RHSA-2026:16736HighCVSS 9.1

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published
May 13, 2026
Last Modified
November 6, 2026

🔗 CVE IDs covered (1)

CVE-2026-7598 →

📋 Description

CVE-2026-7598 — libssh2: integer overflow via large username or password arguments

🎯 Affected products36

  • Red Hat Hardened Images
  • cargo-0:1.95.0-5.hum1@aarch64 as a component of Red Hat Hardened Images
  • cargo-0:1.95.0-5.hum1@x86_64 as a component of Red Hat Hardened Images
  • clippy-0:1.95.0-5.hum1@aarch64 as a component of Red Hat Hardened Images
  • clippy-0:1.95.0-5.hum1@x86_64 as a component of Red Hat Hardened Images
  • rust-0:1.95.0-5.hum1@aarch64 as a component of Red Hat Hardened Images
  • rust-0:1.95.0-5.hum1@src as a component of Red Hat Hardened Images
  • rust-0:1.95.0-5.hum1@x86_64 as a component of Red Hat Hardened Images
  • rust-analyzer-0:1.95.0-5.hum1@aarch64 as a component of Red Hat Hardened Images
  • rust-analyzer-0:1.95.0-5.hum1@x86_64 as a component of Red Hat Hardened Images
  • rust-debugger-common-0:1.95.0-5.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images
  • rust-debugger-common-0:1.95.0-5.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images
  • rust-doc-0:1.95.0-5.hum1@aarch64 as a component of Red Hat Hardened Images
  • rust-doc-0:1.95.0-5.hum1@x86_64 as a component of Red Hat Hardened Images
  • rust-gdb-0:1.95.0-5.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images
  • rust-gdb-0:1.95.0-5.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images
  • rust-lldb-0:1.95.0-5.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images
  • rust-lldb-0:1.95.0-5.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images
  • rust-src-0:1.95.0-5.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images
  • rust-src-0:1.95.0-5.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images
  • rust-std-static-0:1.95.0-5.hum1@aarch64 as a component of Red Hat Hardened Images
  • rust-std-static-0:1.95.0-5.hum1@x86_64 as a component of Red Hat Hardened Images
  • rust-std-static-aarch64-unknown-none-softfloat-0:1.95.0-5.hum1@aarch64 as a component of Red Hat Hardened Images
  • rust-std-static-aarch64-unknown-uefi-0:1.95.0-5.hum1@aarch64 as a component of Red Hat Hardened Images
  • rust-std-static-i686-pc-windows-gnu-0:1.95.0-5.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images
  • rust-std-static-i686-pc-windows-gnu-0:1.95.0-5.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images
  • rust-std-static-wasm32-unknown-unknown-0:1.95.0-5.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images
  • rust-std-static-wasm32-unknown-unknown-0:1.95.0-5.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images
  • rust-std-static-wasm32-wasip1-0:1.95.0-5.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images
  • rust-std-static-wasm32-wasip1-0:1.95.0-5.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images
  • +6 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Workaround: To mitigate this flaw, applications linked to the libssh2 library should be configured or updated to exclusively use public key authentication. Explicitly disabling password-based logins prevents the application from executing the vulnerable userauth_password function.

🔗 References (5)