Red Hat Product Errata RHSA-2026:57149 - Security Advisory Issued: 2026-08-19 Updated: 2026-08-19 RHSA-2026:57149 - Security Advisory Overview Updated Packages Synopsis Important: ansible-core security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for ansible-core is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred to managed machines automatically. Security Fix(es): ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution (CVE-2026-11332) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2485379 - CVE-2026-11332 ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution CVEs CVE-2026-11332 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM ansible-core-2.14.18-3.el9_8.1.src.rpm SHA-256: 8746f15185fb254b09d8c0fc8a0fc968223dc5c5e32f81bd5d930900ef2a4363 x86_64 ansible-core-2.14.18-3.el9_8.1.x86_64.rpm SHA-256: 7049d27d544e420347df6d293780c689c34f25ca4a0354ae46942ad72751c81b ansible-test-2.14.18-3.el9_8.1.x86_64.rpm SHA-256: 52da97e1e3a27bdd59a0bac920bab9dbb337155d2f43d15fdf6b13a4763fcfc9 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM ansible-core-2.14.18-3.el9_8.1.src.rpm SHA-256: 8746f15185fb254b09d8c0fc8a0fc968223dc5c5e32f81bd5d930900ef2a4363 x86_64 ansible-core-2.14.18-3.el9_8.1.x86_64.rpm SHA-256: 7049d27d544e420347df6d293780c689c34f25ca4a0354ae46942ad72751c81b ansible-test-2.14.18-3.el9_8.1.x86_64.rpm SHA-256: 52da97e1e3a27bdd59a0bac920bab9dbb337155d2f43d15fdf6b13a4763fcfc9 Red Hat Enterprise Linux for IBM z Systems 9 SRPM ansible-core-2.14.18-3.el9_8.1.src.rpm SHA-256: 8746f15185fb254b09d8c0fc8a0fc968223dc5c5e32f81bd5d930900ef2a4363 s390x ansible-core-2.14.18-3.el9_8.1.s390x.rpm SHA-256: fad2eb53f0e744781c9049c25467142f851d1a4e7246d30bbc366a8181ccb0dd ansible-test-2.14.18-3.el9_8.1.s390x.rpm SHA-256: 88eddcf8fd72e97c8b0025b29fb2d9bb9546ecafa6bfc3acbe8216dbf31abc80 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 SRPM ansible-core-2.14.18-3.el9_8.1.src.rpm SHA-256: 8746f15185fb254b09d8c0fc8a0fc968223dc5c5e32f81bd5d930900ef2a4363 s390x ansible-core-2.14.18-3.el9_8.1.s390x.rpm SHA-256: fad2eb53f0e744781c9049c25467142f851d1a4e7246d30bbc366a8181ccb0dd ansible-test-2.14.18-3.el9_8.1.s390x.rpm SHA-256: 88eddcf8fd72e97c8b0025b29fb2d9bb9546ecafa6bfc3acbe8216dbf31abc80 Red Hat Enterprise Linux for Power, little endian 9 SRPM ansible-core-2.14.18-3.el9_8.1.src.rpm SHA-256: 8746f15185fb254b09d8c0fc8a0fc968223dc5c5e32f81bd5d930900ef2a4363 ppc64le ansible-core-2.14.18-3.el9_8.1.ppc64le.rpm SHA-256: cea4e6ca06041de006fd7451f9cb6bdcc41733f6a4d098ec79fcf726b9c22daf ansible-test-2.14.18-3.el9_8.1.ppc64le.rpm SHA-256: 41b69582ca9671d7022d1af8ecce61751da78d6d1681458c34302bd19b26667d Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 SRPM ansible-core-2.14.18-3.el9_8.1.src.rpm SHA-256: 8746f15185fb254b09d8c0fc8a0fc968223dc5c5e32f81bd5d930900ef2a4363 ppc64le ansible-core-2.14.18-3.el9_8.1.ppc64le.rpm SHA-256: cea4e6ca06041de006fd7451f9cb6bdcc41733f6a4d098ec79fcf726b9c22daf ansible-test-2.14.18-3.el9_8.1.ppc64le.rpm SHA-256: 41b69582ca9671d7022d1af8ecce61751da78d6d1681458c34302bd19b26667d Red Hat Enterprise Linux for ARM 64 9 SRPM ansible-core-2.14.18-3.el9_8.1.src.rpm SHA-256: 8746f15185fb254b09d8c0fc8a0fc968223dc5c5e32f81bd5d930900ef2a4363 aarch64 ansible-core-2.14.18-3.el9_8.1.aarch64.rpm SHA-256: b6b863c4637df0d9c545c5e5dca46eb98d8e9f3288003ee341c6358c2d165fea ansible-test-2.14.18-3.el9_8.1.aarch64.rpm SHA-256: 80e9b160225b964b6d1c71584be5049e30ed197ae9b4cc7840d71ebe08d4c76b Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 SRPM ansible-core-2.14.18-3.el9_8.1.src.rpm SHA-256: 8746f15185fb254b09d8c0fc8a0fc968223dc5c5e32f81bd5d930900ef2a4363 