Vulnerability-Lookup

RHSA-2026:55855

Vulnerability from csaf_redhat - Published: 2026-08-17 21:37 - Updated: 2026-08-18 02:04

Summary

Red Hat Security Advisory: libssh security update

Severity

Important

Notes

Topic: An update for libssh is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fix(es): * libssh: libssh: information disclosure via short GSSAPI Curve25519 public key (CVE-2026-59842) * libssh: libssh: denial of service via zero advertised channel packet size (CVE-2026-59843) * libssh: libssh: denial of service via oversized SFTP read length (CVE-2026-59844) * libssh: libssh: denial of service via unchecked ProxyCommand fork() failure (CVE-2026-59845) * libssh: libssh: information disclosure via ProxyCommand %r username expansion (CVE-2026-59846) * libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification (CVE-2026-59847) * libssh: libssh: denial of service via SFTP responses with unknown request IDs (CVE-2026-59848) * libssh: libssh: denial of service via automatic certificate authentication loop (CVE-2026-59849) * libssh: libssh: use-after-free via data callbacks on closed channels (CVE-2026-59850) * libssh: libssh: authentication bypass via missing GSSAPI principal check (CVE-2026-59851) * libssh: libssh: stack buffer overflow in SFTP server longname construction (CVE-2026-15370) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-15370

A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack buffer. When a client causes the server to list attacker-controlled filenames, sufficiently long names can overflow that stack buffer and may lead to crashes or possible code execution on the server.

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

CWE-121 - Stack-based Buffer Overflow

Affected products

Fixed 26 products

Product	Version	Remediation
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2026-59842

A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small amounts of server memory.

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Fixed 26 products

Product	Version	Remediation
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Low

CVE-2026-59843

A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSH_MSG_CHANNEL_OPEN, causing later channel writes to loop indefinitely and consume CPU, leading to denial of service.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Fixed 26 products

Product	Version	Remediation
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2026-59844

A flaw was found in libssh. A remote authenticated client can issue SSH_FXP_READ requests with an arbitrarily large length, causing a libssh SFTP server to allocate excessive memory and potentially exhaust it through repeated requests.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-789 - Memory Allocation with Excessive Size Value

Affected products

Fixed 26 products

Product	Version	Remediation
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2026-59845

A flaw was found in libssh. When ProxyCommand is used, an unchecked fork() failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller's accessible process tree, leading to local denial of service.

5.3 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H

CWE-390 - Detection of Error Condition Without Action

Affected products

Fixed 26 products

Product	Version	Remediation
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2026-59846

A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment variables and causing unintended shell behavior.

3.9 (Low)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected products

Fixed 26 products

Product	Version	Remediation
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Low

CVE-2026-59847

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection.

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-253 - Incorrect Check of Function Return Value

Affected products

Fixed 26 products

Product	Version	Remediation
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2026-59848

A flaw was found in libssh. A malicious SFTP server can send responses for unknown request IDs that libssh clients keep queued indefinitely, causing unbounded memory growth and client-side denial of service.

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 26 products

Product	Version	Remediation
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2026-59849

A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to loop indefinitely when configured certificates are missing or repeatedly rejected by a server, leading to denial of service.

3.1 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Fixed 26 products

Product	Version	Remediation
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Low

CVE-2026-59850

A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions.

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE-416 - Use After Free

Affected products

Fixed 26 products

Product	Version	Remediation
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2026-59851

A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does not verify whether the authenticated Kerberos principal is authorized for the requested local user, allowing authenticated clients to log in as arbitrary users.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-863 - Incorrect Authorization

Affected products

Fixed 26 products

Product	Version	Remediation
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

