This security advisory from Red Hat addresses a vulnerability in the libssh2 RPM packages included in Red Hat Hardened Images. The vulnerability is tracked as CVE-2026-66035 and categorized under CWE-120, which typically involves buffer overflow or similar memory corruption issues. The advisory provides updated package versions (libssh2-1.11.1-10.3.hum1 and related packages) for aarch64 and x86_64 architectures. While no CVSS score is available, the issue is considered high severity by Red Hat. No known exploits have been reported, and the advisory does not detail the exact nature of the vulnerability beyond the CWE classification.

The vulnerability affects libssh2 packages used in Red Hat Hardened Images, potentially allowing memory corruption issues as indicated by CWE-120. This could lead to denial of service or other impacts depending on exploitation, but no specific impact details or exploit reports are provided. The severity is assessed as high by Red Hat, indicating a significant security concern.

Red Hat has released updated libssh2 packages (version 1.11.1-10.3.hum1) for affected architectures. Users of Red Hat Hardened Images should apply these updates as provided by Red Hat to remediate the vulnerability. Since this is an official security advisory with updated packages available, applying the vendor-provided updates is the recommended mitigation. Patch status is confirmed by the vendor advisory.