Vulnerability-Lookup

RHSA-2026:62217

Vulnerability from csaf_redhat - Published: 2026-09-01 18:41 - Updated: 2026-09-01 20:01

Summary

Red Hat Security Advisory: libssh security update

Severity

Moderate

Notes

Topic: An update for libssh is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fix(es): * libssh: libssh: denial of service via zero advertised channel packet size (CVE-2026-59843) * libssh: libssh: denial of service via oversized SFTP read length (CVE-2026-59844) * libssh: libssh: denial of service via unchecked ProxyCommand fork() failure (CVE-2026-59845) * libssh: libssh: information disclosure via ProxyCommand %r username expansion (CVE-2026-59846) * libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification (CVE-2026-59847) * libssh: libssh: denial of service via SFTP responses with unknown request IDs (CVE-2026-59848) * libssh: libssh: use-after-free via data callbacks on closed channels (CVE-2026-59850) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-59843

A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSH_MSG_CHANNEL_OPEN, causing later channel writes to loop indefinitely and consume CPU, leading to denial of service.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Fixed 32 products

Product	Version	Remediation
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2026-59844

A flaw was found in libssh. A remote authenticated client can issue SSH_FXP_READ requests with an arbitrarily large length, causing a libssh SFTP server to allocate excessive memory and potentially exhaust it through repeated requests.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-789 - Memory Allocation with Excessive Size Value

Affected products

Fixed 32 products

Product	Version	Remediation
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2026-59845

A flaw was found in libssh. When ProxyCommand is used, an unchecked fork() failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller's accessible process tree, leading to local denial of service.

5.3 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H

CWE-390 - Detection of Error Condition Without Action

Affected products

Fixed 32 products

Product	Version	Remediation
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2026-59846

A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment variables and causing unintended shell behavior.

3.9 (Low)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected products

Fixed 32 products

Product	Version	Remediation
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Low

CVE-2026-59847

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection.

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-253 - Incorrect Check of Function Return Value

Affected products

Fixed 32 products

Product	Version	Remediation
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2026-59848

A flaw was found in libssh. A malicious SFTP server can send responses for unknown request IDs that libssh clients keep queued indefinitely, causing unbounded memory growth and client-side denial of service.

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 32 products

Product	Version	Remediation
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2026-59850

A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions.

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE-416 - Use After Free

Affected products

Fixed 32 products

Product	Version	Remediation
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

References

38 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:62217	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2498176	external
https://bugzilla.redhat.com/show_bug.cgi?id=2498177	external
https://bugzilla.redhat.com/show_bug.cgi?id=2498178	external
https://bugzilla.redhat.com/show_bug.cgi?id=2498179	external
https://bugzilla.redhat.com/show_bug.cgi?id=2498180	external
https://bugzilla.redhat.com/show_bug.cgi?id=2498181	external
https://bugzilla.redhat.com/show_bug.cgi?id=2498183	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-59843	self
https://bugzilla.redhat.com/show_bug.cgi?id=2498176	external
https://www.cve.org/CVERecord?id=CVE-2026-59843	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59843	external
https://access.redhat.com/security/cve/CVE-2026-59844	self
https://bugzilla.redhat.com/show_bug.cgi?id=2498177	external
https://www.cve.org/CVERecord?id=CVE-2026-59844	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59844	external
https://access.redhat.com/security/cve/CVE-2026-59845	self
https://bugzilla.redhat.com/show_bug.cgi?id=2498178	external
https://www.cve.org/CVERecord?id=CVE-2026-59845	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59845	external
https://access.redhat.com/security/cve/CVE-2026-59846	self
https://bugzilla.redhat.com/show_bug.cgi?id=2498179	external
https://www.cve.org/CVERecord?id=CVE-2026-59846	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59846	external
https://access.redhat.com/security/cve/CVE-2026-59847	self
https://bugzilla.redhat.com/show_bug.cgi?id=2498180	external
https://www.cve.org/CVERecord?id=CVE-2026-59847	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59847	external
https://access.redhat.com/security/cve/CVE-2026-59848	self
https://bugzilla.redhat.com/show_bug.cgi?id=2498181	external
https://www.cve.org/CVERecord?id=CVE-2026-59848	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59848	external
https://access.redhat.com/security/cve/CVE-2026-59850	self
https://bugzilla.redhat.com/show_bug.cgi?id=2498183	external
https://www.cve.org/CVERecord?id=CVE-2026-59850	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59850	external

Acknowledgments

Rinku Das Yi Lin Haruto Kimura

Chanho Kim

Halil Oktay (oblivionsage)

