RHSA-2026:93904

Vulnerability from csaf_redhat - Published: 2026-11-02 14:05 - Updated: 2026-11-03 04:02
Summary
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Severity
Moderate
Notes
Topic: An update for Red Hat Hardened Images RPMs is now available.
Details: This update includes the following RPMs: openshell: * openshell-0.1.6-0.1.hum1 (aarch64, x86_64) * openshell-gateway-0.1.6-0.1.hum1 (aarch64, x86_64) * python3-openshell-0.1.6-0.1.hum1 (aarch64, x86_64) * openshell-0.1.6-0.1.hum1.src (src) Security Fix(es): openshell: * CVE-2026-111061 * CVE-2026-116696 * CVE-2026-116773
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-111061

A flaw was found in russh. When processing key addition requests containing lifetime constraints, the Secure Shell (SSH) agent server spawns a separate long-lived task for repeated constraint records and fails to roll back tasks if subsequent parsing fails. An attacker capable of communicating with the SSH agent locally or through agent forwarding can exploit this vulnerability to exhaust system memory and tasks. This can cause the agent process to become unresponsive or terminate unexpectedly, resulting in a Denial of Service (DoS).

4.3 (Medium)
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@aarch64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@src —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@x86_64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@aarch64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@x86_64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@aarch64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@x86_64 —
Vendor Fix fix
Threats
Impact Moderate
CVE-2026-116696

A flaw was found in russh. This vulnerability can lead to a Denial of Service (DoS) due to unbounded memory consumption in the SSH agent service. A local process or a remote user with access to a forwarded agent socket can repeatedly submit keys containing an excessive number of confirmation constraint records. Because the agent stores these records without enforcing memory or count limits, memory usage grows continuously for the lifetime of the process, potentially exhausting system resources.

3.3 (Low)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 7 products, the same list as for CVE-2026-111061
Threats
Impact Low
CVE-2026-116773

A flaw was found in russh. An unbounded memory allocation issue allows a malicious Secure Shell (SSH) server to cause a Denial of Service (DoS) on connecting clients. By repeatedly sending crafted pre-authentication extension packets, the server forces the client to store an unlimited number of extension entries without clearing or deduplicating them. This behavior leads to progressive memory exhaustion and can crash the client process.

4.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 7 products, the same list as for CVE-2026-111061
Threats
Impact Moderate
CVE-2026-116774

A flaw was found in russh. An authenticated remote client or a malicious server can cause a denial of service (DoS) by declaring a maximum packet size of zero during SSH channel negotiation. The affected system accepts this value, causing asynchronous write operations to hang indefinitely and allowing stranded tasks, channels, and connections to accumulate without raising an error.

4.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CWE-835 - Loop with Unreachable Exit Condition
Affected products
Fixed 7 products, the same list as for CVE-2026-111061
Threats
Impact Moderate
CVE-2026-116794

A flaw was found in russh. When processing signing requests for SSH keys configured to require explicit confirmation, the SSH agent server component fails to invoke the confirmation check and automatically returns success. A local process or remote user with access to the forwarded SSH agent socket can exploit this vulnerability to sign data or authenticate as the key holder without the required user approval.