References

58 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:55855	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2498168	external
https://bugzilla.redhat.com/show_bug.cgi?id=2498176	external
https://bugzilla.redhat.com/show_bug.cgi?id=2498177	external
https://bugzilla.redhat.com/show_bug.cgi?id=2498178	external
https://bugzilla.redhat.com/show_bug.cgi?id=2498179	external
https://bugzilla.redhat.com/show_bug.cgi?id=2498180	external
https://bugzilla.redhat.com/show_bug.cgi?id=2498181	external
https://bugzilla.redhat.com/show_bug.cgi?id=2498182	external
https://bugzilla.redhat.com/show_bug.cgi?id=2498183	external
https://bugzilla.redhat.com/show_bug.cgi?id=2498184	external
https://bugzilla.redhat.com/show_bug.cgi?id=2499049	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-15370	self
https://bugzilla.redhat.com/show_bug.cgi?id=2499049	external
https://www.cve.org/CVERecord?id=CVE-2026-15370	external
https://nvd.nist.gov/vuln/detail/CVE-2026-15370	external
https://access.redhat.com/security/cve/CVE-2026-59842	self
https://bugzilla.redhat.com/show_bug.cgi?id=2498168	external
https://www.cve.org/CVERecord?id=CVE-2026-59842	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59842	external
https://access.redhat.com/security/cve/CVE-2026-59843	self
https://bugzilla.redhat.com/show_bug.cgi?id=2498176	external
https://www.cve.org/CVERecord?id=CVE-2026-59843	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59843	external
https://access.redhat.com/security/cve/CVE-2026-59844	self
https://bugzilla.redhat.com/show_bug.cgi?id=2498177	external
https://www.cve.org/CVERecord?id=CVE-2026-59844	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59844	external
https://access.redhat.com/security/cve/CVE-2026-59845	self
https://bugzilla.redhat.com/show_bug.cgi?id=2498178	external
https://www.cve.org/CVERecord?id=CVE-2026-59845	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59845	external
https://access.redhat.com/security/cve/CVE-2026-59846	self
https://bugzilla.redhat.com/show_bug.cgi?id=2498179	external
https://www.cve.org/CVERecord?id=CVE-2026-59846	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59846	external
https://access.redhat.com/security/cve/CVE-2026-59847	self
https://bugzilla.redhat.com/show_bug.cgi?id=2498180	external
https://www.cve.org/CVERecord?id=CVE-2026-59847	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59847	external
https://access.redhat.com/security/cve/CVE-2026-59848	self
https://bugzilla.redhat.com/show_bug.cgi?id=2498181	external
https://www.cve.org/CVERecord?id=CVE-2026-59848	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59848	external
https://access.redhat.com/security/cve/CVE-2026-59849	self
https://bugzilla.redhat.com/show_bug.cgi?id=2498182	external
https://www.cve.org/CVERecord?id=CVE-2026-59849	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59849	external
https://access.redhat.com/security/cve/CVE-2026-59850	self
https://bugzilla.redhat.com/show_bug.cgi?id=2498183	external
https://www.cve.org/CVERecord?id=CVE-2026-59850	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59850	external
https://access.redhat.com/security/cve/CVE-2026-59851	self
https://bugzilla.redhat.com/show_bug.cgi?id=2498184	external
https://www.cve.org/CVERecord?id=CVE-2026-59851	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59851	external

Acknowledgments

Tristan

nevv Yi Lin Haruki Oyama

Rinku Das Yi Lin Haruto Kimura

Chanho Kim

Halil Oktay (oblivionsage)