Saransh Rana Mikhail Ilin

Ben Smyth

Aisle Research

Zhou Qingyang

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for libssh is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.\n\nSecurity Fix(es):\n\n* libssh: libssh: denial of service via zero advertised channel packet size (CVE-2026-59843)\n\n* libssh: libssh: denial of service via oversized SFTP read length (CVE-2026-59844)\n\n* libssh: libssh: denial of service via unchecked ProxyCommand fork() failure (CVE-2026-59845)\n\n* libssh: libssh: information disclosure via ProxyCommand %r username expansion (CVE-2026-59846)\n\n* libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification (CVE-2026-59847)\n\n* libssh: libssh: denial of service via SFTP responses with unknown request IDs (CVE-2026-59848)\n\n* libssh: libssh: use-after-free via data callbacks on closed channels (CVE-2026-59850)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:62217",
        "url": "https://access.redhat.com/errata/RHSA-2026:62217"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2498176",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498176"
      },
      {
        "category": "external",
        "summary": "2498177",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498177"
      },
      {
        "category": "external",
        "summary": "2498178",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498178"
      },
      {
        "category": "external",
        "summary": "2498179",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498179"
      },
      {
        "category": "external",
        "summary": "2498180",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498180"
      },
      {
        "category": "external",
        "summary": "2498181",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498181"
      },
      {
        "category": "external",
        "summary": "2498183",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498183"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_62217.json"
      }
    ],
    "title": "Red Hat Security Advisory: libssh security update",
    "tracking": {
      "current_release_date": "2026-09-01T20:01:30+00:00",
      "generator": {
        "date": "2026-09-01T20:01:30+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHSA-2026:62217",
      "initial_release_date": "2026-09-01T18:41:45+00:00",
      "revision_history": [
        {
          "date": "2026-09-01T18:41:45+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-01T18:41:45+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-01T20:01:30+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                  "product_id": "AppStream-9.8.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS (v. 9)",
                  "product_id": "BaseOS-9.8.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:9::baseos"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-0:0.10.4-19.el9_8.src",
                "product": {
                  "name": "libssh-0:0.10.4-19.el9_8.src",
                  "product_id": "libssh-0:0.10.4-19.el9_8.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh@0.10.4-19.el9_8?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-0:0.10.4-19.el9_8.aarch64",
                "product": {
                  "name": "libssh-0:0.10.4-19.el9_8.aarch64",
                  "product_id": "libssh-0:0.10.4-19.el9_8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh@0.10.4-19.el9_8?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
                "product": {
                  "name": "libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
                  "product_id": "libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debugsource@0.10.4-19.el9_8?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
                "product": {
                  "name": "libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
                  "product_id": "libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debuginfo@0.10.4-19.el9_8?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-devel-0:0.10.4-19.el9_8.aarch64",
                "product": {
                  "name": "libssh-devel-0:0.10.4-19.el9_8.aarch64",
                  "product_id": "libssh-devel-0:0.10.4-19.el9_8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-devel@0.10.4-19.el9_8?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-0:0.10.4-19.el9_8.i686",
                "product": {
                  "name": "libssh-0:0.10.4-19.el9_8.i686",
                  "product_id": "libssh-0:0.10.4-19.el9_8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh@0.10.4-19.el9_8?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debugsource-0:0.10.4-19.el9_8.i686",
                "product": {
                  "name": "libssh-debugsource-0:0.10.4-19.el9_8.i686",
                  "product_id": "libssh-debugsource-0:0.10.4-19.el9_8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debugsource@0.10.4-19.el9_8?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debuginfo-0:0.10.4-19.el9_8.i686",
                "product": {
                  "name": "libssh-debuginfo-0:0.10.4-19.el9_8.i686",
                  "product_id": "libssh-debuginfo-0:0.10.4-19.el9_8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debuginfo@0.10.4-19.el9_8?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-devel-0:0.10.4-19.el9_8.i686",
                "product": {
                  "name": "libssh-devel-0:0.10.4-19.el9_8.i686",
                  "product_id": "libssh-devel-0:0.10.4-19.el9_8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-devel@0.10.4-19.el9_8?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-0:0.10.4-19.el9_8.x86_64",
                "product": {
                  "name": "libssh-0:0.10.4-19.el9_8.x86_64",
                  "product_id": "libssh-0:0.10.4-19.el9_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh@0.10.4-19.el9_8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debugsource-0:0.10.4-19.el9_8.x86_64",
                "product": {
                  "name": "libssh-debugsource-0:0.10.4-19.el9_8.x86_64",
                  "product_id": "libssh-debugsource-0:0.10.4-19.el9_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debugsource@0.10.4-19.el9_8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
                "product": {
                  "name": "libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
                  "product_id": "libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debuginfo@0.10.4-19.el9_8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-devel-0:0.10.4-19.el9_8.x86_64",
                "product": {
                  "name": "libssh-devel-0:0.10.4-19.el9_8.x86_64",
                  "product_id": "libssh-devel-0:0.10.4-19.el9_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-devel@0.10.4-19.el9_8?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-0:0.10.4-19.el9_8.ppc64le",
                "product": {
                  "name": "libssh-0:0.10.4-19.el9_8.ppc64le",
                  "product_id": "libssh-0:0.10.4-19.el9_8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh@0.10.4-19.el9_8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
                "product": {
                  "name": "libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
                  "product_id": "libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debugsource@0.10.4-19.el9_8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
                "product": {
                  "name": "libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
                  "product_id": "libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debuginfo@0.10.4-19.el9_8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-devel-0:0.10.4-19.el9_8.ppc64le",
                "product": {
                  "name": "libssh-devel-0:0.10.4-19.el9_8.ppc64le",
                  "product_id": "libssh-devel-0:0.10.4-19.el9_8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-devel@0.10.4-19.el9_8?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-0:0.10.4-19.el9_8.s390x",
                "product": {
                  "name": "libssh-0:0.10.4-19.el9_8.s390x",
                  "product_id": "libssh-0:0.10.4-19.el9_8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh@0.10.4-19.el9_8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debugsource-0:0.10.4-19.el9_8.s390x",
                "product": {
                  "name": "libssh-debugsource-0:0.10.4-19.el9_8.s390x",
                  "product_id": "libssh-debugsource-0:0.10.4-19.el9_8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debugsource@0.10.4-19.el9_8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
                "product": {
                  "name": "libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
