[ALSA-2026:84594] Moderate: environment-modules security update
Type:
security
Severity:
moderate
Release date:
2026-10-19
Description:
The environment-modules packages provide dynamic modification of user environment using module files. Each module file contains the information needed to configure the shell for an application. Once the package is initialized, the environment can be modified on a per-module basis using the "module" utility, which interprets module files. Security Fix(es): * environment-modules: Command injection in environment-modules Bash completion via malicious module names containing shell metacharacters (CVE-2026-85013) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 environment-modules-5.3.0-2.el9_8.1.aarch64.rpm b1943d5bf773d31f1bd98722a645c6c69139345fb73e2198794bb156457687e3
ppc64le environment-modules-5.3.0-2.el9_8.1.ppc64le.rpm a5b0e23e249d2a677820a7b09abf2fd52b6f3ea2c5e35d3b33defd5a429832cd
s390x environment-modules-5.3.0-2.el9_8.1.s390x.rpm d8fa86edc65d6885943e2d7705c88f66f379563c809d667b9ab68fab77f0718e
x86_64 environment-modules-5.3.0-2.el9_8.1.x86_64.rpm fcc916588122fad2c009f871a4b51db7fbd420e4556821814c449bb5c9496af3
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.