Hello everyone,
A first pre-release version of HDF5 1.10.2 is available for testing and can be downloaded at the following link:
https://gamma.hdfgroup.org/ftp/pub/outgoing/hdf5
In this release we addressed the following vulnerability issues that were brought to our attention:
CVE-2017-17505 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17505
CVE-2017-17506 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17506
CVE-2017-17508 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17508
CVE-2017-17509 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17509
The issue # CVE-2017-17507 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17507 will be addressed
in the next major release since it requires changes to the user interface.
A brief summary of new features introduced in HDF5 1.10.2:
CMake:
- changed minimum version to 3.10.
- added pkg-config file generation.
- added creation of h5cc and similar compile scripts in builds on linux.
HDF5 Library:
- We addressed the issues with the VDS implementation (HDFFV-9724) when the path to the source file was interpreted as relative to the directory where the executable ran. Location of the source files can be set via new APIs or by an environment variable.
- H5F_LIBVER_V18 parameter can now be specified to the H5Pset_libver_bounds() function to provide control over object creation. Application that use HDF5 1.10.2 should use the function and the new parameter to create files fully compatible HDF5 version 1.8.*
- Compressed datasets can now be written using MPI I/O driver.
- optimized parallel open/location of the HDF5 super-block.
- enabled MPI-IO transfers to read or write > 2GB of data in a single IO operation.
C++: added C++ API wrappers and classes related to link operations.
Java: added wrapper for enabling the error stack and wrappers for several new C APIs.
For more information about the release see https://gamma.hdfgroup.org/ftp/pub/outgoing/hdf5/hdf5-1.10.2-pre1-RELEASE.txt
If you have time to test this release candidate, we would greatly appreciate it. We test HDF5 on a variety of platforms and with multiple compilers, but there is always a system that we couldn’t test on. Your feedback is critical.
For those who use autoconf to build HDF5, please notice that the default configuration mode for this distribution is “–enable-build-mode=debug". Use the “–enable-build-mode=production” configure flag if you want to build HDF5 in the production mode. The default will be changed to “production" in the next release candidate and in the release itself, which we plan to complete before the end of March.
The shared library version numbers for lib.so.* files in HDF5-1.10.2-pre1 have been updated according to libtool’s versioning system and the changes in symbols from HDF5-1.10.1. The API compatibility report is at this link: https://gamma.hdfgroup.org/ftp/pub/outgoing/hdf5/hdf5-1.10.2-pre1-interface_compatibility_report.html.
Your prompt reports of any issues found will be invaluable and very much appreciated. Thank you and happy testing!
Larry
Larry Knox The HDF Group http://hdfgroup.org
1800 So. Oak St., Suite 203, Champaign IL 61820
217.531.6122