Debian Package Tracker
Register | Log in
Subscribe

hdf5

Choose email to subscribe with

general
  • source: hdf5 (main)
  • version: 1.10.8+repack1-1
  • maintainer: Gilles Filippini (DMD)
  • arch: all any
  • std-ver: 4.5.0
  • VCS: Git (Browse, QA)
versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]
[pool directory]
  • o-o-stable: 1.10.0-patch1+docs-3+deb9u1
  • oldstable: 1.10.4+repack-10
  • stable: 1.10.6+repack-4+deb11u1
  • testing: 1.10.8+repack1-1
  • unstable: 1.10.8+repack1-1
  • exp: 1.12.2+repack-1~exp1
versioned links
  • 1.10.0-patch1+docs-3+deb9u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 1.10.4+repack-10: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 1.10.6+repack-4+deb11u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 1.10.8+repack1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 1.12.2+repack-1~exp1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
binaries
  • hdf5-helpers
  • hdf5-tools (5 bugs: 0, 5, 0, 0)
  • libhdf5-103
  • libhdf5-103-1
  • libhdf5-cpp-103
  • libhdf5-cpp-103-1
  • libhdf5-dev (1 bugs: 0, 1, 0, 0)
  • libhdf5-doc
  • libhdf5-fortran-102
  • libhdf5-hl-100
  • libhdf5-hl-cpp-100
  • libhdf5-hl-fortran-100
  • libhdf5-java
  • libhdf5-jni
  • libhdf5-mpi-dev
  • libhdf5-mpich-103
  • libhdf5-mpich-103-1
  • libhdf5-mpich-cpp-103-1
  • libhdf5-mpich-dev
  • libhdf5-mpich-fortran-102
  • libhdf5-mpich-hl-100
  • libhdf5-mpich-hl-cpp-100
  • libhdf5-mpich-hl-fortran-100
  • libhdf5-openmpi-103
  • libhdf5-openmpi-103-1
  • libhdf5-openmpi-cpp-103-1
  • libhdf5-openmpi-dev (2 bugs: 0, 2, 0, 0)
  • libhdf5-openmpi-fortran-102
  • libhdf5-openmpi-hl-100
  • libhdf5-openmpi-hl-cpp-100
  • libhdf5-openmpi-hl-fortran-100
action needed
A new upstream version is available: 1.14.0 high
A new upstream version 1.14.0 is available, you should consider packaging it.
Created: 2022-12-20 Last update: 2023-03-29 20:06
6 security issues in sid high

There are 6 open security issues in sid.

6 important issues:
  • CVE-2019-8396: A buffer overflow in H5O__layout_encode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while repacking an HDF5 file, aka "Invalid write of size 2."
  • CVE-2019-8398: An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_get_size in H5T.c.
  • CVE-2018-11205: A out of bounds read was discovered in H5VM_memcpyvv in H5VM.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack.
  • CVE-2022-25942: An out-of-bounds read vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
  • CVE-2022-25972: An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
  • CVE-2022-26061: A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
Created: 2022-07-04 Last update: 2023-03-27 11:06
11 security issues in buster high

There are 11 open security issues in buster.

6 important issues:
  • CVE-2019-8396: A buffer overflow in H5O__layout_encode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while repacking an HDF5 file, aka "Invalid write of size 2."
  • CVE-2019-8398: An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_get_size in H5T.c.
  • CVE-2018-11205: A out of bounds read was discovered in H5VM_memcpyvv in H5VM.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack.
  • CVE-2022-25942: An out-of-bounds read vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
  • CVE-2022-25972: An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
  • CVE-2022-26061: A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
5 issues postponed or untriaged:
  • CVE-2018-17233: (needs triaging) A SIGFPE signal is raised in the function H5D__create_chunk_file_map_hyper() of H5Dchunk.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack.
  • CVE-2018-17234: (needs triaging) Memory leak in the H5O__chunk_deserialize() function in H5Ocache.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (memory consumption) via a crafted HDF5 file.
  • CVE-2018-17237: (needs triaging) A SIGFPE signal is raised in the function H5D__chunk_set_info_real() of H5Dchunk.c in the HDF HDF5 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. This issue is different from CVE-2018-11207.
  • CVE-2018-17434: (needs triaging) A SIGFPE signal is raised in the function apply_filters() of h5repack_filters.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack.
  • CVE-2018-17437: (needs triaging) Memory leak in the H5O_dtype_decode_helper() function in H5Odtype.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (memory consumption) via a crafted HDF5 file.
Created: 2022-07-04 Last update: 2023-03-27 11:06
6 security issues in bullseye high