Saransh Rana Mikhail Ilin

Ben Smyth

Aisle Research

AISLE Research

Zhou Qingyang

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for libssh is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.\n\nSecurity Fix(es):\n\n* libssh: libssh: information disclosure via short GSSAPI Curve25519 public key (CVE-2026-59842)\n\n* libssh: libssh: denial of service via zero advertised channel packet size (CVE-2026-59843)\n\n* libssh: libssh: denial of service via oversized SFTP read length (CVE-2026-59844)\n\n* libssh: libssh: denial of service via unchecked ProxyCommand fork() failure (CVE-2026-59845)\n\n* libssh: libssh: information disclosure via ProxyCommand %r username expansion (CVE-2026-59846)\n\n* libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification (CVE-2026-59847)\n\n* libssh: libssh: denial of service via SFTP responses with unknown request IDs (CVE-2026-59848)\n\n* libssh: libssh: denial of service via automatic certificate authentication loop (CVE-2026-59849)\n\n* libssh: libssh: use-after-free via data callbacks on closed channels (CVE-2026-59850)\n\n* libssh: libssh: authentication bypass via missing GSSAPI principal check (CVE-2026-59851)\n\n* libssh: libssh: stack buffer overflow in SFTP server longname construction (CVE-2026-15370)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:55855",
        "url": "https://access.redhat.com/errata/RHSA-2026:55855"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2498168",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498168"
      },
      {
        "category": "external",
        "summary": "2498176",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498176"
      },
      {
        "category": "external",
        "summary": "2498177",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498177"
      },
      {
        "category": "external",
        "summary": "2498178",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498178"
      },
      {
        "category": "external",
        "summary": "2498179",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498179"
      },
      {
        "category": "external",
        "summary": "2498180",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498180"
      },
      {
        "category": "external",
        "summary": "2498181",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498181"
      },
      {
        "category": "external",
        "summary": "2498182",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498182"
      },
      {
        "category": "external",
        "summary": "2498183",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498183"
      },
      {
        "category": "external",
        "summary": "2498184",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498184"
      },
      {
        "category": "external",
        "summary": "2499049",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499049"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_55855.json"
      }
    ],
    "title": "Red Hat Security Advisory: libssh security update",
    "tracking": {
      "current_release_date": "2026-08-18T02:04:49+00:00",
      "generator": {
        "date": "2026-08-18T02:04:49+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHSA-2026:55855",
      "initial_release_date": "2026-08-17T21:37:47+00:00",
      "revision_history": [
        {
          "date": "2026-08-17T21:37:47+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-17T21:37:47+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-18T02:04:49+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 10)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 10)",
                  "product_id": "AppStream-10.2.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:10.2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS (v. 10)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS (v. 10)",
                  "product_id": "BaseOS-10.2.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:10.2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-devel-0:0.12.0-3.el10_2.aarch64",
                "product": {
                  "name": "libssh-devel-0:0.12.0-3.el10_2.aarch64",
                  "product_id": "libssh-devel-0:0.12.0-3.el10_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-devel@0.12.0-3.el10_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
                "product": {
                  "name": "libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
                  "product_id": "libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debugsource@0.12.0-3.el10_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
                "product": {
                  "name": "libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
                  "product_id": "libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debuginfo@0.12.0-3.el10_2?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-0:0.12.0-3.el10_2.aarch64",
                "product": {
                  "name": "libssh-0:0.12.0-3.el10_2.aarch64",
                  "product_id": "libssh-0:0.12.0-3.el10_2.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh@0.12.0-3.el10_2?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-devel-0:0.12.0-3.el10_2.ppc64le",
                "product": {
                  "name": "libssh-devel-0:0.12.0-3.el10_2.ppc64le",
                  "product_id": "libssh-devel-0:0.12.0-3.el10_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-devel@0.12.0-3.el10_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
                "product": {
                  "name": "libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
                  "product_id": "libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debugsource@0.12.0-3.el10_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
                "product": {
                  "name": "libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
                  "product_id": "libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debuginfo@0.12.0-3.el10_2?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-0:0.12.0-3.el10_2.ppc64le",
                "product": {
                  "name": "libssh-0:0.12.0-3.el10_2.ppc64le",
                  "product_id": "libssh-0:0.12.0-3.el10_2.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh@0.12.0-3.el10_2?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-devel-0:0.12.0-3.el10_2.s390x",
                "product": {
                  "name": "libssh-devel-0:0.12.0-3.el10_2.s390x",
                  "product_id": "libssh-devel-0:0.12.0-3.el10_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-devel@0.12.0-3.el10_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debugsource-0:0.12.0-3.el10_2.s390x",
                "product": {
                  "name": "libssh-debugsource-0:0.12.0-3.el10_2.s390x",
                  "product_id": "libssh-debugsource-0:0.12.0-3.el10_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debugsource@0.12.0-3.el10_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
                "product": {
                  "name": "libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
                  "product_id": "libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debuginfo@0.12.0-3.el10_2?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-0:0.12.0-3.el10_2.s390x",
                "product": {
                  "name": "libssh-0:0.12.0-3.el10_2.s390x",
                  "product_id": "libssh-0:0.12.0-3.el10_2.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh@0.12.0-3.el10_2?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-devel-0:0.12.0-3.el10_2.x86_64",
                "product": {
                  "name": "libssh-devel-0:0.12.0-3.el10_2.x86_64",
                  "product_id": "libssh-devel-0:0.12.0-3.el10_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-devel@0.12.0-3.el10_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
                "product": {
                  "name": "libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
                  "product_id": "libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debugsource@0.12.0-3.el10_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
                "product": {
                  "name": "libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
                  "product_id": "libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debuginfo@0.12.0-3.el10_2?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-0:0.12.0-3.el10_2.x86_64",
