Red Hat Security Advisory

RHSA-2026:29950

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-06-25 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Hardened Images libssh2-1.11.1-8.hum1@aarch64, libssh2-1.11.1-8.hum1@src, libssh2-1.11.1-8.hum1@x86_64 +4

Fixes 2 records

TI-2026-39880 CVE-2026-55200 · GHSA-r8mh-x5qv-7gg2

libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c

HIGH 75

libssh2 1.11.1, fixed in commit 97acf3d, contains an out-of-bounds write vulnerability in ssh2_transport_read() that fails to enforce upper bounds on packet_length field.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.03877 Published 2026-06-17 Partial fix CWE-680

TI-2026-39879 CVE-2026-55199 · GHSA-3cfq-4xx4-rmpg

libssh2 - Pre-Authentication DoS via SSH_MSG_EXT_INFO Handler

LOW 37

libssh2 through 1.11.1, fixed in commit 1762685, contains a pre-authentication denial of service vulnerability in the SSH_MSG_EXT_INFO handler in src/packet.c that allows a malicious SSH server to cause a client CPU exha…

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00918 Published 2026-06-17 Partial fix CWE-835