This security advisory from Red Hat covers updates to the libssh2 RPM packages within Red Hat Hardened Images, addressing two vulnerabilities identified as CVE-2026-55199 and CVE-2026-55200. The advisory lists updated package versions (libssh2-1.11.1-8.hum1 and related packages) for aarch64 and x86_64 architectures. The vulnerabilities are associated with CWE-606 (Uncheck Input for Loop Condition). No CVSS score or detailed technical exploit information is provided. The advisory does not explicitly state a patch or fix status but provides updated package versions, implying a remediation update is available.

The vulnerabilities affect the libssh2 RPM packages used in Red Hat Hardened Images on aarch64 and x86_64 architectures. The CWE-606 classification suggests issues related to unchecked input in loop conditions, which could potentially lead to logic errors or denial of service. No known exploits in the wild have been reported, and the severity is assessed as medium. The impact is limited to the affected packages and architectures as specified.

An update to the libssh2 packages is available as part of the Red Hat Hardened Images RPMs update (version 1.11.1-8.hum1). Users should apply this update to remediate the vulnerabilities. The vendor advisory indicates the update includes the necessary bug fixes and enhancements. There is no indication that additional mitigation steps are required beyond applying the updated packages.