Hello everyone!
A pre-release version of HDF5 1.8.21 is available for testing and can be downloaded from the following links:
https://portal.hdfgroup.org/display/support/HDF5+1.8.21-pre1 or https://gamma.hdfgroup.org/ftp/pub/outgoing/hdf5/
Summary of new features introduced in HDF5 1.8.21:
CMake:
- changed minimum version to 3.10.
- added pkg-config file generation.
- added creation of h5cc and similar compile scripts in builds on linux.
C++: - added C++ API wrappers to class H5Location
- added new property list subclasses
- removed memory leaks
- reorganized some exception classes
Tools: fixed several bugs
In this release we also addressed the following vulnerability issues that were brought to our attention:
CVE-2017-17505 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17505
CVE-2017-17506 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17506
CVE-2017-17508 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17508
CVE-2017-17509 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17509
The issue # CVE-2017-17507 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17507 will be addressed in the next major release since it requires changes to the user interface.
For more information about the release see https://gamma.hdfgroup.org/ftp/pub/outgoing/hdf5/hdf5-1.8.21-pre1-RELEASE.txt.
If you have time to test this release candidate, we would greatly appreciate it. We test HDF5 on a variety of platforms and with multiple compilers, but there is always a system that we couldn’t test on. Your feedback is critical.
For those who use autotools to build HDF5, the default configuration build mode for this distribution is “development”, whereas it will be “production” for the official release. For several releases we have released a pre1 version with default build mode “development” followed by a switch to default build mode “production” for a pre2 version and for the official release. This was done to catch any bugs that are exposed in “development” mode but not in production mode. The same purpose can be satisfied with only one pre-release version (and one download) by building and testing the software a second time with the additional configure option “–enable-production”. Please test both build modes if possible.
The shared library version numbers for lib.so.* files in HDF5 1.8.21-pre1 have been updated according to libtool’s versioning system and the changes in symbols from HDF5 1.8.20. The API compatibility report is at this link: https://gamma.hdfgroup.org/ftp/pub/outgoing/hdf5/hdf5-1.8.21-pre1-interface_compatibility_report.
Your prompt reports of any issues found will be invaluable and very much appreciated. Unless delayed to address serious newly discovered issues, we expect the final 1.8.21 release in late May or early June. Thank you and happy testing!