This Red Hat security advisory updates OpenSSH RPM packages in Red Hat Hardened Images to version 10.4p1-1.hum1 for aarch64 and x86_64 architectures. It addresses multiple vulnerabilities identified by CVE-2026-59995 and six additional CVEs. The CVSS vector for CVE-2026-59995 indicates network attack vector, high attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact. The advisory does not explicitly state the nature of the vulnerabilities but references multiple CWEs including path traversal (CWE-22), improper restriction of operations (CWE-88), and others. No explicit patch links are provided, but the advisory references the updated RPM versions and directs users to Red Hat's image update site for applying the update.

The vulnerabilities addressed have a high severity rating with CVSS metrics indicating potential low integrity and availability impacts when exploited remotely with user interaction. The update mitigates multiple security weaknesses in OpenSSH components within Red Hat Hardened Images, reducing the risk of exploitation that could lead to limited integrity or availability degradation. No known exploits in the wild have been reported at the time of this advisory.

Red Hat has released updated OpenSSH RPM packages (version 10.4p1-1.hum1) for affected architectures as part of this advisory. Users of Red Hat Hardened Images should apply these updates promptly by following instructions at https://images.redhat.com/. Since this is an official Red Hat security advisory with updated packages available, applying the provided updates is the recommended remediation. No additional mitigation steps are specified or required beyond applying the update.