6.1 (Medium)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
CWE-862 - Missing Authorization
Affected products
Fixed 7 products, the same list as for CVE-2026-111061
Threats
Impact Moderate
References
URL Category
https://access.redhat.com/errata/RHSA-2026:93904 self
https://access.redhat.com/security/cve/CVE-2026-111061 external
https://access.redhat.com/security/cve/CVE-2026-116696 external
https://access.redhat.com/security/cve/CVE-2026-116773 external
https://access.redhat.com/security/updates/classi… external
https://images.redhat.com/ external
https://access.redhat.com/security/cve/CVE-2026-116794 external
https://access.redhat.com/security/cve/CVE-2026-116774 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-111061 self
https://bugzilla.redhat.com/show_bug.cgi?id=2555709 external
https://www.cve.org/CVERecord?id=CVE-2026-111061 external
https://nvd.nist.gov/vuln/detail/CVE-2026-111061 external
https://github.com/Eugeny/russh/commit/4c305033d7… external
https://github.com/Eugeny/russh/releases/tag/v0.64.1 external
https://github.com/Eugeny/russh/security/advisori… external
https://access.redhat.com/security/cve/CVE-2026-116696 self
https://bugzilla.redhat.com/show_bug.cgi?id=2562394 external
https://www.cve.org/CVERecord?id=CVE-2026-116696 external
https://nvd.nist.gov/vuln/detail/CVE-2026-116696 external
https://github.com/Eugeny/russh/commit/23aa5d28fe… external
https://github.com/Eugeny/russh/releases/tag/v0.65.0 external
https://github.com/Eugeny/russh/security/advisori… external
https://access.redhat.com/security/cve/CVE-2026-116773 self
https://bugzilla.redhat.com/show_bug.cgi?id=2562400 external
https://www.cve.org/CVERecord?id=CVE-2026-116773 external
https://nvd.nist.gov/vuln/detail/CVE-2026-116773 external
https://github.com/Eugeny/russh/commit/b33e93beec… external
https://github.com/Eugeny/russh/security/advisori… external
https://access.redhat.com/security/cve/CVE-2026-116774 self
https://bugzilla.redhat.com/show_bug.cgi?id=2562942 external
https://www.cve.org/CVERecord?id=CVE-2026-116774 external
https://nvd.nist.gov/vuln/detail/CVE-2026-116774 external
https://github.com/Eugeny/russh/commit/39cb9dbaa3… external
https://github.com/Eugeny/russh/security/advisori… external
https://access.redhat.com/security/cve/CVE-2026-116794 self
https://bugzilla.redhat.com/show_bug.cgi?id=2563035 external
https://www.cve.org/CVERecord?id=CVE-2026-116794 external
https://nvd.nist.gov/vuln/detail/CVE-2026-116794 external
https://github.com/Eugeny/russh/commit/3e04597dc5… external
https://github.com/Eugeny/russh/commit/62db6e7def… external
https://github.com/Eugeny/russh/security/advisori… external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for Red Hat Hardened Images RPMs is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This update includes the following RPMs:\n\nopenshell:\n  * openshell-0.1.6-0.1.hum1 (aarch64, x86_64)\n  * openshell-gateway-0.1.6-0.1.hum1 (aarch64, x86_64)\n  * python3-openshell-0.1.6-0.1.hum1 (aarch64, x86_64)\n  * openshell-0.1.6-0.1.hum1.src (src)\n\nSecurity Fix(es):\n\nopenshell:\n  * CVE-2026-111061\n  * CVE-2026-116696\n  * CVE-2026-116773",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:93904",
        "url": "https://access.redhat.com/errata/RHSA-2026:93904"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-111061",
        "url": "https://access.redhat.com/security/cve/CVE-2026-111061"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-116696",
        "url": "https://access.redhat.com/security/cve/CVE-2026-116696"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-116773",
        "url": "https://access.redhat.com/security/cve/CVE-2026-116773"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://images.redhat.com/",
        "url": "https://images.redhat.com/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-116794",
        "url": "https://access.redhat.com/security/cve/CVE-2026-116794"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-116774",
        "url": "https://access.redhat.com/security/cve/CVE-2026-116774"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_93904.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
    "tracking": {
      "current_release_date": "2026-11-03T04:02:56+00:00",
      "generator": {
        "date": "2026-11-03T04:02:56+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.4"
        }
      },
      "id": "RHSA-2026:93904",
      "initial_release_date": "2026-11-02T14:05:54+00:00",
      "revision_history": [
        {
          "date": "2026-11-02T14:05:54+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-11-02T15:02:58+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-11-03T04:02:56+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Hardened Images",
                "product": {
                  "name": "Red Hat Hardened Images",
                  "product_id": "Red Hat Hardened Images",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:hummingbird:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Hardened Images"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openshell-0:0.1.6-0.1.hum1@aarch64",
                "product": {
                  "name": "openshell-0:0.1.6-0.1.hum1@aarch64",
                  "product_id": "openshell-0:0.1.6-0.1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openshell@0.1.6-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshell-gateway-0:0.1.6-0.1.hum1@aarch64",
                "product": {
                  "name": "openshell-gateway-0:0.1.6-0.1.hum1@aarch64",
                  "product_id": "openshell-gateway-0:0.1.6-0.1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openshell-gateway@0.1.6-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-openshell-0:0.1.6-0.1.hum1@aarch64",
                "product": {
                  "name": "python3-openshell-0:0.1.6-0.1.hum1@aarch64",
                  "product_id": "python3-openshell-0:0.1.6-0.1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-openshell@0.1.6-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openshell-0:0.1.6-0.1.hum1@src",
                "product": {
                  "name": "openshell-0:0.1.6-0.1.hum1@src",
                  "product_id": "openshell-0:0.1.6-0.1.hum1@src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openshell@0.1.6-0.1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openshell-0:0.1.6-0.1.hum1@x86_64",
                "product": {
                  "name": "openshell-0:0.1.6-0.1.hum1@x86_64",
                  "product_id": "openshell-0:0.1.6-0.1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openshell@0.1.6-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshell-gateway-0:0.1.6-0.1.hum1@x86_64",
                "product": {
                  "name": "openshell-gateway-0:0.1.6-0.1.hum1@x86_64",
