summaryrefslogtreecommitdiffstats
path: root/release_docs
diff options
context:
space:
mode:
authorLarry Knox <lrknox@hdfgroup.org>2021-10-26 02:17:44 (GMT)
committerGitHub <noreply@github.com>2021-10-26 02:17:44 (GMT)
commit8d1fe4416429d8a902f042b280fc3a438e9ba0bf (patch)
tree738ffecdf8468722790e3651eb41800b2b4bdd2e /release_docs
parentaee9e06aa8ff85397a54f7955d62466d39b23ddc (diff)
downloadhdf5-8d1fe4416429d8a902f042b280fc3a438e9ba0bf.zip
hdf5-8d1fe4416429d8a902f042b280fc3a438e9ba0bf.tar.gz
hdf5-8d1fe4416429d8a902f042b280fc3a438e9ba0bf.tar.bz2
H5repack tests should fail if a corrupted file causes h5repack to (#1138)
* H5repack tests should fail if a corrupted file causes h5repack to segfault/core dump. * Add release note for HDFV-10590, CVE-2018-17432.
Diffstat (limited to 'release_docs')
-rw-r--r--release_docs/RELEASE.txt11
1 files changed, 11 insertions, 0 deletions
diff --git a/release_docs/RELEASE.txt b/release_docs/RELEASE.txt
index f12fbb8..247f182 100644
--- a/release_docs/RELEASE.txt
+++ b/release_docs/RELEASE.txt
@@ -1132,6 +1132,17 @@ Bug Fixes since HDF5-1.12.0 release
(NAF - 2021/01/22)
+ - Fixed CVE-2018-17432
+
+ The tool h5repack produced a segfault on a corrupted file which had
+ invalid rank for scalar or NULL datatype.
+
+ The problem was fixed by modifying the dataspace encode and decode
+ functions to detect and report invalid rank. h5repack now fails
+ with an error message for the corrupted file.
+
+ (BMR - 2020/10/26, HDFFV-10590)
+
- Creation of dataset with optional filter
When the combination of type, space, etc doesn't work for filter