Skip to content

Commit 7a0f5d7

Browse files
Added acknowledgements section to Exec summary, added missing CVE links
1 parent 3f8b07e commit 7a0f5d7

File tree

1 file changed

+6
-2
lines changed

1 file changed

+6
-2
lines changed

release_docs/CHANGELOG.md

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -49,6 +49,10 @@ For releases prior to version 2.0.0, please see the release.txt file and for mor
4949

5050
- Improved [ROS3 VFD](https://github.com/HDFGroup/hdf5/blob/develop/release_docs/CHANGELOG.md#ros3) capabilities using the aws-c-s3 library.
5151

52+
## Acknowledgements:
53+
54+
We would like to thank the many HDF5 community members that contributed to HDF5 2.0.
55+
5256
# ⚠️ Breaking Changes
5357

5458
### Renamed the option: `HDF5_ENABLE_Z_LIB_SUPPORT`
@@ -554,7 +558,7 @@ Added Fortran wrapper `h5fdsubfiling_get_file_mapping_f()` for the subfiling fil
554558

555559
## Library
556560

557-
### Fixed security issue CVE-2025-2915 and OSV-2024-381
561+
### Fixed security issue [CVE-2025-2915](https://nvd.nist.gov/vuln/detail/CVE-2025-2915) and [OSV-2024-381](https://osv.dev/vulnerability/OSV-2024-381)
558562

559563
Fixed a heap-based buffer overflow in H5F__accum_free caused by an integer overflow when calculating new_accum_size. Added validation in H5O__mdci_decode to detect and reject invalid values early, preventing the overflow condition.
560564

@@ -679,7 +683,7 @@ Added Fortran wrapper `h5fdsubfiling_get_file_mapping_f()` for the subfiling fil
679683

680684
Fixed GitHub issue [#4952](https://github.com/HDFGroup/hdf5/issues/4952)
681685

682-
### Fixed security issue CVE-2025-2310
686+
### Fixed security issue [CVE-2025-2310](https://nvd.nist.gov/vuln/detail/CVE-2025-2310)
683687

684688
A malformed HDF5 file could have an attribute with a recorded name length of zero.This would lead to an overflow and an invalid memory access. An integrity check has been added to detect this case and safely stop file decoding.
685689

0 commit comments

Comments
 (0)