This Red Hat security advisory addresses vulnerabilities in the libssh2 RPM packages included in Red Hat Hardened Images. The update provides new package versions (libssh2-1.11.1-10.1.hum1) for aarch64 and x86_64 architectures. The vulnerabilities fixed include CVE-2026-58051 and CVE-2026-66032. The advisory references these CVEs but does not provide detailed technical descriptions or CVSS scores. The update is intended to mitigate these security issues by providing patched RPMs. No cloud service is involved, and no known active exploits have been reported.

The vulnerabilities addressed are rated as high severity, indicating a significant security risk if unpatched. The exact impact is not detailed in the advisory, but the presence of multiple CWEs (including CWE-908, CWE-824, CWE-1341, CWE-125) suggests issues related to improper control flow, race conditions, or memory handling in libssh2. Unpatched systems using affected libssh2 versions in Red Hat Hardened Images may be vulnerable to these issues.

Red Hat has released updated RPM packages for libssh2 (version 1.11.1-10.1.hum1) for affected architectures. Users of Red Hat Hardened Images should apply these updates promptly to mitigate the vulnerabilities. The advisory does not mention any temporary workarounds or that no action is required. Patch status is confirmed by the availability of updated RPMs. Refer to the official Red Hat advisory at https://access.redhat.com/errata/RHSA-2026:46535 and https://images.redhat.com/ for update instructions.