                "product": {
                  "name": "libssh-0:0.12.0-3.el10_2.x86_64",
                  "product_id": "libssh-0:0.12.0-3.el10_2.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh@0.12.0-3.el10_2?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-0:0.12.0-3.el10_2.src",
                "product": {
                  "name": "libssh-0:0.12.0-3.el10_2.src",
                  "product_id": "libssh-0:0.12.0-3.el10_2.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh@0.12.0-3.el10_2?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-config-0:0.12.0-3.el10_2.noarch",
                "product": {
                  "name": "libssh-config-0:0.12.0-3.el10_2.noarch",
                  "product_id": "libssh-config-0:0.12.0-3.el10_2.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-config@0.12.0-3.el10_2?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.12.0-3.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64"
        },
        "product_reference": "libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le"
        },
        "product_reference": "libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.12.0-3.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x"
        },
        "product_reference": "libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.12.0-3.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64"
        },
        "product_reference": "libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.12.0-3.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64"
        },
        "product_reference": "libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.12.0-3.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le"
        },
        "product_reference": "libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.12.0-3.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x"
        },
        "product_reference": "libssh-debugsource-0:0.12.0-3.el10_2.s390x",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.12.0-3.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
        },
        "product_reference": "libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0:0.12.0-3.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64"
        },
        "product_reference": "libssh-devel-0:0.12.0-3.el10_2.aarch64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0:0.12.0-3.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le"
        },
        "product_reference": "libssh-devel-0:0.12.0-3.el10_2.ppc64le",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0:0.12.0-3.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x"
        },
        "product_reference": "libssh-devel-0:0.12.0-3.el10_2.s390x",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0:0.12.0-3.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64"
        },
        "product_reference": "libssh-devel-0:0.12.0-3.el10_2.x86_64",
        "relates_to_product_reference": "AppStream-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-0:0.12.0-3.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64"
        },
        "product_reference": "libssh-0:0.12.0-3.el10_2.aarch64",
        "relates_to_product_reference": "BaseOS-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-0:0.12.0-3.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le"
        },
        "product_reference": "libssh-0:0.12.0-3.el10_2.ppc64le",
        "relates_to_product_reference": "BaseOS-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-0:0.12.0-3.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x"
        },
        "product_reference": "libssh-0:0.12.0-3.el10_2.s390x",
        "relates_to_product_reference": "BaseOS-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-0:0.12.0-3.el10_2.src as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src"
        },
        "product_reference": "libssh-0:0.12.0-3.el10_2.src",
        "relates_to_product_reference": "BaseOS-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-0:0.12.0-3.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64"
        },
        "product_reference": "libssh-0:0.12.0-3.el10_2.x86_64",
        "relates_to_product_reference": "BaseOS-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0:0.12.0-3.el10_2.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch"
        },
        "product_reference": "libssh-config-0:0.12.0-3.el10_2.noarch",
        "relates_to_product_reference": "BaseOS-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.12.0-3.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64"
        },
        "product_reference": "libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
        "relates_to_product_reference": "BaseOS-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le"
        },
        "product_reference": "libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
        "relates_to_product_reference": "BaseOS-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.12.0-3.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x"
        },
        "product_reference": "libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
        "relates_to_product_reference": "BaseOS-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.12.0-3.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64"
        },
        "product_reference": "libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
        "relates_to_product_reference": "BaseOS-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.12.0-3.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64"
        },
        "product_reference": "libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
        "relates_to_product_reference": "BaseOS-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.12.0-3.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le"
        },
        "product_reference": "libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
        "relates_to_product_reference": "BaseOS-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.12.0-3.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x"
        },
        "product_reference": "libssh-debugsource-0:0.12.0-3.el10_2.s390x",
        "relates_to_product_reference": "BaseOS-10.2.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.12.0-3.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
        },
        "product_reference": "libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
        "relates_to_product_reference": "BaseOS-10.2.Z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Tristan"
          ]
        }
      ],
      "cve": "CVE-2026-15370",
      "cwe": {
        "id": "CWE-121",
        "name": "Stack-based Buffer Overflow"
      },
      "discovery_date": "2026-04-29T10:03:47.442000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2499049"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack buffer. When a client causes the server to list attacker-controlled filenames, sufficiently long names can overflow that stack buffer and may lead to crashes or possible code execution on the server.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: libssh: stack buffer overflow in SFTP server longname construction",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
          "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-15370"
        },
        {
          "category": "external",
          "summary": "RHBZ#2499049",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499049"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-15370",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-15370"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15370",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15370"
        }
      ],
      "release_date": "2026-07-21T09:02:49.175000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-17T21:37:47+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:55855"
        },
        {
          "category": "workaround",
          "details": "No workaround available.",
          "product_ids": [
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libssh: libssh: stack buffer overflow in SFTP server longname construction"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "nevv",
            "Yi Lin",
            "Haruki Oyama"
          ]
        }
      ],
