Red Hat Security Advisory

RHSA-2026:46955

Red Hat Hardened Images RPMs Security Update

Released 2026-07-27 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images libssh2-1.11.1-10.3.hum1@aarch64, libssh2-1.11.1-10.3.hum1@src, libssh2-1.11.1-10.3.hum1@x86_64 +4

Fixes 1 record

TI-2026-47024 CVE-2026-66035 · GHSA-v6rf-8q4r-r495

libssh2 Heap Buffer Overflow via ETM Cipher Negotiation

LOW 36

libssh2 through 1.11.1, fixed in commit 42e33d8, contains a pre-authentication heap buffer overflow vulnerability that allows a malicious SSH server to corrupt heap metadata in any connecting client by sending a packet w…

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00472 Published 2026-07-24 Partial fix CWE-122