Libo Chen c40989630d hdf5: fix CVE-2025-6857 ...

According to [1], A vulnerability has been found in HDF5 1.14.6 and
classified as problematic. Affected by this vulnerability is the function
H5G__node_cmp3 of the file src/H5Gnode.c. The manipulation leads to
stack-based buffer overflow. It is possible to launch the attack on the
local host. The exploit has been disclosed to the public and may be used.

Backport patch [2] from upstream to fix CVE-2025-6857

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-6857
[2] https://github.com/HDFGroup/hdf5/commit/a8ceb1d95bb997f548c1129363dad53c18540096

Signed-off-by: Libo Chen <libo.chen.cn@windriver.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>

2026-04-29 10:14:29 +05:30

..

files

hdf5: fix CVE-2025-6857

2026-04-29 10:14:29 +05:30

hdf5_1.14.4-3.bb

hdf5: fix CVE-2025-6857

2026-04-29 10:14:29 +05:30