mirror/hdf5
2
0
Fork 0
mirror of https://github.com/HDFGroup/hdf5.git synced 2025-04-06 17:20:42 +08:00
Code Issues Packages Projects Releases Wiki Activity

Added notes about CVE issues.

Browse Source
This commit is contained in:
Binh-Minh Ribler 2018-08-14 18:22:10 -05:00
parent 5647dea421
commit 7c2d969e85
1 changed files with 33 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

33
release_docs/RELEASE.txt
View File

@ -205,6 +205,39 @@ Bug Fixes since HDF5-1.10.2 release
(JTH - 2018/08/02, HDFFV-10512)
- User's patches: CVEs
The following patches have been applied:
CVE-2018-11202 - NULL pointer dereference was discovered in
H5S_hyper_make_spans in H5Shyper.c (HDFFV-10476)
https://security-tracker.debian.org/tracker/CVE-2018-11202
https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2018-11202
CVE-2018-11203 - A division by zero was discovered in
H5D__btree_decode_key in H5Dbtree.c (HDFFV-10477)
https://security-tracker.debian.org/tracker/CVE-2018-11203
https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2018-11203
CVE-2018-11204 - A NULL pointer dereference was discovered in
H5O__chunk_deserialize in H5Ocache.c (HDFFV-10478)
https://security-tracker.debian.org/tracker/CVE-2018-11204
https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2018-11204
CVE-2018-11206 - An out of bound read was discovered in
H5O_fill_new_decode and H5O_fill_old_decode in H5Ofill.c
(HDFFV-10480)
https://security-tracker.debian.org/tracker/CVE-2018-11206
https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2018-11206
CVE-2018-11207 - A division by zero was discovered in
H5D__chunk_init in H5Dchunk.c (HDFFV-10481)
https://security-tracker.debian.org/tracker/CVE-2018-11207
https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2018-11207
(BMR - 2018/7/22, PR#s: 1134 and 1139,
HDFFV-10476, HDFFV-10477, HDFFV-10478, HDFFV-10480, HDFFV-10481)
- H5Adelete
H5Adelete failed when deleting the last "large" attribute that