted Entities

Fedora 44 Ansible Collection Ansible Posix Major Local Escalation Fix

The full story

Extracted Entities

CVEs (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (1)