                  "product_id": "openshell-gateway-0:0.1.6-0.1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openshell-gateway@0.1.6-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-openshell-0:0.1.6-0.1.hum1@x86_64",
                "product": {
                  "name": "python3-openshell-0:0.1.6-0.1.hum1@x86_64",
                  "product_id": "python3-openshell-0:0.1.6-0.1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-openshell@0.1.6-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshell-0:0.1.6-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@aarch64"
        },
        "product_reference": "openshell-0:0.1.6-0.1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshell-0:0.1.6-0.1.hum1@src as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@src"
        },
        "product_reference": "openshell-0:0.1.6-0.1.hum1@src",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshell-0:0.1.6-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@x86_64"
        },
        "product_reference": "openshell-0:0.1.6-0.1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshell-gateway-0:0.1.6-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@aarch64"
        },
        "product_reference": "openshell-gateway-0:0.1.6-0.1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshell-gateway-0:0.1.6-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@x86_64"
        },
        "product_reference": "openshell-gateway-0:0.1.6-0.1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-openshell-0:0.1.6-0.1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@aarch64"
        },
        "product_reference": "python3-openshell-0:0.1.6-0.1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-openshell-0:0.1.6-0.1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@x86_64"
        },
        "product_reference": "python3-openshell-0:0.1.6-0.1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-111061",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-10-19T16:56:42.387416+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2555709"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in russh. When processing key addition requests containing lifetime constraints, the Secure Shell (SSH) agent server spawns a separate long-lived task for repeated constraint records and fails to roll back tasks if subsequent parsing fails. An attacker capable of communicating with the SSH agent locally or through agent forwarding can exploit this vulnerability to exhaust system memory and tasks. This can cause the agent process to become unresponsive or terminate unexpectedly, resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "russh: russh: Denial of Service via resource exhaustion in SSH agent",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@aarch64",
          "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@src",
          "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@x86_64",
          "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@aarch64",
          "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@x86_64",
          "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@aarch64",
          "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-111061"
        },
        {
          "category": "external",
          "summary": "RHBZ#2555709",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2555709"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-111061",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-111061"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-111061",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-111061"
        },
        {
          "category": "external",
          "summary": "https://github.com/Eugeny/russh/commit/4c305033d72f8e5dd21a3fd4c53a6c291a16ebd1",
          "url": "https://github.com/Eugeny/russh/commit/4c305033d72f8e5dd21a3fd4c53a6c291a16ebd1"
        },
        {
          "category": "external",
          "summary": "https://github.com/Eugeny/russh/releases/tag/v0.64.1",
          "url": "https://github.com/Eugeny/russh/releases/tag/v0.64.1"
        },
        {
          "category": "external",
          "summary": "https://github.com/Eugeny/russh/security/advisories/GHSA-4wc5-f2rc-q74m",
          "url": "https://github.com/Eugeny/russh/security/advisories/GHSA-4wc5-f2rc-q74m"
        }
      ],
      "release_date": "2026-10-19T16:30:24.445000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-02T14:05:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@src",
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@x86_64",
            "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@x86_64",
            "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:93904"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@src",
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@x86_64",
            "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@x86_64",
            "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "russh: russh: Denial of Service via resource exhaustion in SSH agent"
    },
    {
      "cve": "CVE-2026-116696",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-10-27T20:21:40.530553+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2562394"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in russh. This vulnerability can lead to a Denial of Service (DoS) due to unbounded memory consumption in the SSH agent service. A local process or a remote user with access to a forwarded agent socket can repeatedly submit keys containing an excessive number of confirmation constraint records. Because the agent stores these records without enforcing memory or count limits, memory usage grows continuously for the lifetime of the process, potentially exhausting system resources.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "russh: russh: Denial of Service via uncontrolled memory consumption in SSH agent",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Low severity because exploitation requires direct access to the local agent socket or a compromised remote endpoint in an active forwarded session, limiting the flaw\u0027s scope solely to process availability. An unauthorized party cannot obtain sensitive cryptographic key material or compromise system integrity through this mechanism. Furthermore, standard configurations do not forward SSH agents to untrusted destinations, constraining exposure to specific scenarios where forwarding is explicitly configured.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@aarch64",
          "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@src",
          "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@x86_64",
          "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@aarch64",
          "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@x86_64",
          "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@aarch64",
