Read the docs
Red Hat Security Advisory

RHSA-2026:46927

Red Hat Hardened Images RPMs Security Update

Released 2026-07-27 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 4 records

TI-2026-41806 CVE-2026-58051 · GHSA-c5f3-hwj2-xp5p

libssh2 - Free of Uninitialized Pointer in publickey List Cleanup

Priority HIGH 69

libssh2 through 1.11.1 grows its publickey list with SSH2_REALLOC but does not zero-initialize new entries before parsing populates them, so a parse failure reaching the cleanup path leaves libssh2_publickey_list_free op…

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00277 Published 2026-06-28 Partial fix CWE-908
TI-2026-47022 CVE-2026-66033 · GHSA-2g8c-wcg8-r65c

libssh2 Integer Underflow DoS via AES-GCM Cipher Negotiation

Priority MEDIUM 44

libssh2 through 1.11.1, fixed in commit a2ed82d, contains a pre-authentication integer underflow vulnerability in the ssh2_cipher_crypt() function in src/openssl.c that allows a malicious SSH server to crash any connecti…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00583 Published 2026-07-24 Partial fix CWE-125
TI-2026-47021 CVE-2026-66032 · GHSA-83r8-6c29-8gwr

libssh2 Double-Free Heap Corruption via sftp_open()

Priority MEDIUM 40

libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftp_open() function in src/sftp.c that allows a malicious SSH server to corrupt the heap of any authenticated client opening a…

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00448 Published 2026-07-24 Partial fix CWE-415
TI-2026-47023 CVE-2026-66034 · GHSA-6h6q-9mwg-r6x7

libssh2 Heap Out-of-Bounds Read via publickey subsystem

Priority LOW 36

libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability that allows a malicious SSH server to trigger an arbitrary-length heap out-of-bounds read and a free of an uninitialized poin…

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00402 Published 2026-07-24 Partial fix CWE-125