Skip to content
OpenAdvisories
High RHSA-2026:29950 2 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Jun 26, 2026 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 libssh2 0:1.11.1-8.hum1
Red Hat · Hardened Images 1 hummingbird:1 libssh2-devel 0:1.11.1-8.hum1
Red Hat · Hardened Images 1 hummingbird:1 libssh2-docs 0:1.11.1-8.hum1

Vulnerabilities 2

  • High 8.1
    CVE-2026-55200 Public exploit

    libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c

    libssh2 1.11.1, fixed in commit 97acf3d, contains an out-of-bounds write vulnerability in ssh2_transport_read() that fails to enforce upper bounds on packet_length field. Remote attackers can send crafted SSH packets with excessively large packet_length value…

    libssh2 libssh2 rust libssh2 Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 5.9
    CVE-2026-55199

    libssh2 - Pre-Authentication DoS via SSH_MSG_EXT_INFO Handler

    libssh2 through 1.11.1, fixed in commit 1762685, contains a pre-authentication denial of service vulnerability in the SSH_MSG_EXT_INFO handler in src/packet.c that allows a malicious SSH server to cause a client CPU exhaustion loop by sending a crafted extens…

    libssh2 libssh2 rust libssh2 Debian Ubuntu Azure Linux Alpine Wolfi

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-55200
  • article
    https://access.redhat.com/security/updates/classification/
  • report
    https://access.redhat.com/security/cve/CVE-2026-55199
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_29950.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2490128
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-55199
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-55199
  • article
    https://github.com/libssh2/libssh2/commit/17626857d20b3c9a1addfa45979dadcee1cd84a4
  • article
    https://github.com/libssh2/libssh2/pull/1864
  • article
    https://www.vulncheck.com/advisories/libssh2-pre-authentication-dos-via-ssh-msg-ext-info-handler
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2490127
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-55200
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-55200
  • article
    https://github.com/libssh2/libssh2/commit/97acf3dfda80c91c3a8c9f2372546301d4a1a7a8
  • article
    https://github.com/libssh2/libssh2/pull/2052
  • article
    https://www.vulncheck.com/advisories/libssh2-out-of-bounds-write-via-unchecked-packet-length-in-transport-c