There are 6 open security issues in bullseye.

3 important issues:
  • CVE-2019-8396: A buffer overflow in H5O__layout_encode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while repacking an HDF5 file, aka "Invalid write of size 2."
  • CVE-2019-8398: An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_get_size in H5T.c.
  • CVE-2018-11205: A out of bounds read was discovered in H5VM_memcpyvv in H5VM.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack.
3 issues left for the package maintainer to handle:
  • CVE-2022-25942: (postponed; to be fixed through a stable update) An out-of-bounds read vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
  • CVE-2022-25972: (postponed; to be fixed through a stable update) An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
  • CVE-2022-26061: (postponed; to be fixed through a stable update) A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

You can find information about how to handle these issues in the security team's documentation.

Created: 2022-07-04 Last update: 2023-03-27 11:06
6 security issues in bookworm high

There are 6 open security issues in bookworm.

6 important issues:
  • CVE-2019-8396: A buffer overflow in H5O__layout_encode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while repacking an HDF5 file, aka "Invalid write of size 2."
  • CVE-2019-8398: An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_get_size in H5T.c.
  • CVE-2018-11205: A out of bounds read was discovered in H5VM_memcpyvv in H5VM.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack.
  • CVE-2022-25942: An out-of-bounds read vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
  • CVE-2022-25972: An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
  • CVE-2022-26061: A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
Created: 2022-07-04 Last update: 2023-03-27 11:06
lintian reports 59 warnings normal
Lintian reports 59 warnings about this package. You should make the package lintian clean getting rid of them.
Created: 2022-11-23 Last update: 2023-02-22 11:03
Multiarch hinter reports 1 issue(s) low
There are issues with the multiarch metadata for this package.
  • libhdf5-doc could be marked Multi-Arch: foreign
Created: 2016-09-14 Last update: 2023-03-29 22:05
debian/patches: 9 patches to forward upstream low

Among the 9 debian patches available in version 1.10.8+repack1-1 of the package, we noticed the following issues:

