Red Hat Product Errata RHSA-2026:67466 - Security Advisory Issued: 2026-09-14 Updated: 2026-09-14 RHSA-2026:67466 - Security Advisory Overview Updated Packages Synopsis Important: ansible-core security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for ansible-core is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred to managed machines automatically. Security Fix(es): ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution (CVE-2026-11332) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64 Red Hat Enterprise Linux Server - AUS 9.6 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x Fixes BZ - 2485379 - CVE-2026-11332 ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution CVEs CVE-2026-11332 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 SRPM ansible-core-2.14.18-1.el9_6.1.src.rpm SHA-256: 716180db1176e96e692128e29e1ba78ec6baa5a62b18da04e2d0ed44f8f3e4ce x86_64 ansible-core-2.14.18-1.el9_6.1.x86_64.rpm SHA-256: b6f0653897f5f65e5910ebd69c80a9e27307eb78906f7e4a90898cc80f34d2ba ansible-test-2.14.18-1.el9_6.1.x86_64.rpm SHA-256: 41744abc094b48f2b3cf237eb3eedebdb020cb40558aac08e3abf69342f3e84f Red Hat Enterprise Linux Server - AUS 9.6 SRPM ansible-core-2.14.18-1.el9_6.1.src.rpm SHA-256: 716180db1176e96e692128e29e1ba78ec6baa5a62b18da04e2d0ed44f8f3e4ce x86_64 ansible-core-2.14.18-1.el9_6.1.x86_64.rpm SHA-256: b6f0653897f5f65e5910ebd69c80a9e27307eb78906f7e4a90898cc80f34d2ba ansible-test-2.14.18-1.el9_6.1.x86_64.rpm SHA-256: 41744abc094b48f2b3cf237eb3eedebdb020cb40558aac08e3abf69342f3e84f Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 SRPM ansible-core-2.14.18-1.el9_6.1.src.rpm SHA-256: 716180db1176e96e692128e29e1ba78ec6baa5a62b18da04e2d0ed44f8f3e4ce s390x ansible-core-2.14.18-1.el9_6.1.s390x.rpm SHA-256: fa8020d0f68357406a7da7b3104b5e2b800dffbc596b67ea6fe7ea669c78cd94 ansible-test-2.14.18-1.el9_6.1.s390x.rpm SHA-256: 0fe8d6b4d1082586fcdc6a4b3d3eeca99471c3604a55c04f784ff9fa8ad4bfe9 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 SRPM ansible-core-2.14.18-1.el9_6.1.src.rpm SHA-256: 716180db1176e96e692128e29e1ba78ec6baa5a62b18da04e2d0ed44f8f3e4ce ppc64le ansible-core-2.14.18-1.el9_6.1.ppc64le.rpm SHA-256: faba98973c33f0cdc09fc5f46fd605909776c812f52e78ad5e4d7e0ed73311ff ansible-test-2.14.18-1.el9_6.1.ppc64le.rpm SHA-256: 968a7fb3c581dabd1559f864e05add6d74833afe43e409c32acd4b98181c2f43 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 SRPM ansible-core-2.14.18-1.el9_6.1.src.rpm SHA-256: 716180db1176e96e692128e29e1ba78ec6baa5a62b18da04e2d0ed44f8f3e4ce aarch64 ansible-core-2.14.18-1.el9_6.1.aarch64.rpm SHA-256: cf28125154af3316ffc02ae30ddc1fad695ee1768ddd03e34eb7888e747a8b29 ansible-test-2.14.18-1.el9_6.1.aarch64.rpm SHA-256: dc0783547ad2dfc84f6cddc63b962ac01ba4830f503f93d9c2c05d9f2184cf68 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 SRPM ansible-core-2.14.18-1.el9_6.1.src.rpm SHA-256: 716180db1176e96e692128e29e1ba78ec6baa5a62b18da04e2d0ed44f8f3e4ce ppc64le ansible-core-2.14.18-1.el9_6.1.ppc64le.rpm SHA-256: faba98973c33f0cdc09fc5f46fd605909776c812f52e78ad5e4d7e0ed73311ff