      "cve": "CVE-2026-59842",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-04-29T10:03:47.442000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2498168"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small amounts of server memory.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: libssh: information disclosure via short GSSAPI Curve25519 public key",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
          "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59842"
        },
        {
          "category": "external",
          "summary": "RHBZ#2498168",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498168"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59842",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59842"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59842",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59842"
        }
      ],
      "release_date": "2026-07-21T11:03:52.936000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-17T21:37:47+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:55855"
        },
        {
          "category": "workaround",
          "details": "Disable GSSAPIKeyExchange or remove gss-curve25519-sha256- from GSSAPIKexAlgorithms if appropriate.",
          "product_ids": [
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "libssh: libssh: information disclosure via short GSSAPI Curve25519 public key"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Rinku Das",
            "Yi Lin",
            "Haruto Kimura"
          ]
        }
      ],
      "cve": "CVE-2026-59843",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2026-04-29T10:03:47.442000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2498176"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSH_MSG_CHANNEL_OPEN, causing later channel writes to loop indefinitely and consume CPU, leading to denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: libssh: denial of service via zero advertised channel packet size",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
          "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59843"
        },
        {
          "category": "external",
          "summary": "RHBZ#2498176",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498176"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59843",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59843"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59843",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59843"
        }
      ],
      "release_date": "2026-07-21T11:07:00.776000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-17T21:37:47+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:55855"
        },
        {
          "category": "workaround",
          "details": "No workaround available.",
          "product_ids": [
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libssh: libssh: denial of service via zero advertised channel packet size"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Chanho Kim"
          ]
        }
      ],
      "cve": "CVE-2026-59844",
      "cwe": {
        "id": "CWE-789",
        "name": "Memory Allocation with Excessive Size Value"
      },
      "discovery_date": "2026-04-29T10:03:47.442000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2498177"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libssh. A remote authenticated client can issue SSH_FXP_READ requests with an arbitrarily large length, causing a libssh SFTP server to allocate excessive memory and potentially exhaust it through repeated requests.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: libssh: denial of service via oversized SFTP read length",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
          "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59844"
        },
        {
          "category": "external",
          "summary": "RHBZ#2498177",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498177"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59844",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59844"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59844",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59844"
        }
      ],
      "release_date": "2026-07-21T11:17:49.367000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-17T21:37:47+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:55855"
        },
        {
          "category": "workaround",
          "details": "No workaround available.",
          "product_ids": [
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libssh: libssh: denial of service via oversized SFTP read length"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Halil Oktay (oblivionsage)"
          ]
        }
      ],
      "cve": "CVE-2026-59845",
      "cwe": {
        "id": "CWE-390",
        "name": "Detection of Error Condition Without Action"
      },
      "discovery_date": "2026-04-29T10:03:47.442000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2498178"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libssh. When ProxyCommand is used, an unchecked fork() failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller\u0027s accessible process tree, leading to local denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: libssh: denial of service via unchecked ProxyCommand fork() failure",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Moderate flaw in libssh client-side ProxyCommand handling can lead to a local denial of service. When ProxyCommand is configured, an unchecked fork() failure may result in signals being sent across the process tree, disrupting local system availability. This issue specifically impacts environments utilizing ProxyCommand functionality.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
          "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59845"
        },
        {
          "category": "external",
          "summary": "RHBZ#2498178",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498178"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59845",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59845"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59845",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59845"
        }
      ],
      "release_date": "2026-07-21T11:23:44.480000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-17T21:37:47+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:55855"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, avoid using the ProxyCommand feature in libssh client configurations. This prevents the vulnerable code path from being exercised, thereby eliminating the risk of local denial of service due to unchecked fork() failures.",
          "product_ids": [
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libssh: libssh: denial of service via unchecked ProxyCommand fork() failure"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Saransh Rana",
            "Mikhail Ilin"
          ]
        }
      ],
      "cve": "CVE-2026-59846",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "discovery_date": "2026-04-29T10:03:47.442000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2498179"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment variables and causing unintended shell behavior.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: libssh: information disclosure via ProxyCommand %r username expansion",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
          "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59846"
        },
        {
          "category": "external",
          "summary": "RHBZ#2498179",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498179"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59846",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59846"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59846",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59846"
        }
      ],
      "release_date": "2026-07-21T12:46:04.558000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-17T21:37:47+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:55855"
        },
        {
          "category": "workaround",
          "details": "Make sure you are not executing connections with untrusted username inputs.",
          "product_ids": [
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 3.9,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "libssh: libssh: information disclosure via ProxyCommand %r username expansion"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Ben Smyth"
          ]
        }
      ],
      "cve": "CVE-2026-59847",