          "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-116696"
        },
        {
          "category": "external",
          "summary": "RHBZ#2562394",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2562394"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-116696",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-116696"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-116696",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-116696"
        },
        {
          "category": "external",
          "summary": "https://github.com/Eugeny/russh/commit/23aa5d28fe9601c5bdfe9e60b7ec5d4f882c3de6",
          "url": "https://github.com/Eugeny/russh/commit/23aa5d28fe9601c5bdfe9e60b7ec5d4f882c3de6"
        },
        {
          "category": "external",
          "summary": "https://github.com/Eugeny/russh/releases/tag/v0.65.0",
          "url": "https://github.com/Eugeny/russh/releases/tag/v0.65.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/Eugeny/russh/security/advisories/GHSA-9wfm-jcj8-jfv9",
          "url": "https://github.com/Eugeny/russh/security/advisories/GHSA-9wfm-jcj8-jfv9"
        }
      ],
      "release_date": "2026-10-27T20:14:32.973000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-02T14:05:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@src",
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@x86_64",
            "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@x86_64",
            "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:93904"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@src",
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@x86_64",
            "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@x86_64",
            "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "russh: russh: Denial of Service via uncontrolled memory consumption in SSH agent"
    },
    {
      "cve": "CVE-2026-116773",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-10-27T20:32:07.050030+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2562400"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in russh. An unbounded memory allocation issue allows a malicious Secure Shell (SSH) server to cause a Denial of Service (DoS) on connecting clients. By repeatedly sending crafted pre-authentication extension packets, the server forces the client to store an unlimited number of extension entries without clearing or deduplicating them. This behavior leads to progressive memory exhaustion and can crash the client process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "russh: russh: Denial of Service via unbounded memory allocation in extension handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Moderate because exploitation requires a client session to connect to an untrusted or rogue SSH server, limiting the impact to client-side resource exhaustion without compromising system confidentiality or integrity. Within Red Hat environments, core operating system services rely on OpenSSH, while russh is only embedded in specialized packages such as openshell. Typical system configurations and standard SSH daemon operations remain completely unaffected by this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@aarch64",
          "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@src",
          "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@x86_64",
          "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@aarch64",
          "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@x86_64",
          "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@aarch64",
          "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-116773"
        },
        {
          "category": "external",
          "summary": "RHBZ#2562400",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2562400"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-116773",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-116773"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-116773",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-116773"
        },
        {
          "category": "external",
          "summary": "https://github.com/Eugeny/russh/commit/b33e93beec393e6d29eee69c1b8831736724ee75",
          "url": "https://github.com/Eugeny/russh/commit/b33e93beec393e6d29eee69c1b8831736724ee75"
        },
        {
          "category": "external",
          "summary": "https://github.com/Eugeny/russh/releases/tag/v0.65.0",
          "url": "https://github.com/Eugeny/russh/releases/tag/v0.65.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/Eugeny/russh/security/advisories/GHSA-4p9f-7p9m-5vfg",
          "url": "https://github.com/Eugeny/russh/security/advisories/GHSA-4p9f-7p9m-5vfg"
        }
      ],
      "release_date": "2026-10-27T20:23:25.559000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-02T14:05:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@src",
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@x86_64",
            "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@x86_64",
            "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:93904"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@src",
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@x86_64",
            "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@x86_64",
            "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@src",
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@x86_64",
            "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@x86_64",
            "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "russh: russh: Denial of Service via unbounded memory allocation in extension handling"
    },
    {
      "cve": "CVE-2026-116774",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition"
      },
      "discovery_date": "2026-10-28T16:31:44.036219+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2562942"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in russh. An authenticated remote client or a malicious server can cause a denial of service (DoS) by declaring a maximum packet size of zero during SSH channel negotiation. The affected system accepts this value, causing asynchronous write operations to hang indefinitely and allowing stranded tasks, channels, and connections to accumulate without raising an error.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "russh: russh: Denial of service via zero maximum packet size",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Moderate severity because exploitation requires an established SSH session and only results in a denial of service through connection or task stalls, without impacting system confidentiality or data integrity. While hung sessions can lead to gradual resource exhaustion over time, the issue does not permit unauthorized code execution or privilege escalation.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@aarch64",