                  "product_id": "libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debuginfo@0.10.4-19.el9_8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-devel-0:0.10.4-19.el9_8.s390x",
                "product": {
                  "name": "libssh-devel-0:0.10.4-19.el9_8.s390x",
                  "product_id": "libssh-devel-0:0.10.4-19.el9_8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-devel@0.10.4-19.el9_8?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-config-0:0.10.4-19.el9_8.noarch",
                "product": {
                  "name": "libssh-config-0:0.10.4-19.el9_8.noarch",
                  "product_id": "libssh-config-0:0.10.4-19.el9_8.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-config@0.10.4-19.el9_8?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.10.4-19.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64"
        },
        "product_reference": "libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.10.4-19.el9_8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686"
        },
        "product_reference": "libssh-debuginfo-0:0.10.4-19.el9_8.i686",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le"
        },
        "product_reference": "libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.10.4-19.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x"
        },
        "product_reference": "libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.10.4-19.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64"
        },
        "product_reference": "libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.10.4-19.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64"
        },
        "product_reference": "libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.10.4-19.el9_8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686"
        },
        "product_reference": "libssh-debugsource-0:0.10.4-19.el9_8.i686",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.10.4-19.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le"
        },
        "product_reference": "libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.10.4-19.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x"
        },
        "product_reference": "libssh-debugsource-0:0.10.4-19.el9_8.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.10.4-19.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64"
        },
        "product_reference": "libssh-debugsource-0:0.10.4-19.el9_8.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0:0.10.4-19.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64"
        },
        "product_reference": "libssh-devel-0:0.10.4-19.el9_8.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0:0.10.4-19.el9_8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686"
        },
        "product_reference": "libssh-devel-0:0.10.4-19.el9_8.i686",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0:0.10.4-19.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le"
        },
        "product_reference": "libssh-devel-0:0.10.4-19.el9_8.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0:0.10.4-19.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x"
        },
        "product_reference": "libssh-devel-0:0.10.4-19.el9_8.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0:0.10.4-19.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64"
        },
        "product_reference": "libssh-devel-0:0.10.4-19.el9_8.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-0:0.10.4-19.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64"
        },
        "product_reference": "libssh-0:0.10.4-19.el9_8.aarch64",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-0:0.10.4-19.el9_8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686"
        },
        "product_reference": "libssh-0:0.10.4-19.el9_8.i686",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-0:0.10.4-19.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le"
        },
        "product_reference": "libssh-0:0.10.4-19.el9_8.ppc64le",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-0:0.10.4-19.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x"
        },
        "product_reference": "libssh-0:0.10.4-19.el9_8.s390x",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-0:0.10.4-19.el9_8.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src"
        },
        "product_reference": "libssh-0:0.10.4-19.el9_8.src",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-0:0.10.4-19.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64"
        },
        "product_reference": "libssh-0:0.10.4-19.el9_8.x86_64",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0:0.10.4-19.el9_8.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch"
        },
        "product_reference": "libssh-config-0:0.10.4-19.el9_8.noarch",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.10.4-19.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64"
        },
        "product_reference": "libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.10.4-19.el9_8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686"
        },
        "product_reference": "libssh-debuginfo-0:0.10.4-19.el9_8.i686",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le"
        },
        "product_reference": "libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.10.4-19.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x"
        },
        "product_reference": "libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.10.4-19.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64"
        },
        "product_reference": "libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.10.4-19.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64"
        },
        "product_reference": "libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.10.4-19.el9_8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686"
        },
        "product_reference": "libssh-debugsource-0:0.10.4-19.el9_8.i686",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.10.4-19.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le"
        },
        "product_reference": "libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.10.4-19.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x"
        },
        "product_reference": "libssh-debugsource-0:0.10.4-19.el9_8.s390x",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.10.4-19.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64"
        },
        "product_reference": "libssh-debugsource-0:0.10.4-19.el9_8.x86_64",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Rinku Das",
            "Yi Lin",
            "Haruto Kimura"
          ]
        }
      ],
      "cve": "CVE-2026-59843",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2026-04-29T10:03:47.442000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2498176"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSH_MSG_CHANNEL_OPEN, causing later channel writes to loop indefinitely and consume CPU, leading to denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: libssh: denial of service via zero advertised channel packet size",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59843"
        },
        {
          "category": "external",
          "summary": "RHBZ#2498176",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498176"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59843",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59843"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59843",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59843"
        }
      ],
      "release_date": "2026-07-21T11:07:00.776000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T18:41:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62217"
        },
        {
          "category": "workaround",
          "details": "No workaround available.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libssh: libssh: denial of service via zero advertised channel packet size"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Chanho Kim"
          ]
        }
      ],
      "cve": "CVE-2026-59844",
      "cwe": {
        "id": "CWE-789",
        "name": "Memory Allocation with Excessive Size Value"
      },
      "discovery_date": "2026-04-29T10:03:47.442000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2498177"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libssh. A remote authenticated client can issue SSH_FXP_READ requests with an arbitrarily large length, causing a libssh SFTP server to allocate excessive memory and potentially exhaust it through repeated requests.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: libssh: denial of service via oversized SFTP read length",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59844"
        },
        {
          "category": "external",