      "cwe": {
        "id": "CWE-253",
        "name": "Incorrect Check of Function Return Value"
      },
      "discovery_date": "2026-04-29T10:03:47.442000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2498180"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
          "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59847"
        },
        {
          "category": "external",
          "summary": "RHBZ#2498180",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498180"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59847",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59847"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59847",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59847"
        }
      ],
      "release_date": "2026-07-21T13:02:11.381000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-17T21:37:47+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:55855"
        },
        {
          "category": "workaround",
          "details": "Disable the aes128-gcm@openssh.com and aes256-gcm@openssh.com ciphers.",
          "product_ids": [
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Aisle Research"
          ]
        }
      ],
      "cve": "CVE-2026-59848",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-04-29T10:03:47.442000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2498181"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libssh. A malicious SFTP server can send responses for unknown request IDs that libssh clients keep queued indefinitely, causing unbounded memory growth and client-side denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: libssh: denial of service via SFTP responses with unknown request IDs",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
          "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59848"
        },
        {
          "category": "external",
          "summary": "RHBZ#2498181",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498181"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59848",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59848"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59848",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59848"
        }
      ],
      "release_date": "2026-07-21T13:18:03.060000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-17T21:37:47+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:55855"
        },
        {
          "category": "workaround",
          "details": "Do not connect to untrusted SFTP servers.",
          "product_ids": [
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libssh: libssh: denial of service via SFTP responses with unknown request IDs"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "AISLE Research"
          ]
        }
      ],
      "cve": "CVE-2026-59849",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2026-04-29T10:03:47.442000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2498182"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to loop indefinitely when configured certificates are missing or repeatedly rejected by a server, leading to denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: libssh: denial of service via automatic certificate authentication loop",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
          "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59849"
        },
        {
          "category": "external",
          "summary": "RHBZ#2498182",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498182"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59849",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59849"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59849",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59849"
        }
      ],
      "release_date": "2026-07-21T14:03:21.506000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-17T21:37:47+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:55855"
        },
        {
          "category": "workaround",
          "details": "Do not connect to untrusted SSH servers and do not use certificates until patched.",
          "product_ids": [
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "libssh: libssh: denial of service via automatic certificate authentication loop"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Zhou Qingyang"
          ]
        }
      ],
      "cve": "CVE-2026-59850",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2026-04-29T10:03:47.442000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2498183"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: libssh: use-after-free via data callbacks on closed channels",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
          "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59850"
        },
        {
          "category": "external",
          "summary": "RHBZ#2498183",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498183"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59850",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59850"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59850",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59850"
        }
      ],
      "release_date": "2026-07-21T14:08:16.749000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-17T21:37:47+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:55855"
        },
        {
          "category": "workaround",
          "details": "Manually verify the channel is not closed inside your channel data callbacks.",
          "product_ids": [
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libssh: libssh: use-after-free via data callbacks on closed channels"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Aisle Research"
          ]
        }
      ],
      "cve": "CVE-2026-59851",
      "cwe": {
        "id": "CWE-863",
        "name": "Incorrect Authorization"
      },
      "discovery_date": "2026-04-29T10:03:47.442000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2498184"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does not verify whether the authenticated Kerberos principal is authorized for the requested local user, allowing authenticated clients to log in as arbitrary users.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: libssh: authentication bypass via missing GSSAPI principal check",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
          "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
          "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
          "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
          "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
          "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
          "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
          "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59851"
        },
        {
          "category": "external",
          "summary": "RHBZ#2498184",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498184"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59851",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59851"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59851",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59851"
        }
      ],
      "release_date": "2026-07-21T14:14:14.431000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-17T21:37:47+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:55855"
        },
        {
          "category": "workaround",
          "details": "Disable GSSAPIKeyExchange.",
          "product_ids": [
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.aarch64",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.ppc64le",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.s390x",
            "AppStream-10.2.Z:libssh-devel-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.src",
            "BaseOS-10.2.Z:libssh-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-config-0:0.12.0-3.el10_2.noarch",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debuginfo-0:0.12.0-3.el10_2.x86_64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.aarch64",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.ppc64le",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.s390x",
            "BaseOS-10.2.Z:libssh-debugsource-0:0.12.0-3.el10_2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libssh: libssh: authentication bypass via missing GSSAPI principal check"
    }
  ]
}

