hdf5 - Debian Package Tracker

general

source: hdf5 (main)
version: 1.10.10+repack-3
maintainer: Gilles Filippini (DMD)
arch: all any
std-ver: 4.5.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 1.10.4+repack-10
o-o-sec: 1.10.4+repack-10+deb10u1
oldstable: 1.10.6+repack-4+deb11u1
stable: 1.10.8+repack1-1
testing: 1.10.10+repack-3
unstable: 1.10.10+repack-3
exp: 1.12.2+repack-1~exp1

versioned links

1.10.4+repack-10: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.10.4+repack-10+deb10u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.10.6+repack-4+deb11u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.10.8+repack1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.10.10+repack-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.12.2+repack-1~exp1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

hdf5-helpers
hdf5-tools (5 bugs: 0, 5, 0, 0)
libhdf5-103-1
libhdf5-cpp-103-1
libhdf5-dev (2 bugs: 0, 2, 0, 0)
libhdf5-doc
libhdf5-fortran-102
libhdf5-hl-100
libhdf5-hl-cpp-100
libhdf5-hl-fortran-100
libhdf5-java
libhdf5-jni
libhdf5-mpi-dev
libhdf5-mpich-103-1
libhdf5-mpich-cpp-103-1
libhdf5-mpich-dev
libhdf5-mpich-fortran-102
libhdf5-mpich-hl-100
libhdf5-mpich-hl-cpp-100
libhdf5-mpich-hl-fortran-100
libhdf5-openmpi-103-1
libhdf5-openmpi-cpp-103-1
libhdf5-openmpi-dev (2 bugs: 0, 2, 0, 0)
libhdf5-openmpi-fortran-102
libhdf5-openmpi-hl-100
libhdf5-openmpi-hl-cpp-100
libhdf5-openmpi-hl-fortran-100

action needed

A new upstream version is available: 1.14.3 high

A new upstream version 1.14.3 is available, you should consider packaging it.

Created: 2022-12-20 Last update: 2023-11-30 07:02

6 security issues in trixie high

There are 6 open security issues in trixie.

6 important issues:

CVE-2019-8396: A buffer overflow in H5O__layout_encode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while repacking an HDF5 file, aka "Invalid write of size 2."
CVE-2019-8398: An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_get_size in H5T.c.
CVE-2018-11205: A out of bounds read was discovered in H5VM_memcpyvv in H5VM.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack.
CVE-2022-25942: An out-of-bounds read vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVE-2022-25972: An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVE-2022-26061: A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

Created: 2023-06-11 Last update: 2023-10-23 04:08

6 security issues in sid high

There are 6 open security issues in sid.

6 important issues:

CVE-2019-8396: A buffer overflow in H5O__layout_encode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while repacking an HDF5 file, aka "Invalid write of size 2."
CVE-2019-8398: An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_get_size in H5T.c.
CVE-2018-11205: A out of bounds read was discovered in H5VM_memcpyvv in H5VM.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack.
CVE-2022-25942: An out-of-bounds read vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVE-2022-25972: An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVE-2022-26061: A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

Created: 2022-07-04 Last update: 2023-10-23 04:08

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 1.12.2+repack-1~exp2, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit c73cbc79fe18c7baf64a85eb561a347bef2bdea1
Author: Samuel Thibault <samuel.thibault@ens-lyon.org>
Date:   Sun Nov 12 18:21:25 2023 +0100

    control, rules: Add support for hurd-amd64

Created: 2023-11-12 Last update: 2023-11-25 07:30

lintian reports 57 warnings normal

Lintian reports 57 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2023-08-20 Last update: 2023-10-19 19:09

Multiarch hinter reports 1 issue(s) low

There are issues with the multiarch metadata for this package.

libhdf5-doc could be marked Multi-Arch: foreign

Created: 2016-09-14 Last update: 2023-11-30 09:39

debian/patches: 9 patches to forward upstream low

Among the 9 debian patches available in version 1.10.10+repack-3 of the package, we noticed the following issues:

9 patches where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.

Created: 2023-02-26 Last update: 2023-11-19 09:39

7 low-priority security issues in bullseye low

There are 7 open security issues in bullseye.

7 issues left for the package maintainer to handle:

CVE-2019-8396: (needs triaging) A buffer overflow in H5O__layout_encode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while repacking an HDF5 file, aka "Invalid write of size 2."
CVE-2019-8398: (needs triaging) An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_get_size in H5T.c.
CVE-2018-11205: (needs triaging) A out of bounds read was discovered in H5VM_memcpyvv in H5VM.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack.
CVE-2018-11206: (needs triaging) An out of bounds read was discovered in H5O_fill_new_decode and H5O_fill_old_decode in H5Ofill.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack.
CVE-2022-25942: (postponed; to be fixed through a stable update) An out-of-bounds read vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVE-2022-25972: (postponed; to be fixed through a stable update) An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVE-2022-26061: (postponed; to be fixed through a stable update) A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

You can find information about how to handle these issues in the security team's documentation.

Created: 2022-07-04 Last update: 2023-10-23 04:08

6 low-priority security issues in bookworm low

There are 6 open security issues in bookworm.