          "summary": "RHBZ#2498177",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498177"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59844",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59844"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59844",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59844"
        }
      ],
      "release_date": "2026-07-21T11:17:49.367000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T18:41:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62217"
        },
        {
          "category": "workaround",
          "details": "No workaround available.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libssh: libssh: denial of service via oversized SFTP read length"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Halil Oktay (oblivionsage)"
          ]
        }
      ],
      "cve": "CVE-2026-59845",
      "cwe": {
        "id": "CWE-390",
        "name": "Detection of Error Condition Without Action"
      },
      "discovery_date": "2026-04-29T10:03:47.442000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2498178"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libssh. When ProxyCommand is used, an unchecked fork() failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller\u0027s accessible process tree, leading to local denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: libssh: denial of service via unchecked ProxyCommand fork() failure",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Moderate flaw in libssh client-side ProxyCommand handling can lead to a local denial of service. When ProxyCommand is configured, an unchecked fork() failure may result in signals being sent across the process tree, disrupting local system availability. This issue specifically impacts environments utilizing ProxyCommand functionality.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59845"
        },
        {
          "category": "external",
          "summary": "RHBZ#2498178",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498178"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59845",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59845"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59845",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59845"
        }
      ],
      "release_date": "2026-07-21T11:23:44.480000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T18:41:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62217"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, avoid using the ProxyCommand feature in libssh client configurations. This prevents the vulnerable code path from being exercised, thereby eliminating the risk of local denial of service due to unchecked fork() failures.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libssh: libssh: denial of service via unchecked ProxyCommand fork() failure"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Saransh Rana",
            "Mikhail Ilin"
          ]
        }
      ],
      "cve": "CVE-2026-59846",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "discovery_date": "2026-04-29T10:03:47.442000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2498179"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment variables and causing unintended shell behavior.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: libssh: information disclosure via ProxyCommand %r username expansion",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59846"
        },
        {
          "category": "external",
          "summary": "RHBZ#2498179",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498179"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59846",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59846"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59846",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59846"
        }
      ],
      "release_date": "2026-07-21T12:46:04.558000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T18:41:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62217"
        },
        {
          "category": "workaround",
          "details": "Make sure you are not executing connections with untrusted username inputs.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 3.9,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "libssh: libssh: information disclosure via ProxyCommand %r username expansion"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Ben Smyth"
          ]
        }
      ],
      "cve": "CVE-2026-59847",
      "cwe": {
        "id": "CWE-253",
        "name": "Incorrect Check of Function Return Value"
      },
      "discovery_date": "2026-04-29T10:03:47.442000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2498180"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59847"
        },
        {
          "category": "external",
          "summary": "RHBZ#2498180",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498180"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59847",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59847"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59847",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59847"
        }
      ],
      "release_date": "2026-07-21T13:02:11.381000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T18:41:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62217"
        },
        {
          "category": "workaround",
          "details": "Disable the aes128-gcm@openssh.com and aes256-gcm@openssh.com ciphers.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Aisle Research"
          ]
        }
      ],
      "cve": "CVE-2026-59848",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-04-29T10:03:47.442000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2498181"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libssh. A malicious SFTP server can send responses for unknown request IDs that libssh clients keep queued indefinitely, causing unbounded memory growth and client-side denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: libssh: denial of service via SFTP responses with unknown request IDs",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59848"
        },
        {
          "category": "external",
          "summary": "RHBZ#2498181",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498181"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59848",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59848"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59848",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59848"
        }
      ],
      "release_date": "2026-07-21T13:18:03.060000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T18:41:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62217"
        },
        {
          "category": "workaround",
          "details": "Do not connect to untrusted SFTP servers.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libssh: libssh: denial of service via SFTP responses with unknown request IDs"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Zhou Qingyang"
          ]
        }
      ],
      "cve": "CVE-2026-59850",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2026-04-29T10:03:47.442000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2498183"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: libssh: use-after-free via data callbacks on closed channels",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
          "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59850"
        },
        {
          "category": "external",
          "summary": "RHBZ#2498183",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498183"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59850",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59850"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59850",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59850"
        }
      ],
      "release_date": "2026-07-21T14:08:16.749000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T18:41:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62217"
        },
        {
          "category": "workaround",
          "details": "Manually verify the channel is not closed inside your channel data callbacks.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.i686",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:libssh-devel-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.src",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-config-0:0.10.4-19.el9_8.noarch",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debuginfo-0:0.10.4-19.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.i686",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:libssh-debugsource-0:0.10.4-19.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libssh: libssh: use-after-free via data callbacks on closed channels"
    }
  ]
}

