diff --git a/release_docs/CHANGELOG.md b/release_docs/CHANGELOG.md index d08176bc677..ab1514f77a1 100644 --- a/release_docs/CHANGELOG.md +++ b/release_docs/CHANGELOG.md @@ -557,6 +557,20 @@ Added Fortran wrapper h5fdsubfiling_get_file_mapping_f() for the subfiling file ## Library +### Security issue CVE-2025-6817 + + A malformed file caused H5C__load_entry() to attempt to allocate a very large + buffer, resulting in a crash. This issue is indirectly fixed by PR #5710. + + Fixes GitHub issue #5572 + +### Security issue CVE-2025-6818 + + A malformed file caused a heap-buffer-overflow in H5O__chunk_protect() and + the issue is indirectly fixed by PR #5829. + + Fixes GitHub issue #5573 + ### Fixed security issue CVE-2025-2915 and OSV-2024-381 Fixed a heap-based buffer overflow in H5F__accum_free caused by an integer overflow when calculating new_accum_size. Added validation in H5O__mdci_decode to detect and reject invalid values early, preventing the overflow condition.