RHSA-2026:61630HighCVSS 7.8

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published
August 31, 2026
Last Modified
September 21, 2026

🔗 CVE IDs covered (6)

CVE-2026-92627 →CVE-2026-17572 →CVE-2026-17573 →CVE-2026-19025 →CVE-2026-26197 →CVE-2026-34734 →

📋 Description

CVE-2026-17572 — hdf5: HDF5: Denial of Service via crafted file requiring user interaction CVE-2026-17573 — hdf5: HDF5 library: Denial of Service via crafted HDF5 file processing CVE-2026-19025 — hdf5: HDF5: Denial of Service due to malformed chunk data in files CVE-2026-26197 — hdf5: HDF5: Out-of-bounds read due to corrupted file can lead to denial of service CVE-2026-34734 — hdf5: HDF5 h5dump: Arbitrary code execution via a crafted HDF5 file CVE-2026-92627 — HDF5: HDF5: Memory corruption via crafted HDF5 file

🎯 Affected products22

  • Red Hat Hardened Images
  • hdf5-0:2.2.0-0.1.1.hum1@aarch64 as a component of Red Hat Hardened Images
  • hdf5-0:2.2.0-0.1.1.hum1@src as a component of Red Hat Hardened Images
  • hdf5-0:2.2.0-0.1.1.hum1@x86_64 as a component of Red Hat Hardened Images
  • hdf5-devel-0:2.2.0-0.1.1.hum1@aarch64 as a component of Red Hat Hardened Images
  • hdf5-devel-0:2.2.0-0.1.1.hum1@x86_64 as a component of Red Hat Hardened Images
  • hdf5-mpich-0:2.2.0-0.1.1.hum1@aarch64 as a component of Red Hat Hardened Images
  • hdf5-mpich-0:2.2.0-0.1.1.hum1@x86_64 as a component of Red Hat Hardened Images
  • hdf5-mpich-devel-0:2.2.0-0.1.1.hum1@aarch64 as a component of Red Hat Hardened Images
  • hdf5-mpich-devel-0:2.2.0-0.1.1.hum1@x86_64 as a component of Red Hat Hardened Images
  • hdf5-mpich-static-0:2.2.0-0.1.1.hum1@aarch64 as a component of Red Hat Hardened Images
  • hdf5-mpich-static-0:2.2.0-0.1.1.hum1@x86_64 as a component of Red Hat Hardened Images
  • hdf5-openmpi-0:2.2.0-0.1.1.hum1@aarch64 as a component of Red Hat Hardened Images
  • hdf5-openmpi-0:2.2.0-0.1.1.hum1@x86_64 as a component of Red Hat Hardened Images
  • hdf5-openmpi-devel-0:2.2.0-0.1.1.hum1@aarch64 as a component of Red Hat Hardened Images
  • hdf5-openmpi-devel-0:2.2.0-0.1.1.hum1@x86_64 as a component of Red Hat Hardened Images
  • hdf5-openmpi-static-0:2.2.0-0.1.1.hum1@aarch64 as a component of Red Hat Hardened Images
  • hdf5-openmpi-static-0:2.2.0-0.1.1.hum1@x86_64 as a component of Red Hat Hardened Images
  • hdf5-static-0:2.2.0-0.1.1.hum1@aarch64 as a component of Red Hat Hardened Images
  • hdf5-static-0:2.2.0-0.1.1.hum1@x86_64 as a component of Red Hat Hardened Images
  • java-hdf5-0:2.2.0-0.1.1.hum1@aarch64 as a component of Red Hat Hardened Images
  • java-hdf5-0:2.2.0-0.1.1.hum1@x86_64 as a component of Red Hat Hardened Images

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Workaround: Do not open or process untrusted HDF5 files using applications or utilities (such as h5repack) linked against vulnerable versions of the HDF5 library. Ensure files originate from trusted sources or isolate untrusted file parsing within a sandboxed environment. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (10)