CVE-2026-59843 (GCVE-0-2026-59843)

Vulnerability from cvelistv5 – Published: 2026-07-21 11:16 – Updated: 2026-09-01 20:01

Title

Libssh: libssh: denial of service via zero advertised channel packet size

Summary

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-21 12:08 UTC

CWE

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')
CWE-400 - Uncontrolled Resource Consumption

Assigner

redhat redhat root

References

6 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:42922	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:55855	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:62217	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:62218	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-59843	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2498176	issue-trackingx_refsource_REDHAT

Impacted products

4 products

Vendor	Product	Version
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.12.0-3.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:0.9.6-17.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::appstream cpe:/o:redhat:enterprise_linux:8::baseos
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:0.10.4-19.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::appstream cpe:/o:redhat:enterprise_linux:9::baseos
Red Hat	Red Hat Hardened Images	Unaffected: 0.12.1-4.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1

Date Public

2026-07-21 11:07

Credits

Red Hat would like to thank Haruto Kimura, Rinku Das, and Yi Lin for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-59843",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-21T12:08:16.810909Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-21T12:08:28.113Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.2"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.12.0-3.el10_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.9.6-17.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.9.6-17.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.10.4-19.el9_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.10.4-19.el9_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:hummingbird:1"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh-main",
          "product": "Red Hat Hardened Images",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0.12.1-4.hum1",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank Haruto Kimura, Rinku Das, and Yi Lin for reporting this issue."
        }
      ],
      "datePublic": "2026-07-21T11:07:00.776Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSH_MSG_CHANNEL_OPEN, causing later channel writes to loop indefinitely and consume CPU, leading to denial of service."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-835",
              "description": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-01T20:01:39.685Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:42922",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:42922"
        },
        {
          "name": "RHSA-2026:55855",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:55855"
        },
        {
          "name": "RHSA-2026:62217",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:62217"
        },
        {
          "name": "RHSA-2026:62218",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:62218"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-59843"
        },
        {
          "name": "RHBZ#2498176",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498176"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-04-29T10:03:47.442Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-07-21T11:07:00.776Z",
          "value": "Made public."
        }
      ],
      "title": "Libssh: libssh: denial of service via zero advertised channel packet size",
      "workarounds": [
        {
          "lang": "en",
          "value": "No workaround available."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-835: Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-59843",
    "datePublished": "2026-07-21T11:16:12.061Z",
    "dateReserved": "2026-07-07T15:40:24.561Z",
    "dateUpdated": "2026-09-01T20:01:39.685Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-59844 (GCVE-0-2026-59844)

Vulnerability from cvelistv5 – Published: 2026-07-21 11:32 – Updated: 2026-09-01 20:01

Title

Libssh: libssh: denial of service via oversized sftp read length

Summary

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-21 13:11 UTC

CWE

CWE-789 - Memory Allocation with Excessive Size Value

Assigner

redhat redhat root

References

6 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:42922	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:55855	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:62217	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:62218	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-59844	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2498177	issue-trackingx_refsource_REDHAT

Impacted products

4 products

Vendor	Product	Version
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.12.0-3.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:0.9.6-17.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::appstream cpe:/o:redhat:enterprise_linux:8::baseos
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:0.10.4-19.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::appstream cpe:/o:redhat:enterprise_linux:9::baseos
Red Hat	Red Hat Hardened Images	Unaffected: 0.12.1-4.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1

