OESA-2023-1208

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1208

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2023-1208.json

JSON Data

https://api.test.osv.dev/v1/vulns/OESA-2023-1208

Upstream

CVE-2018-14031

CVE-2018-16438

Published

2023-04-11T11:05:07Z

Modified

2025-08-12T05:03:51.701685Z

Summary

hdf5 security update

Details

HDF5 is a data model, library, and file format for storing and managing data. It supports an unlimited variety of datatypes, and is designed for flexible and efficient I/O and for high volume and complex data. HDF5 is portable and is extensible, allowing applications to evolve in their use of HDF5. The HDF5 Technology suite includes tools and applications for managing, manipulating, viewing, and analyzing data in the HDF5 format.

Security Fix(es):

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5T_copy in H5T.c.(CVE-2018-14031)

An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in H5Lexternquery at H5Lexternal.c.(CVE-2018-16438)

Database specific

{
    "severity": "High"
}

References

Affected packages

openEuler:20.03-LTS-SP1 / hdf5

Package

Name: hdf5
Purl: pkg:rpm/openEuler/hdf5&distro=openEuler-20.03-LTS-SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.12.1-2.oe1

Ecosystem specific

{
    "x86_64": [
        "hdf5-devel-1.12.1-2.oe1.x86_64.rpm",
        "hdf5-debugsource-1.12.1-2.oe1.x86_64.rpm",
        "hdf5-1.12.1-2.oe1.x86_64.rpm",
        "hdf5-debuginfo-1.12.1-2.oe1.x86_64.rpm"
    ],
    "src": [
        "hdf5-1.12.1-2.oe1.src.rpm"
    ],
    "aarch64": [
        "hdf5-1.12.1-2.oe1.aarch64.rpm",
        "hdf5-devel-1.12.1-2.oe1.aarch64.rpm",
        "hdf5-debugsource-1.12.1-2.oe1.aarch64.rpm",
        "hdf5-debuginfo-1.12.1-2.oe1.aarch64.rpm"
    ]
}

openEuler:20.03-LTS-SP3 / hdf5

Package

Name: hdf5
Purl: pkg:rpm/openEuler/hdf5&distro=openEuler-20.03-LTS-SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.12.1-3.oe1

Ecosystem specific

{
    "x86_64": [
        "hdf5-devel-1.12.1-3.oe1.x86_64.rpm",
        "hdf5-openmpi-devel-1.12.1-3.oe1.x86_64.rpm",
        "hdf5-mpich-static-1.12.1-3.oe1.x86_64.rpm",
        "hdf5-mpich-devel-1.12.1-3.oe1.x86_64.rpm",
        "hdf5-mpich-1.12.1-3.oe1.x86_64.rpm",
        "hdf5-openmpi-static-1.12.1-3.oe1.x86_64.rpm",
        "hdf5-debugsource-1.12.1-3.oe1.x86_64.rpm",
        "hdf5-1.12.1-3.oe1.x86_64.rpm",
        "hdf5-debuginfo-1.12.1-3.oe1.x86_64.rpm",
        "hdf5-openmpi-1.12.1-3.oe1.x86_64.rpm"
    ],
    "src": [
        "hdf5-1.12.1-3.oe1.src.rpm"
    ],
    "aarch64": [
        "hdf5-mpich-1.12.1-3.oe1.aarch64.rpm",
        "hdf5-mpich-static-1.12.1-3.oe1.aarch64.rpm",
        "hdf5-devel-1.12.1-3.oe1.aarch64.rpm",
        "hdf5-openmpi-static-1.12.1-3.oe1.aarch64.rpm",
        "hdf5-1.12.1-3.oe1.aarch64.rpm",
        "hdf5-debugsource-1.12.1-3.oe1.aarch64.rpm",
        "hdf5-mpich-devel-1.12.1-3.oe1.aarch64.rpm",
        "hdf5-openmpi-1.12.1-3.oe1.aarch64.rpm",
        "hdf5-openmpi-devel-1.12.1-3.oe1.aarch64.rpm",
        "hdf5-debuginfo-1.12.1-3.oe1.aarch64.rpm"
    ]
}

openEuler:22.03-LTS / hdf5

Package

Name: hdf5
Purl: pkg:rpm/openEuler/hdf5&distro=openEuler-22.03-LTS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.12.1-4.oe2203sp1