  • 9 patches where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.
Created: 2023-02-26 Last update: 2023-02-27 20:59
Build log checks report 3 warnings low
Build log checks report 3 warnings
Created: 2021-09-10 Last update: 2021-09-10 08:35
Standards version of the package is outdated. wishlist
The package should be updated to follow the last version of Debian Policy (Standards-Version 4.6.2 instead of 4.5.0).
Created: 2020-11-17 Last update: 2022-12-20 09:54
testing migrations
  • This package will soon be part of the auto-hdf5 transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.
news
[rss feed]
  • [2022-12-25] hdf5 1.10.8+repack1-1 MIGRATED to testing (Debian testing watch)
  • [2022-12-19] Accepted hdf5 1.10.8+repack1-1 (source) into unstable (Gilles Filippini)
  • [2022-12-01] hdf5 1.10.8+repack-4 MIGRATED to testing (Debian testing watch)
  • [2022-11-26] Accepted hdf5 1.10.8+repack-4 (source) into unstable (Gilles Filippini)
  • [2022-11-25] Accepted hdf5 1.10.8+repack-3 (source) into unstable (Gilles Filippini)
  • [2022-11-22] Accepted hdf5 1.10.8+repack-2 (source) into unstable (Gilles Filippini)
  • [2022-09-27] hdf5 1.10.8+repack-1 MIGRATED to testing (Debian testing watch)
  • [2022-08-22] Accepted hdf5 1.10.8+repack-1 (source) into unstable (Gilles Filippini)
  • [2022-05-01] Accepted hdf5 1.12.2+repack-1~exp1 (source) into experimental (Gilles Filippini)
  • [2021-10-18] hdf5 1.10.7+repack-4 MIGRATED to testing (Debian testing watch)
  • [2021-10-12] Accepted hdf5 1.10.7+repack-4 (source) into unstable (Gilles Filippini)
  • [2021-10-03] Accepted hdf5 1.10.7+repack-3 (source) into unstable (Gilles Filippini)
  • [2021-09-30] Accepted hdf5 1.10.7+repack-2 (source) into unstable (Gilles Filippini)
  • [2021-09-29] hdf5 1.10.7+repack-1 MIGRATED to testing (Debian testing watch)
  • [2021-09-20] Accepted hdf5 1.10.6+repack-4+deb11u1 (source) into proposed-updates->stable-new, proposed-updates (Debian FTP Masters) (signed by: Gilles Filippini)
  • [2021-09-09] Accepted hdf5 1.10.7+repack-1 (source) into unstable (Gilles Filippini)
  • [2021-08-17] hdf5 1.10.6+repack-5 MIGRATED to testing (Debian testing watch)
  • [2021-08-11] Accepted hdf5 1.10.6+repack-5 (source) into unstable (Gilles Filippini)
  • [2021-06-22] hdf5 1.10.6+repack-4 MIGRATED to testing (Debian testing watch)
  • [2021-06-16] Accepted hdf5 1.10.6+repack-4 (source) into unstable (Gilles Filippini)
  • [2021-06-14] Accepted hdf5 1.10.6+repack-3 (source) into unstable (Gilles Filippini)
  • [2020-05-05] hdf5 1.10.6+repack-2 MIGRATED to testing (Debian testing watch)
  • [2020-04-25] Accepted hdf5 1.10.6+repack-2 (source) into unstable (Gilles Filippini)
  • [2020-04-25] hdf5 1.10.6+repack-1 MIGRATED to testing (Debian testing watch)
  • [2020-04-23] Accepted hdf5 1.12.0+repack-1~exp2 (source) into experimental (Gilles Filippini)
  • [2020-04-02] Accepted hdf5 1.12.0+repack-1~exp1 (source amd64 all) into experimental, experimental (Debian FTP Masters) (signed by: Gilles Filippini)
  • [2020-03-28] Accepted hdf5 1.10.6+repack-1 (source) into unstable (Gilles Filippini)
  • [2020-03-18] Accepted hdf5 1.10.6+repack-1~exp5 (source) into experimental (Gilles Filippini)
  • [2020-03-16] Accepted hdf5 1.10.6+repack-1~exp4 (source) into experimental (Gilles Filippini)
  • [2020-02-29] hdf5 1.10.4+repack-11 MIGRATED to testing (Debian testing watch)
  • 1
  • 2
bugs [bug history graph]
  • all: 14
  • RC: 1
  • I&N: 11
  • M&W: 2
  • F&P: 0
  • patch: 0
links
  • homepage
  • lintian (0, 59)
  • buildd: logs, exp, checks, reproducibility, cross
  • popcon
  • browse source code
  • edit tags
  • other distros
  • security tracker
  • debian patches
ubuntu Ubuntu logo [Information about Ubuntu for Debian Developers]
  • version: 1.10.8+repack1-1ubuntu1
  • 14 bugs (1 patch)
  • patches for 1.10.8+repack1-1ubuntu1

Debian Package Tracker — Copyright 2013-2018 The Distro Tracker Developers
Report problems to the tracker.debian.org pseudo-package in the Debian BTS.
Documentation — Bugs — Git Repository — Contributing