Date Public

2026-07-21 11:17

Credits

Red Hat would like to thank Chanho Kim for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-59844",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-21T13:11:22.542338Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-21T14:55:29.675Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.2"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.12.0-3.el10_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.9.6-17.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.9.6-17.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.10.4-19.el9_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.10.4-19.el9_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:hummingbird:1"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh-main",
          "product": "Red Hat Hardened Images",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0.12.1-4.hum1",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank Chanho Kim for reporting this issue."
        }
      ],
      "datePublic": "2026-07-21T11:17:49.367Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in libssh. A remote authenticated client can issue SSH_FXP_READ requests with an arbitrarily large length, causing a libssh SFTP server to allocate excessive memory and potentially exhaust it through repeated requests."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-789",
              "description": "Memory Allocation with Excessive Size Value",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-01T20:01:43.079Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:42922",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:42922"
        },
        {
          "name": "RHSA-2026:55855",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:55855"
        },
        {
          "name": "RHSA-2026:62217",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:62217"
        },
        {
          "name": "RHSA-2026:62218",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:62218"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-59844"
        },
        {
          "name": "RHBZ#2498177",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498177"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-04-29T10:03:47.442Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-07-21T11:17:49.367Z",
          "value": "Made public."
        }
      ],
      "title": "Libssh: libssh: denial of service via oversized sftp read length",
      "workarounds": [
        {
          "lang": "en",
          "value": "No workaround available."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-789: Memory Allocation with Excessive Size Value"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-59844",
    "datePublished": "2026-07-21T11:32:16.816Z",
    "dateReserved": "2026-07-07T15:40:24.561Z",
    "dateUpdated": "2026-09-01T20:01:43.079Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-59845 (GCVE-0-2026-59845)

Vulnerability from cvelistv5 – Published: 2026-07-21 11:26 – Updated: 2026-09-01 20:01

Title

Libssh: libssh: denial of service via unchecked proxycommand fork() failure

Summary

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-23 14:29 UTC

CWE

CWE-390 - Detection of Error Condition Without Action

Assigner

redhat redhat root

References

6 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:42922	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:55855	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:62217	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:62218	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-59845	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2498178	issue-trackingx_refsource_REDHAT

Impacted products

4 products

Vendor	Product	Version
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.12.0-3.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:0.9.6-17.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::appstream cpe:/o:redhat:enterprise_linux:8::baseos
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:0.10.4-19.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::appstream cpe:/o:redhat:enterprise_linux:9::baseos
Red Hat	Red Hat Hardened Images	Unaffected: 0.12.1-4.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1

Date Public

2026-07-21 11:23

Credits

Red Hat would like to thank Halil Oktay (oblivionsage) for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-59845",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-23T14:29:59.822776Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-390",
                "description": "CWE-390 Detection of Error Condition Without Action",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-23T14:30:03.721Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.2"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.12.0-3.el10_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.9.6-17.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.9.6-17.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.10.4-19.el9_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.10.4-19.el9_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:hummingbird:1"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh-main",
          "product": "Red Hat Hardened Images",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0.12.1-4.hum1",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank Halil Oktay (oblivionsage) for reporting this issue."
        }
      ],
      "datePublic": "2026-07-21T11:23:44.480Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in libssh. When ProxyCommand is used, an unchecked fork() failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller\u0027s accessible process tree, leading to local denial of service."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-390",
              "description": "Detection of Error Condition Without Action",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-01T20:01:47.686Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:42922",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:42922"
        },
        {
          "name": "RHSA-2026:55855",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:55855"
        },
        {
          "name": "RHSA-2026:62217",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:62217"
        },
        {
          "name": "RHSA-2026:62218",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:62218"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-59845"
        },
        {
          "name": "RHBZ#2498178",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498178"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-04-29T10:03:47.442Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-07-21T11:23:44.480Z",
          "value": "Made public."
        }
      ],
      "title": "Libssh: libssh: denial of service via unchecked proxycommand fork() failure",
      "workarounds": [
        {
          "lang": "en",
          "value": "To mitigate this issue, avoid using the ProxyCommand feature in libssh client configurations. This prevents the vulnerable code path from being exercised, thereby eliminating the risk of local denial of service due to unchecked fork() failures."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-390: Detection of Error Condition Without Action"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-59845",
    "datePublished": "2026-07-21T11:26:43.884Z",
    "dateReserved": "2026-07-07T15:40:24.561Z",
    "dateUpdated": "2026-09-01T20:01:47.686Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-59846 (GCVE-0-2026-59846)

Vulnerability from cvelistv5 – Published: 2026-07-21 12:55 – Updated: 2026-09-01 20:21

Title

Libssh: libssh: information disclosure via proxycommand %r username expansion

Summary

A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment variables and causing unintended shell behavior.

