Skip to content
OpenAdvisories
Critical RHSA-2026:71541 2 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Oct 1, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 maven3.9 0:3.9.16-0.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 maven3.9-lib 0:3.9.16-0.3.hum1

Vulnerabilities 2

  • Critical 9.1
    CVE-2026-77185

    Apache MINA SSHD: Asynchronous authentication can bypass signature verification

    Authentication bypass in sshd-core in Apache MINA SSHD versions 2.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5 for a certain (presumed rare) way to implement an SSH server. Apache MINA SSHD is a Java library for client- and server-side SSH. In the server part of th…

    Apache Software Foundation Apache MINA SSHD mina2 mina Debian Ubuntu
  • High 8.1
    CVE-2026-93994

    Apache MINA SSHD: Repeated-publickey policy bypass on server

    Apache MINA SSHD is a Java library for client-side and server-side SSH. SSH servers can be configured to require multi-authentication schemes, for instance two different public keys, not just one. In OpenSSH, this would be done by setting in sshd_config Authe…

    Apache Software Foundation Apache MINA SSHD mina2 mina Debian Ubuntu

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-93994
  • article
    https://access.redhat.com/security/updates/classification/
  • report
    https://access.redhat.com/security/cve/CVE-2026-77185
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_71541.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2543860
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-77185
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-77185
  • article
    https://lists.apache.org/thread.html/t8pn812yq8ndokxyfxztg8tovov1284n
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2543862
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-93994
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-93994
  • article
    https://lists.apache.org/thread.html/9t3vsm8rnvwdv9779mlg1lq2fbwojdwp