From fe12b05c76172d09714814dde86988ba6768ecd3 Mon Sep 17 00:00:00 2001 From: Binh-Minh Date: Sun, 19 Oct 2025 18:07:06 -0400 Subject: [PATCH 1/2] Added entries for GH issues #5572 and #5573 --- release_docs/CHANGELOG.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/release_docs/CHANGELOG.md b/release_docs/CHANGELOG.md index 61184d1e3e9..eb7b1907d83 100644 --- a/release_docs/CHANGELOG.md +++ b/release_docs/CHANGELOG.md @@ -557,6 +557,20 @@ Added Fortran wrapper h5fdsubfiling_get_file_mapping_f() for the subfiling file ## Library +### Security issue CVE-2025-6818 + + A bad file caused H5C__load_entry() to attempt to allocate a very large buffer, + resulting in a crash. This issue is indirectly fixed by PR #5710. + + Fixes GitHub issue #5572 + +### Security issue CVE-2025-6818 + + A bad file caused a heap-buffer-overflow in H5O__chunk_protect() and the issue is + indirectly fixed by PR #5829. + + Fixes GitHub issue #5573 + ### Fixed security issue CVE-2025-7068 Failures during the discard process on a metadata cache entry could cause the library to skip calling the callback to free the cache entry. This could result in resource leaks and issues with flushing and closing the metadata cache during file close. This has been fixed by noting errors during the discard process, but attempting to fully free a cache entry before signalling that an error has occurred. From 4bb788dbaab29b563c5f7388a838125ed7598e5e Mon Sep 17 00:00:00 2001 From: Binh-Minh Date: Mon, 20 Oct 2025 16:53:33 -0400 Subject: [PATCH 2/2] Fixed typos --- release_docs/CHANGELOG.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/release_docs/CHANGELOG.md b/release_docs/CHANGELOG.md index eb7b1907d83..76391d06ba7 100644 --- a/release_docs/CHANGELOG.md +++ b/release_docs/CHANGELOG.md @@ -557,17 +557,17 @@ Added Fortran wrapper h5fdsubfiling_get_file_mapping_f() for the subfiling file ## Library -### Security issue CVE-2025-6818 +### Security issue CVE-2025-6817 - A bad file caused H5C__load_entry() to attempt to allocate a very large buffer, - resulting in a crash. This issue is indirectly fixed by PR #5710. + A malformed file caused H5C__load_entry() to attempt to allocate a very large + buffer, resulting in a crash. This issue is indirectly fixed by PR #5710. Fixes GitHub issue #5572 ### Security issue CVE-2025-6818 - A bad file caused a heap-buffer-overflow in H5O__chunk_protect() and the issue is - indirectly fixed by PR #5829. + A malformed file caused a heap-buffer-overflow in H5O__chunk_protect() and + the issue is indirectly fixed by PR #5829. Fixes GitHub issue #5573