summaryrefslogtreecommitdiffstats
path: root/release_docs/RELEASE.txt
diff options
context:
space:
mode:
Diffstat (limited to 'release_docs/RELEASE.txt')
-rw-r--r--release_docs/RELEASE.txt10
1 files changed, 10 insertions, 0 deletions
diff --git a/release_docs/RELEASE.txt b/release_docs/RELEASE.txt
index 0fde1ab..f64fdd4 100644
--- a/release_docs/RELEASE.txt
+++ b/release_docs/RELEASE.txt
@@ -151,6 +151,16 @@ Bug Fixes since HDF5-1.13.3 release
===================================
Library
-------
+ - Fixed memory leaks, aborts, and overflows in H5O EFL decode
+
+ The external file list code could call assert(), read past buffer
+ boundaries, and not properly clean up resources when parsing malformed
+ external data files messages.
+
+ This fix cleans up allocated memory, adds buffer bounds checks, and
+ converts asserts to HDF5 error checking.
+
+ (DER - 2023/04/13 GH-2605)
- Memory leak