The Red Hat security advisory RHSA-2026:54070 addresses CVE-2026-58050, a vulnerability in the libssh2 library included in Red Hat Hardened Images RPMs. The update provides new package versions libssh2-1.11.1-10.4.hum1 for aarch64 and x86_64 architectures, along with related development and documentation packages. The vulnerability involves CWE-190 (Integer Overflow or Wraparound) and CWE-787 (Out-of-bounds Write). The advisory does not specify a fixed version or detailed patch instructions but references updated RPMs. No active exploitation is known at this time.

The vulnerability affects the libssh2 library used in Red Hat Hardened Images RPMs, potentially allowing issues related to integer overflow and out-of-bounds memory writes. This could lead to unexpected behavior or security risks in applications relying on libssh2. However, no known exploits are reported, and the severity is rated medium, indicating a moderate risk.

Red Hat has issued updated libssh2 RPM packages (version 1.11.1-10.4.hum1) for affected architectures. Users of Red Hat Hardened Images should apply these updates as provided by Red Hat to remediate the vulnerability. Since no explicit patch status or alternative mitigations are stated, applying the official update is the recommended action.