This Red Hat security advisory (RHSA-2026:42922) addresses multiple vulnerabilities in the libssh RPM packages included in Red Hat Hardened Images. The update provides bug fixes and enhancements for libssh version 0.12.1-4.hum1 across aarch64 and x86_64 platforms. The advisory covers 10 CVEs (CVE-2026-59842 to CVE-2026-59851) involving issues such as buffer overflows (CWE-125), resource exhaustion (CWE-789), use-after-free (CWE-416), and other memory and logic errors. The advisory does not specify exact affected versions or detailed patch information but indicates that the update is available. No known exploits have been observed in the wild. Users of Red Hat Hardened Images should apply the update as per Red Hat's instructions.

The vulnerabilities addressed include multiple critical memory and resource management issues that could potentially allow attackers to cause denial of service or execute arbitrary code if exploited. The high severity rating reflects the seriousness of these issues. However, no known active exploitation has been reported. The update mitigates these risks by providing fixed versions of the libssh packages.

A fix is available via the updated Red Hat Hardened Images RPMs, specifically libssh-0.12.1-4.hum1 packages for aarch64 and x86_64 architectures. Users should apply this update following Red Hat's official guidance at https://images.redhat.com/. Since this is a vendor-issued update, applying the official patch is the recommended mitigation. Patch status is confirmed by the vendor advisory.