CVE-2026-59851 (GCVE-0-2026-59851)

Vulnerability from cvelistv5 – Published: 2026-07-21 14:20 – Updated: 2026-08-17 21:38

Title

Libssh: libssh: authentication bypass via missing gssapi principal check

Summary

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-22 18:14 UTC

CWE

CWE-863 - Incorrect Authorization

Assigner

redhat redhat root

References

4 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:42922	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:55855	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-59851	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2498184	issue-trackingx_refsource_REDHAT

Impacted products

4 products

Vendor	Product	Version
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.12.0-3.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Hardened Images	Unaffected: 0.12.1-4.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9

Date Public

2026-07-21 14:14

Credits

Red Hat would like to thank Aisle Research for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-59851",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-22T18:14:50.808102Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-22T18:15:44.264Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.2"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.12.0-3.el10_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:hummingbird:1"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh-main",
          "product": "Red Hat Hardened Images",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0.12.1-4.hum1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "unaffected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "unaffected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank Aisle Research for reporting this issue."
        }
      ],
      "datePublic": "2026-07-21T14:14:14.431Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does not verify whether the authenticated Kerberos principal is authorized for the requested local user, allowing authenticated clients to log in as arbitrary users."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Important"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-863",
              "description": "Incorrect Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-17T21:38:10.967Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:42922",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:42922"
        },
        {
          "name": "RHSA-2026:55855",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:55855"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-59851"
        },
        {
          "name": "RHBZ#2498184",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498184"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-04-29T10:03:47.442Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-07-21T14:14:14.431Z",
          "value": "Made public."
        }
      ],
      "title": "Libssh: libssh: authentication bypass via missing gssapi principal check",
      "workarounds": [
        {
          "lang": "en",
          "value": "Disable GSSAPIKeyExchange."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-863: Incorrect Authorization"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-59851",
    "datePublished": "2026-07-21T14:20:47.001Z",
    "dateReserved": "2026-07-07T15:40:24.561Z",
    "dateUpdated": "2026-08-17T21:38:10.967Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

RHSA-2026:55855

CVE-2026-59851 (GCVE-0-2026-59851)

Tags

Sightings

Nomenclature