You are here
Home > Preporuke > Sigurnosni nedostaci programskog paketa hdf5

Sigurnosni nedostaci programskog paketa hdf5

  • Detalji os-a: WN7
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LFE

——————————————————————————–
Fedora Update Notification
FEDORA-2016-3477b592e3
2016-12-27 15:10:28.239498
——————————————————————————–

Name : hdf5
Product : Fedora 25
Version : 1.8.17
Release : 2.fc25
URL : http://www.hdfgroup.org/HDF5/
Summary : A general purpose library and file format for storing scientific data
Description :
HDF5 is a general purpose library and file format for storing scientific data.
HDF5 can store two primary objects: datasets and groups. A dataset is
essentially a multidimensional array of data elements, and a group is a
structure for organizing objects in an HDF5 file. Using these two basic
objects, one can create and store almost any kind of scientific data
structure, such as images, arrays of vectors, and structured and unstructured
grids. You can also mix and match them in HDF5 files according to your needs.

——————————————————————————–
Update Information:

Security fix for CVE-2016-4330, CVE-2016-4331, CVE-2016-4332, CVE-2016-4333
——————————————————————————–
References:

[ 1 ] Bug #1397708 – CVE-2016-4333 hdf5: H5T_COMPOUND heap buffer overflow
https://bugzilla.redhat.com/show_bug.cgi?id=1397708
[ 2 ] Bug #1397707 – CVE-2016-4332 hdf5: Shareable message type out-of-bounds write
https://bugzilla.redhat.com/show_bug.cgi?id=1397707
[ 3 ] Bug #1397704 – CVE-2016-4331 hdf5: H5Z_NBIT heap buffer overflow
https://bugzilla.redhat.com/show_bug.cgi?id=1397704
[ 4 ] Bug #1397701 – CVE-2016-4330 hdf5: H5T_ARRAY heap buffer overflow
https://bugzilla.redhat.com/show_bug.cgi?id=1397701
——————————————————————————–

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade hdf5’ at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list — package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

AutorVlatka Misic
Cert idNCERT-REF-2016-12-0073-ADV
CveCERT-CVE-DUMMY
ID izvornikaCERT-ORIGID-DUMMY
ProizvodCERT-DUMMY-PRODUCT
Izvorhttp://www.adobe.com/
Top
More in Preporuke
Sigurnosni nedostaci programskog paketa xen

Otkriveni su sigurnosni nedostaci u programskom paketu xen za Fedoru. Otkriveni nedostaci potencijalnim napadačima omogućuju stjecanje uvećanih ovlasti i rušenje...

Close