-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2016-681fa1a146 2016-12-31 18:54:31.134857 --------------------------------------------------------------------------------

Name : hdf5 Product : Fedora EPEL 6 Version : 1.8.5.patch1 Release : 10.el6 URL : http://www.hdfgroup.org/HDF5/ Summary : A general purpose library and file format for storing scientific data Description : HDF5 is a general purpose library and file format for storing scientific data. HDF5 can store two primary objects: datasets and groups. A dataset is essentially a multidimensional array of data elements, and a group is a structure for organizing objects in an HDF5 file. Using these two basic objects, one can create and store almost any kind of scientific data structure, such as images, arrays of vectors, and structured and unstructured grids. You can also mix and match them in HDF5 files according to your needs.

-------------------------------------------------------------------------------- Update Information:

Security fix for CVE-2016-4330, CVE-2016-4331, CVE-2016-4332, CVE-2016-4333 -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1397708 - CVE-2016-4333 hdf5: H5T_COMPOUND heap buffer overflow https://bugzilla.redhat.com/show_bug.cgi?id=1397708 [ 2 ] Bug #1397707 - CVE-2016-4332 hdf5: Shareable message type out-of-bounds write https://bugzilla.redhat.com/show_bug.cgi?id=1397707 [ 3 ] Bug #1397704 - CVE-2016-4331 hdf5: H5Z_NBIT heap buffer overflow https://bugzilla.redhat.com/show_bug.cgi?id=1397704 [ 4 ] Bug #1397701 - CVE-2016-4330 hdf5: H5T_ARRAY heap buffer overflow https://bugzilla.redhat.com/show_bug.cgi?id=1397701 --------------------------------------------------------------------------------

This update can be installed with the "yum" update programs. Use su -c 'yum update hdf5' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/htm...

All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------