RHSA-2026:61752HighCVSS 9.1

Red Hat Security Advisory: libssh2 security update

Published
August 31, 2026
Last Modified
November 5, 2026

🔗 CVE IDs covered (4)

CVE-2026-7598 →CVE-2026-58050 →CVE-2026-66032 →CVE-2026-66034 →

📋 Description

CVE-2026-7598 — libssh2: integer overflow via large username or password arguments CVE-2026-58050 — libssh2: libssh2: Heap buffer overflow via integer overflow in publickey attribute allocation CVE-2026-66032 — libssh2: libssh2: Arbitrary code execution via double-free in SFTP session CVE-2026-66034 — libssh2: libssh2: Information disclosure and potential arbitrary code execution via heap out-of-bounds read

🎯 Affected products32

  • Red Hat Enterprise Linux Server (v. 7 ELS)
  • Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • libssh2-0:1.8.0-4.el7_9.2.i686 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • libssh2-0:1.8.0-4.el7_9.2.ppc as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • libssh2-0:1.8.0-4.el7_9.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • libssh2-0:1.8.0-4.el7_9.2.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • libssh2-0:1.8.0-4.el7_9.2.s390 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • libssh2-0:1.8.0-4.el7_9.2.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • libssh2-0:1.8.0-4.el7_9.2.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • libssh2-0:1.8.0-4.el7_9.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • libssh2-debuginfo-0:1.8.0-4.el7_9.2.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • libssh2-debuginfo-0:1.8.0-4.el7_9.2.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • libssh2-debuginfo-0:1.8.0-4.el7_9.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • libssh2-debuginfo-0:1.8.0-4.el7_9.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • libssh2-devel-0:1.8.0-4.el7_9.2.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • libssh2-devel-0:1.8.0-4.el7_9.2.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • libssh2-devel-0:1.8.0-4.el7_9.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • libssh2-devel-0:1.8.0-4.el7_9.2.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • libssh2-devel-0:1.8.0-4.el7_9.2.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • libssh2-devel-0:1.8.0-4.el7_9.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • +2 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: To mitigate this flaw, applications linked to the libssh2 library should be configured or updated to exclusively use public key authentication. Explicitly disabling password-based logins prevents the application from executing the vulnerable userauth_password function. Workaround: To mitigate this issue,ensure your applications are running strictly on 64-bit architectures, which naturally prevents the integer overflow from occurring. Additionally, configure your applications to connect only to trusted, verified SSH servers. Workaround: Restrict your libssh2 clients to connect only to fully trusted, internal SFTP servers to eliminate exposure to malicious server responses. Additionally, configure dependent applications with Restart=on-failure in systemd so RHEL's glibc memory protections can safely crash and auto-recover the process during an attack. Workaround: To mitigate this, strictly avoid connecting to untrusted SSH servers and enforce this policy using outbound network firewalls to block unknown IP addresses. For defense-in-depth, utilize OS-level memory protections and service sandboxing to contain any accidental exposure.

🔗 References (7)