aarch64 ansible-core-2.14.18-3.el9_8.1.aarch64.rpm SHA-256: b6b863c4637df0d9c545c5e5dca46eb98d8e9f3288003ee341c6358c2d165fea ansible-test-2.14.18-3.el9_8.1.aarch64.rpm SHA-256: 80e9b160225b964b6d1c71584be5049e30ed197ae9b4cc7840d71ebe08d4c76b Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 SRPM ansible-core-2.14.18-3.el9_8.1.src.rpm SHA-256: 8746f15185fb254b09d8c0fc8a0fc968223dc5c5e32f81bd5d930900ef2a4363 ppc64le ansible-core-2.14.18-3.el9_8.1.ppc64le.rpm SHA-256: cea4e6ca06041de006fd7451f9cb6bdcc41733f6a4d098ec79fcf726b9c22daf ansible-test-2.14.18-3.el9_8.1.ppc64le.rpm SHA-256: 41b69582ca9671d7022d1af8ecce61751da78d6d1681458c34302bd19b26667d Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 SRPM ansible-core-2.14.18-3.el9_8.1.src.rpm SHA-256: 8746f15185fb254b09d8c0fc8a0fc968223dc5c5e32f81bd5d930900ef2a4363 x86_64 ansible-core-2.14.18-3.el9_8.1.x86_64.rpm SHA-256: 7049d27d544e420347df6d293780c689c34f25ca4a0354ae46942ad72751c81b ansible-test-2.14.18-3.el9_8.1.x86_64.rpm SHA-256: 52da97e1e3a27bdd59a0bac920bab9dbb337155d2f43d15fdf6b13a4763fcfc9 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 SRPM ansible-core-2.14.18-3.el9_8.1.src.rpm SHA-256: 8746f15185fb254b09d8c0fc8a0fc968223dc5c5e32f81bd5d930900ef2a4363 aarch64 ansible-core-2.14.18-3.el9_8.1.aarch64.rpm SHA-256: b6b863c4637df0d9c545c5e5dca46eb98d8e9f3288003ee341c6358c2d165fea ansible-test-2.14.18-3.el9_8.1.aarch64.rpm SHA-256: 80e9b160225b964b6d1c71584be5049e30ed197ae9b4cc7840d71ebe08d4c76b Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 SRPM ansible-core-2.14.18-3.el9_8.1.src.rpm SHA-256: 8746f15185fb254b09d8c0fc8a0fc968223dc5c5e32f81bd5d930900ef2a4363 s390x ansible-core-2.14.18-3.el9_8.1.s390x.rpm SHA-256: fad2eb53f0e744781c9049c25467142f851d1a4e7246d30bbc366a8181ccb0dd ansible-test-2.14.18-3.el9_8.1.s390x.rpm SHA-256: 88eddcf8fd72e97c8b0025b29fb2d9bb9546ecafa6bfc3acbe8216dbf31abc80 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 SRPM ansible-core-2.14.18-3.el9_8.1.src.rpm SHA-256: 8746f15185fb254b09d8c0fc8a0fc968223dc5c5e32f81bd5d930900ef2a4363 x86_64 ansible-core-2.14.18-3.el9_8.1.x86_64.rpm SHA-256: 7049d27d544e420347df6d293780c689c34f25ca4a0354ae46942ad72751c81b ansible-test-2.14.18-3.el9_8.1.x86_64.rpm SHA-256: 52da97e1e3a27bdd59a0bac920bab9dbb337155d2f43d15fdf6b13a4763fcfc9 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 SRPM ansible-core-2.14.18-3.el9_8.1.src.rpm SHA-256: 8746f15185fb254b09d8c0fc8a0fc968223dc5c5e32f81bd5d930900ef2a4363 aarch64 ansible-core-2.14.18-3.el9_8.1.aarch64.rpm SHA-256: b6b863c4637df0d9c545c5e5dca46eb98d8e9f3288003ee341c6358c2d165fea ansible-test-2.14.18-3.el9_8.1.aarch64.rpm SHA-256: 80e9b160225b964b6d1c71584be5049e30ed197ae9b4cc7840d71ebe08d4c76b Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 SRPM ansible-core-2.14.18-3.el9_8.1.src.rpm SHA-256: 8746f15185fb254b09d8c0fc8a0fc968223dc5c5e32f81bd5d930900ef2a4363 ppc64le ansible-core-2.14.18-3.el9_8.1.ppc64le.rpm SHA-256: cea4e6ca06041de006fd7451f9cb6bdcc41733f6a4d098ec79fcf726b9c22daf ansible-test-2.14.18-3.el9_8.1.ppc64le.rpm SHA-256: 41b69582ca9671d7022d1af8ecce61751da78d6d1681458c34302bd19b26667d Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 SRPM ansible-core-2.14.18-3.el9_8.1.src.rpm SHA-256: 8746f15185fb254b09d8c0fc8a0fc968223dc5c5e32f81bd5d930900ef2a4363 s390x ansible-core-2.14.18-3.el9_8.1.s390x.rpm SHA-256: fad2eb53f0e744781c9049c25467142f851d1a4e7246d30bbc366a8181ccb0dd ansible-test-2.14.18-3.el9_8.1.s390x.rpm SHA-256: 88eddcf8fd72e97c8b0025b29fb2d9bb9546ecafa6bfc3acbe8216dbf31abc80 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .