Skip to content
OpenAdvisories
Medium RHSA-2026:94898 3 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Nov 13, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 hdf5 0:2.2.0-0.1.5.hum1
Red Hat · Hardened Images 1 hummingbird:1 hdf5-devel 0:2.2.0-0.1.5.hum1
Red Hat · Hardened Images 1 hummingbird:1 hdf5-mpich 0:2.2.0-0.1.5.hum1
Red Hat · Hardened Images 1 hummingbird:1 hdf5-mpich-devel 0:2.2.0-0.1.5.hum1
Red Hat · Hardened Images 1 hummingbird:1 hdf5-mpich-static 0:2.2.0-0.1.5.hum1
Red Hat · Hardened Images 1 hummingbird:1 hdf5-openmpi 0:2.2.0-0.1.5.hum1
Red Hat · Hardened Images 1 hummingbird:1 hdf5-openmpi-devel 0:2.2.0-0.1.5.hum1
Red Hat · Hardened Images 1 hummingbird:1 hdf5-openmpi-static 0:2.2.0-0.1.5.hum1
Red Hat · Hardened Images 1 hummingbird:1 hdf5-static 0:2.2.0-0.1.5.hum1
Red Hat · Hardened Images 1 hummingbird:1 java-hdf5 0:2.2.0-0.1.5.hum1

Vulnerabilities 3

  • Medium 6.9
    CVE-2026-120757

    Heap Buffer Over-read via Non-Terminated Link Data in H5L__extern_traverse

    HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5L__extern_traverse() in src/H5Lexternal.c, the default traversal callback for external links. The callback locates the target file name and object path within the link’s user data using st…

    The HDF Group HDF5 hdf5 hdf5 Debian Ubuntu Azure Linux
  • Medium 5.4
    CVE-2026-120758

    NULL Pointer Dereference in H5HL_unprotect via Corrupted File

    HDF5 through 2.2.0 contains a NULL pointer dereference vulnerability in H5HL_unprotect() in src/H5HL.c. H5HL_protect() pins a single metadata cache entry for a local heap, either the heap prefix or the separate data block, and H5HL_unprotect() unpins it on th…

    The HDF Group HDF5 hdf5 hdf5 Debian Ubuntu Azure Linux
  • Low 1.9
    CVE-2026-120756

    Heap Buffer Over-read via Malformed Message Size in HDF5's H5O__chunk_deserialize

    HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5O__chunk_deserialize() in src/H5Ocache.c. When decoding object header messages, the declared message size is checked against the end of the chunk image before the remainder of the message …

    The HDF Group HDF5 hdf5 hdf5 Debian Ubuntu Azure Linux

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-120756
  • report
    https://access.redhat.com/security/cve/CVE-2026-120757
  • report
    https://access.redhat.com/security/cve/CVE-2026-120758
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_94898.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2566025
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-120756
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-120756
  • article
    https://github.com/HDFGroup/hdf5/issues/6401
  • article
    https://github.com/HDFGroup/hdf5/pull/6589
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2565946
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-120757
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-120757
  • article
    https://github.com/HDFGroup/hdf5/pull/6708
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2566027
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-120758
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-120758
  • article
    https://github.com/HDFGroup/hdf5/pull/6377