RHSA-2026:94898: Red Hat Hardened Images RPMs Security Update

Published Nov 4, 2026

Updated

Red Hat Hardened Images RPMs Security Update

Other sources

This update includes the following RPMs:hdf5: hdf5-2.2.0-0.1.5.hum1 (aarch64, s390x, x8664) hdf5-devel-2.2.0-0.1.5.hum1 (aarch64, s390x, x8664) hdf5-mpich-2.2.0-0.1.5.hum1 (aarch64, s390x, x8664) hdf5-mpich-devel-2.2.0-0.1.5.hum1 (aarch64, s390x, x8664) hdf5-mpich-static-2.2.0-0.1.5.hum1 (aarch64, s390x, x8664) hdf5-openmpi-2.2.0-0.1.5.hum1 (aarch64, s390x, x8664) hdf5-openmpi-devel-2.2.0-0.1.5.hum1 (aarch64, s390x, x8664) hdf5-openmpi-static-2.2.0-0.1.5.hum1 (aarch64, s390x, x8664) hdf5-static-2.2.0-0.1.5.hum1 (aarch64, s390x, x8664) java-hdf5-2.2.0-0.1.5.hum1 (aarch64, s390x, x8664) hdf5-2.2.0-0.1.5.hum1.src (src) Security Fix(es):hdf5: CVE-2026-120756 CVE-2026-120758 CVE-2026-120757

— Red Hat

Affected Software

1 affected component

Red Hat Red Hat Hardened Images

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade hdf5 to a version that resolves this vulnerability.
Fixed in 2.2.0-0.1.5.hum1

Event History

Nov 4, 2026

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Advisory Published

via Red Hat·02:09 AM

Data Sourced

via Red Hat·02:09 AM

Severity

Frequently Asked Questions

Which package builds and architectures are covered by this update?

The update provides hdf5 2.2.0-0.1.5.hum1 and related development, static, MPICH, OpenMPI, and Java HDF5 packages for aarch64, s390x, and x86_64. A source RPM is also included.

Which vulnerabilities are addressed?

The advisory lists fixes for CVE-2026-120756, CVE-2026-120757, and CVE-2026-120758 in hdf5.

How can I determine whether an image needs this update?

Check whether the image contains HDF5 packages and compare their installed build to 2.2.0-0.1.5.hum1. This advisory applies to Red Hat Hardened Images RPMs on the listed architectures.