6 issues left for the package maintainer to handle:

CVE-2019-8396: (needs triaging) A buffer overflow in H5O__layout_encode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while repacking an HDF5 file, aka "Invalid write of size 2."
CVE-2019-8398: (needs triaging) An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_get_size in H5T.c.
CVE-2018-11205: (needs triaging) A out of bounds read was discovered in H5VM_memcpyvv in H5VM.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack.
CVE-2022-25942: (postponed; to be fixed through a stable update) An out-of-bounds read vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVE-2022-25972: (postponed; to be fixed through a stable update) An out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVE-2022-26061: (postponed; to be fixed through a stable update) A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

You can find information about how to handle these issues in the security team's documentation.

Created: 2023-06-10 Last update: 2023-10-23 04:08

Build log checks report 3 warnings low

Build log checks report 3 warnings

Created: 2021-09-10 Last update: 2021-09-10 08:35

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.6.2 instead of 4.5.0).

Created: 2020-11-17 Last update: 2023-10-18 05:39

testing migrations

This package will soon be part of the auto-hdf5 transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.

news

[rss feed]

[2023-10-23] hdf5 1.10.10+repack-3 MIGRATED to testing (Debian testing watch)
[2023-10-17] Accepted hdf5 1.10.10+repack-3 (source) into unstable (Gilles Filippini)
[2023-09-05] hdf5 1.10.10+repack-2 MIGRATED to testing (Debian testing watch)
[2023-08-19] Accepted hdf5 1.10.10+repack-2 (source) into unstable (Gilles Filippini)
[2023-08-19] Accepted hdf5 1.10.10+repack-1 (source) into unstable (Gilles Filippini)
[2023-08-08] Accepted hdf5 1.10.4+repack-10+deb10u1 (source) into oldoldstable (Markus Koschany)
[2022-12-25] hdf5 1.10.8+repack1-1 MIGRATED to testing (Debian testing watch)
[2022-12-19] Accepted hdf5 1.10.8+repack1-1 (source) into unstable (Gilles Filippini)
[2022-12-01] hdf5 1.10.8+repack-4 MIGRATED to testing (Debian testing watch)
[2022-11-26] Accepted hdf5 1.10.8+repack-4 (source) into unstable (Gilles Filippini)
[2022-11-25] Accepted hdf5 1.10.8+repack-3 (source) into unstable (Gilles Filippini)
[2022-11-22] Accepted hdf5 1.10.8+repack-2 (source) into unstable (Gilles Filippini)
[2022-09-27] hdf5 1.10.8+repack-1 MIGRATED to testing (Debian testing watch)
[2022-08-22] Accepted hdf5 1.10.8+repack-1 (source) into unstable (Gilles Filippini)
[2022-05-01] Accepted hdf5 1.12.2+repack-1~exp1 (source) into experimental (Gilles Filippini)
[2021-10-18] hdf5 1.10.7+repack-4 MIGRATED to testing (Debian testing watch)
[2021-10-12] Accepted hdf5 1.10.7+repack-4 (source) into unstable (Gilles Filippini)
[2021-10-03] Accepted hdf5 1.10.7+repack-3 (source) into unstable (Gilles Filippini)
[2021-09-30] Accepted hdf5 1.10.7+repack-2 (source) into unstable (Gilles Filippini)
[2021-09-29] hdf5 1.10.7+repack-1 MIGRATED to testing (Debian testing watch)
[2021-09-20] Accepted hdf5 1.10.6+repack-4+deb11u1 (source) into proposed-updates->stable-new, proposed-updates (Debian FTP Masters) (signed by: Gilles Filippini)
[2021-09-09] Accepted hdf5 1.10.7+repack-1 (source) into unstable (Gilles Filippini)
[2021-08-17] hdf5 1.10.6+repack-5 MIGRATED to testing (Debian testing watch)
[2021-08-11] Accepted hdf5 1.10.6+repack-5 (source) into unstable (Gilles Filippini)
[2021-06-22] hdf5 1.10.6+repack-4 MIGRATED to testing (Debian testing watch)
[2021-06-16] Accepted hdf5 1.10.6+repack-4 (source) into unstable (Gilles Filippini)
[2021-06-14] Accepted hdf5 1.10.6+repack-3 (source) into unstable (Gilles Filippini)
[2020-05-05] hdf5 1.10.6+repack-2 MIGRATED to testing (Debian testing watch)
[2020-04-25] Accepted hdf5 1.10.6+repack-2 (source) into unstable (Gilles Filippini)
[2020-04-25] hdf5 1.10.6+repack-1 MIGRATED to testing (Debian testing watch)

bugs [bug history graph]

all: 19
RC: 0
I&N: 16
M&W: 3
F&P: 0
patch: 0

links

homepage
lintian (0, 57)
buildd: logs, exp, checks, reproducibility, cross
popcon
browse source code
edit tags
other distros
security tracker
debian patches

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.10.8+repack1-1ubuntu1
14 bugs (1 patch)
patches for 1.10.8+repack1-1ubuntu1