Severity

3.9 (Low)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-22 14:03 UTC

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')

Assigner

redhat redhat root

References

6 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:42922	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:55855	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:62217	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:62218	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-59846	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2498179	issue-trackingx_refsource_REDHAT

Impacted products

4 products

Vendor	Product	Version
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.12.0-3.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:0.9.6-17.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::appstream cpe:/o:redhat:enterprise_linux:8::baseos
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:0.10.4-19.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::appstream cpe:/o:redhat:enterprise_linux:9::baseos
Red Hat	Red Hat Hardened Images	Unaffected: 0.12.1-4.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1

Date Public

2026-07-21 12:46

Credits

Red Hat would like to thank Mikhail Ilin and Saransh Rana for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-59846",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-22T14:03:12.267428Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-77",
                "description": "CWE-77 Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-23T13:40:22.734Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.2"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.12.0-3.el10_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.9.6-17.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.9.6-17.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.10.4-19.el9_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.10.4-19.el9_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:hummingbird:1"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh-main",
          "product": "Red Hat Hardened Images",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0.12.1-4.hum1",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank Mikhail Ilin and Saransh Rana for reporting this issue."
        }
      ],
      "datePublic": "2026-07-21T12:46:04.558Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment variables and causing unintended shell behavior."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Low"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 3.9,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-01T20:21:47.724Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:42922",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:42922"
        },
        {
          "name": "RHSA-2026:55855",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:55855"
        },
        {
          "name": "RHSA-2026:62217",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:62217"
        },
        {
          "name": "RHSA-2026:62218",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:62218"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-59846"
        },
        {
          "name": "RHBZ#2498179",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498179"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-04-29T10:03:47.442Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-07-21T12:46:04.558Z",
          "value": "Made public."
        }
      ],
      "title": "Libssh: libssh: information disclosure via proxycommand %r username expansion",
      "workarounds": [
        {
          "lang": "en",
          "value": "Make sure you are not executing connections with untrusted username inputs."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-78: Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-59846",
    "datePublished": "2026-07-21T12:55:56.532Z",
    "dateReserved": "2026-07-07T15:40:24.561Z",
    "dateUpdated": "2026-09-01T20:21:47.724Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-59847 (GCVE-0-2026-59847)

Vulnerability from cvelistv5 – Published: 2026-07-21 13:18 – Updated: 2026-09-01 20:01

Title

Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification

Summary

Severity

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-21 14:03 UTC

CWE

CWE-253 - Incorrect Check of Function Return Value
CWE-1310 - Missing Ability to Patch ROM Code

Assigner

redhat redhat root

References

6 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:42922	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:55855	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:62217	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:62218	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-59847	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2498180	issue-trackingx_refsource_REDHAT

Impacted products

4 products

Vendor	Product	Version
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.12.0-3.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:0.9.6-17.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::appstream cpe:/o:redhat:enterprise_linux:8::baseos
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:0.10.4-19.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::appstream cpe:/o:redhat:enterprise_linux:9::baseos
Red Hat	Red Hat Hardened Images	Unaffected: 0.12.1-4.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1

Date Public

2026-07-21 13:02

Credits

Red Hat would like to thank Ben Smyth for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-59847",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-21T14:03:33.644166Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-1310",
                "description": "CWE-1310 Missing Ability to Patch ROM Code",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-21T14:06:22.692Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.2"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.12.0-3.el10_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.9.6-17.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.9.6-17.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.10.4-19.el9_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.10.4-19.el9_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:hummingbird:1"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh-main",
          "product": "Red Hat Hardened Images",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0.12.1-4.hum1",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank Ben Smyth for reporting this issue."
        }
      ],
      "datePublic": "2026-07-21T13:02:11.381Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-253",
              "description": "Incorrect Check of Function Return Value",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-01T20:01:21.481Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:42922",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:42922"
        },
        {
          "name": "RHSA-2026:55855",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:55855"
        },
        {
          "name": "RHSA-2026:62217",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:62217"
        },
        {
          "name": "RHSA-2026:62218",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:62218"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-59847"
        },
        {
          "name": "RHBZ#2498180",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498180"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-04-29T10:03:47.442Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-07-21T13:02:11.381Z",
          "value": "Made public."
        }
      ],
      "title": "Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification",
      "workarounds": [
        {
          "lang": "en",
          "value": "Disable the aes128-gcm@openssh.com and aes256-gcm@openssh.com ciphers."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-253: Incorrect Check of Function Return Value"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-59847",
    "datePublished": "2026-07-21T13:18:18.146Z",
    "dateReserved": "2026-07-07T15:40:24.561Z",
    "dateUpdated": "2026-09-01T20:01:21.481Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-59848 (GCVE-0-2026-59848)

Vulnerability from cvelistv5 – Published: 2026-07-21 13:21 – Updated: 2026-09-01 20:01

Title

Libssh: libssh: denial of service via sftp responses with unknown request ids

Summary

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-23 14:28 UTC

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

redhat redhat root

References

6 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:42922	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:55855	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:62217	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:62218	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-59848	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2498181	issue-trackingx_refsource_REDHAT

