RHSA-2026:61752
- Source
- https://access.redhat.com/errata/RHSA-2026:61752
- Import Source
- https://security.access.redhat.com/data/osv/RHSA-2026:61752.json
- JSON Data
- https://api.osv.dev/v1/vulns/RHSA-2026:61752
- Upstream
- Published
- 2026-09-01T10:28:36Z
- Modified
- 2026-09-01T10:56:27.075433843Z
- Severity
-
- 9.1 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H CVSS Calculator
- Summary
- Red Hat Security Advisory: libssh2 security update
- Details
- References
-
- https://access.redhat.com/errata/RHSA-2026:61752
- https://access.redhat.com/security/updates/classification/#important
- https://bugzilla.redhat.com/show_bug.cgi?id=2464597
- https://bugzilla.redhat.com/show_bug.cgi?id=2493955
- https://bugzilla.redhat.com/show_bug.cgi?id=2506857
- https://bugzilla.redhat.com/show_bug.cgi?id=2506860
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_61752.json
- https://access.redhat.com/security/cve/CVE-2026-7598
- https://www.cve.org/CVERecord?id=CVE-2026-7598
- https://nvd.nist.gov/vuln/detail/CVE-2026-7598
- https://github.com/libssh2/libssh2/
- https://github.com/libssh2/libssh2/commit/256d04b60d80bf1190e96b0ad1e91b2174d744b1
- https://github.com/libssh2/libssh2/pull/1858
- https://vuldb.com/submit/805564
- https://vuldb.com/vuln/360555
- https://vuldb.com/vuln/360555/cti
- https://access.redhat.com/security/cve/CVE-2026-58050
- https://www.cve.org/CVERecord?id=CVE-2026-58050
- https://nvd.nist.gov/vuln/detail/CVE-2026-58050
- https://github.com/bikini/exploitarium/tree/main/libssh2-publickey-list-calc-poc
- https://github.com/libssh2/libssh2/blob/master/src/publickey.c
- https://www.vulncheck.com/advisories/libssh2-integer-overflow-in-publickey-subsystem-attribute-allocation
- https://access.redhat.com/security/cve/CVE-2026-66032
- https://www.cve.org/CVERecord?id=CVE-2026-66032
- https://nvd.nist.gov/vuln/detail/CVE-2026-66032
- https://github.com/libssh2/libssh2/commit/5e4776146552d898b9c0e1b313cd093fa8dc92d0
- https://github.com/libssh2/libssh2/pull/2180
- https://www.vulncheck.com/advisories/libssh2-double-free-heap-corruption-via-sftp-open
- https://access.redhat.com/security/cve/CVE-2026-66034
- https://www.cve.org/CVERecord?id=CVE-2026-66034
- https://nvd.nist.gov/vuln/detail/CVE-2026-66034
- https://github.com/libssh2/libssh2/commit/a13bb6c773f0d55ad1628cede57e99803cd898d9
- https://github.com/libssh2/libssh2/pull/2202
- https://www.vulncheck.com/advisories/libssh2-heap-out-of-bounds-read-via-publickey-subsystem