          "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@src",
          "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@x86_64",
          "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@aarch64",
          "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@x86_64",
          "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@aarch64",
          "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-116774"
        },
        {
          "category": "external",
          "summary": "RHBZ#2562942",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2562942"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-116774",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-116774"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-116774",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-116774"
        },
        {
          "category": "external",
          "summary": "https://github.com/Eugeny/russh/commit/39cb9dbaa37caf555d34c6c22efa3bbbff9e186c",
          "url": "https://github.com/Eugeny/russh/commit/39cb9dbaa37caf555d34c6c22efa3bbbff9e186c"
        },
        {
          "category": "external",
          "summary": "https://github.com/Eugeny/russh/releases/tag/v0.65.0",
          "url": "https://github.com/Eugeny/russh/releases/tag/v0.65.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/Eugeny/russh/security/advisories/GHSA-fw5c-8223-6h42",
          "url": "https://github.com/Eugeny/russh/security/advisories/GHSA-fw5c-8223-6h42"
        }
      ],
      "release_date": "2026-10-27T20:25:26.914000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-02T14:05:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@src",
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@x86_64",
            "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@x86_64",
            "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:93904"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@src",
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@x86_64",
            "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@x86_64",
            "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@src",
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@x86_64",
            "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@x86_64",
            "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "russh: russh: Denial of service via zero maximum packet size"
    },
    {
      "cve": "CVE-2026-116794",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "discovery_date": "2026-10-28T17:33:14.025947+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2563035"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in russh. When processing signing requests for SSH keys configured to require explicit confirmation, the SSH agent server component fails to invoke the confirmation check and automatically returns success. A local process or remote user with access to the forwarded SSH agent socket can exploit this vulnerability to sign data or authenticate as the key holder without the required user approval.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "russh: russh: Unauthorized key signing via SSH agent confirmation bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Moderate severity for Red Hat products because exploitation is confined to environments where an attacker already has access to the local agent socket or a forwarded session, and it does not allow extraction of private key material. In typical deployments, the issue only manifests when applications explicitly enable custom confirmation handling for keys loaded with confirmation constraints. While an adversary with access to the communication socket can bypass the prompt to sign data on behalf of the user, standard authentication boundaries and non-constrained keys remain unaffected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@aarch64",
          "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@src",
          "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@x86_64",
          "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@aarch64",
          "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@x86_64",
          "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@aarch64",
          "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-116794"
        },
        {
          "category": "external",
          "summary": "RHBZ#2563035",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2563035"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-116794",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-116794"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-116794",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-116794"
        },
        {
          "category": "external",
          "summary": "https://github.com/Eugeny/russh/commit/3e04597dc54e36bfc85c21996f7d8d9d224e9826",
          "url": "https://github.com/Eugeny/russh/commit/3e04597dc54e36bfc85c21996f7d8d9d224e9826"
        },
        {
          "category": "external",
          "summary": "https://github.com/Eugeny/russh/commit/62db6e7defd6d244159da962ccccb029e785ce0f",
          "url": "https://github.com/Eugeny/russh/commit/62db6e7defd6d244159da962ccccb029e785ce0f"
        },
        {
          "category": "external",
          "summary": "https://github.com/Eugeny/russh/releases/tag/v0.65.0",
          "url": "https://github.com/Eugeny/russh/releases/tag/v0.65.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/Eugeny/russh/security/advisories/GHSA-vp5q-ff62-jwqv",
          "url": "https://github.com/Eugeny/russh/security/advisories/GHSA-vp5q-ff62-jwqv"
        }
      ],
      "release_date": "2026-10-28T17:06:57.542000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-02T14:05:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@src",
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@x86_64",
            "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@x86_64",
            "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:93904"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@src",
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@x86_64",
            "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@x86_64",
            "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@src",
            "Red Hat Hardened Images:openshell-0:0.1.6-0.1.hum1@x86_64",
            "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:openshell-gateway-0:0.1.6-0.1.hum1@x86_64",
            "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@aarch64",
            "Red Hat Hardened Images:python3-openshell-0:0.1.6-0.1.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "russh: russh: Unauthorized key signing via SSH agent confirmation bypass"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.