Impacted products

4 products

Vendor	Product	Version
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.12.0-3.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:0.9.6-17.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::appstream cpe:/o:redhat:enterprise_linux:8::baseos
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:0.10.4-19.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::appstream cpe:/o:redhat:enterprise_linux:9::baseos
Red Hat	Red Hat Hardened Images	Unaffected: 0.12.1-4.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1

Date Public

2026-07-21 13:18

Credits

Red Hat would like to thank Aisle Research for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-59848",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-23T14:28:25.543981Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-770",
                "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-23T14:28:28.830Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.2"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.12.0-3.el10_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.9.6-17.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.9.6-17.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.10.4-19.el9_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.10.4-19.el9_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:hummingbird:1"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh-main",
          "product": "Red Hat Hardened Images",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0.12.1-4.hum1",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank Aisle Research for reporting this issue."
        }
      ],
      "datePublic": "2026-07-21T13:18:03.060Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in libssh. A malicious SFTP server can send responses for unknown request IDs that libssh clients keep queued indefinitely, causing unbounded memory growth and client-side denial of service."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-01T20:01:22.011Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:42922",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:42922"
        },
        {
          "name": "RHSA-2026:55855",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:55855"
        },
        {
          "name": "RHSA-2026:62217",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:62217"
        },
        {
          "name": "RHSA-2026:62218",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:62218"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-59848"
        },
        {
          "name": "RHBZ#2498181",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498181"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-04-29T10:03:47.442Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-07-21T13:18:03.060Z",
          "value": "Made public."
        }
      ],
      "title": "Libssh: libssh: denial of service via sftp responses with unknown request ids",
      "workarounds": [
        {
          "lang": "en",
          "value": "Do not connect to untrusted SFTP servers."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-770: Allocation of Resources Without Limits or Throttling"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-59848",
    "datePublished": "2026-07-21T13:21:50.027Z",
    "dateReserved": "2026-07-07T15:40:24.561Z",
    "dateUpdated": "2026-09-01T20:01:22.011Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-59850 (GCVE-0-2026-59850)

Vulnerability from cvelistv5 – Published: 2026-07-21 14:15 – Updated: 2026-09-01 20:01

Title

Libssh: libssh: use-after-free via data callbacks on closed channels

Summary

Severity

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-21 14:47 UTC

CWE

CWE-416 - Use After Free

Assigner

redhat redhat root

References

6 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:42922	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:55855	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:62217	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:62218	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-59850	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2498183	issue-trackingx_refsource_REDHAT

Impacted products

4 products

Vendor	Product	Version
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.12.0-3.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:0.9.6-17.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::appstream cpe:/o:redhat:enterprise_linux:8::baseos
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:0.10.4-19.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::appstream cpe:/o:redhat:enterprise_linux:9::baseos
Red Hat	Red Hat Hardened Images	Unaffected: 0.12.1-4.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1

Date Public

2026-07-21 14:08

Credits

Red Hat would like to thank Zhou Qingyang for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-59850",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-21T14:47:51.208379Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-21T14:55:01.198Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.2"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.12.0-3.el10_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.9.6-17.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.9.6-17.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.10.4-19.el9_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.10.4-19.el9_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:hummingbird:1"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh-main",
          "product": "Red Hat Hardened Images",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0.12.1-4.hum1",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank Zhou Qingyang for reporting this issue."
        }
      ],
      "datePublic": "2026-07-21T14:08:16.749Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-01T20:01:27.766Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:42922",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:42922"
        },
        {
          "name": "RHSA-2026:55855",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:55855"
        },
        {
          "name": "RHSA-2026:62217",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:62217"
        },
        {
          "name": "RHSA-2026:62218",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:62218"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-59850"
        },
        {
          "name": "RHBZ#2498183",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498183"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-04-29T10:03:47.442Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-07-21T14:08:16.749Z",
          "value": "Made public."
        }
      ],
      "title": "Libssh: libssh: use-after-free via data callbacks on closed channels",
      "workarounds": [
        {
          "lang": "en",
          "value": "Manually verify the channel is not closed inside your channel data callbacks."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-416: Use After Free"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-59850",
    "datePublished": "2026-07-21T14:15:58.793Z",
    "dateReserved": "2026-07-07T15:40:24.561Z",
    "dateUpdated": "2026-09-01T20:01:27.766Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

RHSA-2026:62217

CVE-2026-59843 (GCVE-0-2026-59843)

CVE-2026-59844 (GCVE-0-2026-59844)

CVE-2026-59845 (GCVE-0-2026-59845)

CVE-2026-59846 (GCVE-0-2026-59846)

CVE-2026-59847 (GCVE-0-2026-59847)

CVE-2026-59848 (GCVE-0-2026-59848)

CVE-2026-59850 (GCVE-0-2026-59850)

Tags

Sightings

Nomenclature