ansible-test-2.14.18-1.el9_6.1.ppc64le.rpm SHA-256: 968a7fb3c581dabd1559f864e05add6d74833afe43e409c32acd4b98181c2f43 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 SRPM ansible-core-2.14.18-1.el9_6.1.src.rpm SHA-256: 716180db1176e96e692128e29e1ba78ec6baa5a62b18da04e2d0ed44f8f3e4ce x86_64 ansible-core-2.14.18-1.el9_6.1.x86_64.rpm SHA-256: b6f0653897f5f65e5910ebd69c80a9e27307eb78906f7e4a90898cc80f34d2ba ansible-test-2.14.18-1.el9_6.1.x86_64.rpm SHA-256: 41744abc094b48f2b3cf237eb3eedebdb020cb40558aac08e3abf69342f3e84f Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 SRPM ansible-core-2.14.18-1.el9_6.1.src.rpm SHA-256: 716180db1176e96e692128e29e1ba78ec6baa5a62b18da04e2d0ed44f8f3e4ce aarch64 ansible-core-2.14.18-1.el9_6.1.aarch64.rpm SHA-256: cf28125154af3316ffc02ae30ddc1fad695ee1768ddd03e34eb7888e747a8b29 ansible-test-2.14.18-1.el9_6.1.aarch64.rpm SHA-256: dc0783547ad2dfc84f6cddc63b962ac01ba4830f503f93d9c2c05d9f2184cf68 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 SRPM ansible-core-2.14.18-1.el9_6.1.src.rpm SHA-256: 716180db1176e96e692128e29e1ba78ec6baa5a62b18da04e2d0ed44f8f3e4ce s390x ansible-core-2.14.18-1.el9_6.1.s390x.rpm SHA-256: fa8020d0f68357406a7da7b3104b5e2b800dffbc596b67ea6fe7ea669c78cd94 ansible-test-2.14.18-1.el9_6.1.s390x.rpm SHA-256: 0fe8d6b4d1082586fcdc6a4b3d3eeca99471c3604a55c04f784ff9fa8ad4bfe9 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 SRPM ansible-core-2.14.18-1.el9_6.1.src.rpm SHA-256: 716180db1176e96e692128e29e1ba78ec6baa5a62b18da04e2d0ed44f8f3e4ce x86_64 ansible-core-2.14.18-1.el9_6.1.x86_64.rpm SHA-256: b6f0653897f5f65e5910ebd69c80a9e27307eb78906f7e4a90898cc80f34d2ba ansible-test-2.14.18-1.el9_6.1.x86_64.rpm SHA-256: 41744abc094b48f2b3cf237eb3eedebdb020cb40558aac08e3abf69342f3e84f Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 SRPM ansible-core-2.14.18-1.el9_6.1.src.rpm SHA-256: 716180db1176e96e692128e29e1ba78ec6baa5a62b18da04e2d0ed44f8f3e4ce aarch64 ansible-core-2.14.18-1.el9_6.1.aarch64.rpm SHA-256: cf28125154af3316ffc02ae30ddc1fad695ee1768ddd03e34eb7888e747a8b29 ansible-test-2.14.18-1.el9_6.1.aarch64.rpm SHA-256: dc0783547ad2dfc84f6cddc63b962ac01ba4830f503f93d9c2c05d9f2184cf68 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 SRPM ansible-core-2.14.18-1.el9_6.1.src.rpm SHA-256: 716180db1176e96e692128e29e1ba78ec6baa5a62b18da04e2d0ed44f8f3e4ce ppc64le ansible-core-2.14.18-1.el9_6.1.ppc64le.rpm SHA-256: faba98973c33f0cdc09fc5f46fd605909776c812f52e78ad5e4d7e0ed73311ff ansible-test-2.14.18-1.el9_6.1.ppc64le.rpm SHA-256: 968a7fb3c581dabd1559f864e05add6d74833afe43e409c32acd4b98181c2f43 Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 SRPM ansible-core-2.14.18-1.el9_6.1.src.rpm SHA-256: 716180db1176e96e692128e29e1ba78ec6baa5a62b18da04e2d0ed44f8f3e4ce s390x ansible-core-2.14.18-1.el9_6.1.s390x.rpm SHA-256: fa8020d0f68357406a7da7b3104b5e2b800dffbc596b67ea6fe7ea669c78cd94 ansible-test-2.14.18-1.el9_6.1.s390x.rpm SHA-256: 0fe8d6b4d1082586fcdc6a4b3d3eeca99471c3604a55c04f784ff9fa8ad4bfe9 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .