diff options
| author | Dana Robinson <43805+derobins@users.noreply.github.com> | 2023-09-01 22:50:58 (GMT) |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-09-01 22:50:58 (GMT) |
| commit | f8ffb8b78551e4f80da245b2ffd5d9b3b93e1a9e (patch) | |
| tree | b244119583f41e8b84e1f57bb8dcc3582170b4a5 /release_docs | |
| parent | 12b5897f1aeb0cb97e28aabcac50e407de34942b (diff) | |
| download | hdf5-f8ffb8b78551e4f80da245b2ffd5d9b3b93e1a9e.zip hdf5-f8ffb8b78551e4f80da245b2ffd5d9b3b93e1a9e.tar.gz hdf5-f8ffb8b78551e4f80da245b2ffd5d9b3b93e1a9e.tar.bz2 | |
Revert "Reverts the CVE fixes (#3448)" (#3487)
This reverts commit c5a9cd8cf187b501c569490d3297bda1fccd6667.
^^^^ Which itself was a revert of 6129233
Diffstat (limited to 'release_docs')
| -rw-r--r-- | release_docs/RELEASE.txt | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/release_docs/RELEASE.txt b/release_docs/RELEASE.txt index 046d1f1..3743a5e 100644 --- a/release_docs/RELEASE.txt +++ b/release_docs/RELEASE.txt @@ -135,6 +135,20 @@ Bug Fixes since HDF5-1.10.10 release =================================== Library ------- + - Fixed CVE-2018-11202 + + A malformed file could result in chunk index memory leaks. Under most + conditions (i.e., when the --enable-using-memchecker option is NOT + used), this would result in a small memory leak and and infinite loop + and abort when shutting down the library. The infinite loop would be + due to the "free list" package not being able to clear its resources + so the library couldn't shut down. When the "using a memory checker" + option is used, the free lists are disabled so there is just a memory + leak with no abort on library shutdown. + + The chunk index resources are now correctly cleaned up when reading + misparsed files and valgrind confirms no memory leaks. + - Fixed a file space allocation bug in the parallel library for chunked datasets |