Ecosystem specific

{
    "x86_64": [
        "hdf5-mpich-devel-1.8.20-17.oe2203.x86_64.rpm",
        "hdf5-1.8.20-17.oe2203.x86_64.rpm",
        "hdf5-mpich-static-1.8.20-17.oe2203.x86_64.rpm",
        "hdf5-mpich-1.8.20-17.oe2203.x86_64.rpm",
        "hdf5-openmpi-1.8.20-17.oe2203.x86_64.rpm",
        "hdf5-debugsource-1.8.20-17.oe2203.x86_64.rpm",
        "hdf5-devel-1.8.20-17.oe2203.x86_64.rpm",
        "hdf5-debuginfo-1.8.20-17.oe2203.x86_64.rpm",
        "hdf5-openmpi-static-1.8.20-17.oe2203.x86_64.rpm",
        "hdf5-openmpi-devel-1.8.20-17.oe2203.x86_64.rpm",
        "hdf5-1.12.1-4.oe2203sp1.x86_64.rpm",
        "hdf5-mpich-devel-1.12.1-4.oe2203sp1.x86_64.rpm",
        "hdf5-debuginfo-1.12.1-4.oe2203sp1.x86_64.rpm",
        "hdf5-openmpi-1.12.1-4.oe2203sp1.x86_64.rpm",
        "hdf5-devel-1.12.1-4.oe2203sp1.x86_64.rpm",
        "hdf5-openmpi-devel-1.12.1-4.oe2203sp1.x86_64.rpm",
        "hdf5-mpich-1.12.1-4.oe2203sp1.x86_64.rpm",
        "hdf5-mpich-static-1.12.1-4.oe2203sp1.x86_64.rpm",
        "hdf5-openmpi-static-1.12.1-4.oe2203sp1.x86_64.rpm",
        "hdf5-debugsource-1.12.1-4.oe2203sp1.x86_64.rpm"
    ],
    "src": [
        "hdf5-1.8.20-17.oe2203.src.rpm",
        "hdf5-1.12.1-4.oe2203sp1.src.rpm"
    ],
    "aarch64": [
        "hdf5-debugsource-1.8.20-17.oe2203.aarch64.rpm",
        "hdf5-devel-1.8.20-17.oe2203.aarch64.rpm",
        "hdf5-mpich-devel-1.8.20-17.oe2203.aarch64.rpm",
        "hdf5-debuginfo-1.8.20-17.oe2203.aarch64.rpm",
        "hdf5-mpich-static-1.8.20-17.oe2203.aarch64.rpm",
        "hdf5-mpich-1.8.20-17.oe2203.aarch64.rpm",
        "hdf5-openmpi-static-1.8.20-17.oe2203.aarch64.rpm",
        "hdf5-openmpi-devel-1.8.20-17.oe2203.aarch64.rpm",
        "hdf5-openmpi-1.8.20-17.oe2203.aarch64.rpm",
        "hdf5-1.8.20-17.oe2203.aarch64.rpm",
        "hdf5-debuginfo-1.12.1-4.oe2203sp1.aarch64.rpm",
        "hdf5-debugsource-1.12.1-4.oe2203sp1.aarch64.rpm",
        "hdf5-openmpi-devel-1.12.1-4.oe2203sp1.aarch64.rpm",
        "hdf5-mpich-devel-1.12.1-4.oe2203sp1.aarch64.rpm",
        "hdf5-devel-1.12.1-4.oe2203sp1.aarch64.rpm",
        "hdf5-1.12.1-4.oe2203sp1.aarch64.rpm",
        "hdf5-openmpi-static-1.12.1-4.oe2203sp1.aarch64.rpm",
        "hdf5-mpich-1.12.1-4.oe2203sp1.aarch64.rpm",
        "hdf5-mpich-static-1.12.1-4.oe2203sp1.aarch64.rpm",
        "hdf5-openmpi-1.12.1-4.oe2203sp1.aarch64.rpm"
    ]
}

openEuler:22.03-LTS-SP1 / hdf5

Package

Name: hdf5
Purl: pkg:rpm/openEuler/hdf5&distro=openEuler-22.03-LTS-SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.12.1-4.oe2203sp1

Ecosystem specific

{
    "x86_64": [
        "hdf5-1.12.1-4.oe2203sp1.x86_64.rpm",
        "hdf5-mpich-devel-1.12.1-4.oe2203sp1.x86_64.rpm",
        "hdf5-debuginfo-1.12.1-4.oe2203sp1.x86_64.rpm",
        "hdf5-openmpi-1.12.1-4.oe2203sp1.x86_64.rpm",
        "hdf5-devel-1.12.1-4.oe2203sp1.x86_64.rpm",
        "hdf5-openmpi-devel-1.12.1-4.oe2203sp1.x86_64.rpm",
        "hdf5-mpich-1.12.1-4.oe2203sp1.x86_64.rpm",
        "hdf5-mpich-static-1.12.1-4.oe2203sp1.x86_64.rpm",
        "hdf5-openmpi-static-1.12.1-4.oe2203sp1.x86_64.rpm",
        "hdf5-debugsource-1.12.1-4.oe2203sp1.x86_64.rpm"
    ],
    "src": [
        "hdf5-1.12.1-4.oe2203sp1.src.rpm"
    ],
    "aarch64": [
        "hdf5-debuginfo-1.12.1-4.oe2203sp1.aarch64.rpm",
        "hdf5-debugsource-1.12.1-4.oe2203sp1.aarch64.rpm",
        "hdf5-openmpi-devel-1.12.1-4.oe2203sp1.aarch64.rpm",
        "hdf5-mpich-devel-1.12.1-4.oe2203sp1.aarch64.rpm",
        "hdf5-devel-1.12.1-4.oe2203sp1.aarch64.rpm",
        "hdf5-1.12.1-4.oe2203sp1.aarch64.rpm",
        "hdf5-openmpi-static-1.12.1-4.oe2203sp1.aarch64.rpm",
        "hdf5-mpich-1.12.1-4.oe2203sp1.aarch64.rpm",
        "hdf5-mpich-static-1.12.1-4.oe2203sp1.aarch64.rpm",
        "hdf5-openmpi-1.12.1-4.oe2203sp1.aarch64.rpm"
    ]
}