Skip to content
OpenAdvisories
High RHSA-2026:74586 4 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Oct 2, 2026 · Updated Oct 3, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 openshell 0:0.1.2-0.2.hum1
Red Hat · Hardened Images 1 hummingbird:1 openshell-gateway 0:0.1.2-0.2.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3-openshell 0:0.1.2-0.2.hum1

Vulnerabilities 4

  • High 7.5
    CVE-2026-102823

    russh: Client-side channel-scoped Handler callbacks fire for channel IDs the client never opened

    Russh is a Rust SSH client and server library. Prior to 0.63.1, client_read_authenticated in russh/src/client/encrypted.rs forwards CHANNEL_DATA, CHANNEL_EXTENDED_DATA, CHANNEL_EOF, CHANNEL_CLOSE, CHANNEL_OPEN_FAILURE, CHANNEL_SUCCESS, CHANNEL_FAILURE, and CH…

    Eugeny russh russh rust-russh Debian Ubuntu crates.io
  • Medium 6.5
    CVE-2026-102821

    Russh: Unbounded memory exhaustion via CHANNEL_OPEN flood during a client-stalled rekey

    Russh is a Rust SSH client and server library. Prior to 0.63.2, an authenticated remote peer can send SSH_MSG_KEXINIT without the required SSH_MSG_KEX_ECDH_INIT and then flood SSH_MSG_CHANNEL_OPEN messages while SessionKexState::InProgress prevents priority_r…

    Eugeny russh russh rust-russh Debian Ubuntu Wolfi crates.io
  • Medium 4.3
    CVE-2026-102824

    Russh: Missing X25519 zero-point validation in hybrid ML-KEM key exchange

    Russh is a Rust SSH client and server library. Prior to 0.63.0, the hybrid ML-KEM 768 and X25519 implementation in russh/src/kex/hybrid_mlkem.rs accepts an all-zero 32-byte peer X25519 public key in both server_dh and compute_shared_secret, forcing the X25519…

    Eugeny russh russh rust-russh Debian Ubuntu crates.io
  • Low 3.7
    CVE-2026-102825

    Russh: Configured server auth-attempt cap is not enforced in the USERAUTH_REQUEST runtime path

    Russh is a Rust SSH client and server library. Prior to 0.62.6, the USERAUTH_REQUEST path reached from server::run_stream in russh/src/server/encrypted.rs increments self.common.auth_attempts but never compares it with server::Config.max_auth_attempts. An una…

    Eugeny russh russh rust-russh Debian Ubuntu crates.io

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-102821
  • report
    https://access.redhat.com/security/cve/CVE-2026-102823
  • report
    https://access.redhat.com/security/cve/CVE-2026-102824
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-102825
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74586.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2543501
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-102821
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-102821
  • article
    https://github.com/Eugeny/russh/commit/a282af361ac99bc76b80876d1aae128e89dbf66b
  • article
    https://github.com/Eugeny/russh/releases/tag/v0.63.2
  • article
    https://github.com/Eugeny/russh/security/advisories/GHSA-35g8-35p8-c8fw
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2543503
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-102823
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-102823
  • article
    https://github.com/Eugeny/russh/commit/3430fd26ecafc0dc3705210f5f39a9119fa22774
  • article
    https://github.com/Eugeny/russh/releases/tag/v0.63.1
  • article
    https://github.com/Eugeny/russh/security/advisories/GHSA-47hw-gvq5-r2gm
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2543498
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-102824
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-102824
  • article
    https://github.com/Eugeny/russh/commit/8da8967f196472576b1565d518a0ed60fce60f0c
  • article
    https://github.com/Eugeny/russh/releases/tag/v0.63.0
  • article
    https://github.com/Eugeny/russh/security/advisories/GHSA-w3jg-pjxf-73p4
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2543507
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-102825
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-102825
  • article
    https://github.com/Eugeny/russh/commit/f8fd0b11a393364dc7f01a182482d86adafdd653
  • article
    https://github.com/Eugeny/russh/releases/tag/v0.62.6
  • article
    https://github.com/Eugeny/russh/security/advisories/GHSA-g6xm-f9xp-qq35