[Git][security-tracker-team/security-tracker][master] hdf5 fixed in sid

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8c966cd7 by Moritz Muehlenhoff at 2026-08-14T14:22:31+02:00
hdf5 fixed in sid

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -17654,7 +17654,7 @@ CVE-2026-24252 (NVIDIA NeMo for Linux contains a vulnerability where an attacker
 CVE-2026-17612 (Honeywell S35 Series 3M/5M/8M/PinHole Cameras, all versions prior to a ...)
 	NOT-FOR-US: Honeywell
 CVE-2026-17574 (HDF5 contains a NULL pointer dereference vulnerability. Processing a c ...)
-	- hdf5 <unfixed> (bug #1143001; unimportant)
+	- hdf5 2.2.0+repack-1 (bug #1143001; unimportant)
 	[bookworm] - hdf5 <postponed> (Minor issue)
 	[bullseye] - hdf5 <postponed> (Minor issue)
 	NOTE: Fixed by: https://github.com/HDFGroup/hdf5/commit/3fa6ed6e9dfeebbc784e21d8c48e31e35a8042bc (2.2.0-rc1)
@@ -17668,7 +17668,7 @@ CVE-2026-17573 (A double free vulnerability was discovered in the HDF5 library.
 	NOTE: Fixed by: https://github.com/HDFGroup/hdf5/commit/dd3080a58cc6bb86f3b34284399915da9e513262 (2.1.0)
 	NOTE: HDF not covered by security support, see https://bugs.debian.org/1117722
 CVE-2026-17572 (Heap-based buffer overflow in the SOHM list-index deserialization code ...)
-	- hdf5 <unfixed> (bug #1142999; unimportant)
+	- hdf5 2.2.0+repack-1 (bug #1142999; unimportant)
 	[bookworm] - hdf5 <postponed> (Minor issue)
 	[bullseye] - hdf5 <postponed> (Minor issue)
 	NOTE: https://github.com/HDFGroup/hdf5/issues/6501



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8c966cd73c628248703bde7f67f8627ef29c1462

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8c966cd73c628248703bde7f67f8627ef29c1462
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260814/fc5be346/attachment.htm>