Commit 861d4b6e authored by Matthew Brett's avatar Matthew Brett Committed by GitHub
Browse files

Merge pull request #13 from andreabedini/patch-1

Address HDF5 CVEs

Several CVEs have been published against the upstream HDF5 libraries, which are packaged (currently 1.8.13) with the windows version.

CVE-2016-4330
CVE-2016-4331
CVE-2016-4332
CVE-2016-4333

These have been fixed in the current 1.8.18 release.

Hat tip to @teeks99.
parents 06036d53 2782f416
...@@ -19,7 +19,7 @@ LIBWEBP_VERSION="${LIBWEBP_VERSION:-0.5.0}" ...@@ -19,7 +19,7 @@ LIBWEBP_VERSION="${LIBWEBP_VERSION:-0.5.0}"
XZ_VERSION="${XZ_VERSION:-5.2.2}" XZ_VERSION="${XZ_VERSION:-5.2.2}"
LIBYAML_VERSION="${LIBYAML_VERSION:-0.1.5}" LIBYAML_VERSION="${LIBYAML_VERSION:-0.1.5}"
SZIP_VERSION="${SZIP_VERSION:-2.1}" SZIP_VERSION="${SZIP_VERSION:-2.1}"
HDF5_VERSION="${HDF5_VERSION:-1.8.17}" HDF5_VERSION="${HDF5_VERSION:-1.8.18}"
LIBAEC_VERSION="${LIBAEC_VERSION:-0.3.3}" LIBAEC_VERSION="${LIBAEC_VERSION:-0.3.3}"
LZO_VERSION=${LZO_VERSION:-2.09} LZO_VERSION=${LZO_VERSION:-2.09}
BLOSC_VERSION=${BLOSC_VERSION:-1.10.2} BLOSC_VERSION=${BLOSC_VERSION:-1.10.2}
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment