This Red Hat security advisory (RHSA-2026:36759) announces a bug fix and enhancement update for Red Hat Hardened Images RPMs, specifically updating OpenSSH packages to version 10.3p1-6.hum1 for aarch64 and x86_64 architectures. The update addresses three vulnerabilities identified as CVE-2026-55653, CVE-2026-55654, and CVE-2026-55655, which correspond to issues involving double free, out-of-bounds read, and improper restriction of communication channels. The advisory does not specify exact affected versions or detailed technical exploit methods. No known active exploitation has been reported. The vendor advisory directs users to apply the update via Red Hat's image update mechanisms.

The vulnerabilities addressed involve memory management errors (double free and out-of-bounds read) and improper communication channel restrictions, which could potentially lead to application crashes or unauthorized communication if exploited. However, there are no known exploits in the wild at this time. The impact is considered medium severity by Red Hat, indicating a moderate risk that should be addressed to maintain system security and stability.

Red Hat has released updated RPM packages for OpenSSH as part of the Hardened Images update. Users should apply these official updates to remediate the vulnerabilities. Since this is not a cloud service, remediation requires manual update of the affected packages. No additional mitigation steps are indicated or required beyond applying the vendor-provided update. Patch status is confirmed by the vendor advisory.