ROOT-OS-DEBIAN-12-CVE-2025-7069 CVE-2025-7069 in rootio-hdf5 - Patched by Root

Root has patched CVE-2025-7069 in the rootio-hdf5 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-33875 CVE-2024-33875 in rootio-hdf5 - Patched by Root

Root has patched CVE-2024-33875 in the rootio-hdf5 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2019-8396 CVE-2019-8396 in rootio-hdf5 - Patched by Root

Root has patched CVE-2019-8396 in the rootio-hdf5 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-2912 CVE-2025-2912 in rootio-hdf5 - Patched by Root

Root has patched CVE-2025-2912 in the rootio-hdf5 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-7067 CVE-2025-7067 in rootio-hdf5 - Patched by Root

Root has patched CVE-2025-7067 in the rootio-hdf5 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-32619 CVE-2024-32619 in rootio-hdf5 - Patched by Root

Root has patched CVE-2024-32619 in the rootio-hdf5 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-32617 CVE-2024-32617 in rootio-hdf5 - Patched by Root

Root has patched CVE-2024-32617 in the rootio-hdf5 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-32606 CVE-2024-32606 in rootio-hdf5 - Patched by Root

Root has patched CVE-2024-32606 in the rootio-hdf5 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-2925 CVE-2025-2925 in rootio-hdf5 - Patched by Root

Root has patched CVE-2025-2925 in the rootio-hdf5 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2018-14033 CVE-2018-14033 in rootio-hdf5 - Patched by Root

Root has patched CVE-2018-14033 in the rootio-hdf5 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-32621 CVE-2024-32621 in rootio-hdf5 - Patched by Root

Root has patched CVE-2024-32621 in the rootio-hdf5 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2019-8398 CVE-2019-8398 in rootio-hdf5 - Patched by Root

Root has patched CVE-2019-8398 in the rootio-hdf5 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-2926 CVE-2025-2926 in rootio-hdf5 - Patched by Root

Root has patched CVE-2025-2926 in the rootio-hdf5 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-2153 CVE-2025-2153 in rootio-hdf5 - Patched by Root

Root has patched CVE-2025-2153 in the rootio-hdf5 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-33876 CVE-2024-33876 in rootio-hdf5 - Patched by Root

Root has patched CVE-2024-33876 in the rootio-hdf5 package for Root:Debian:12. Multiple fixed versions available...

model.weights.h5: h5py.ExternalLink at Group level silently followed during load_model(), bypassing CVE-2025-9905 fix — information disclosure from arbitrary HDF5 files

Keras 3.x introduced a fix for CVE-2025-9905 by checking dataset.external in H5IOStore.verifydataset. This check blocks datasets whose raw bytes are stored in external files via the HDF5 "External Data Storage" mechanism. However, HDF5 supports a second, unrelated external-reference mechanism:...

Incomplete Fix for CVE-2026-1669: HDF5 External Storage File Disclosure in Legacy H5 Loading

Description Keras 3 patched CVE-2026-1669 HDF5 External Storage File Disclosure in the new .keras and .weights.h5 loading paths by adding verifydataset to check for dataset.external in H5IOStore. However, the legacy .h5 loading path keras/src/legacy/saving/legacyh5format.py was not patched. This...

Keras Has A Local File Disclosure Via HDF5 External Storage During Keras Weight Loading

Summary TensorFlow / Keras continues to honor HDF5 “external storage” and "ExternalLink" features when loading weights. A malicious ".weights.h5" or a ".keras" archive embedding such weights can direct "loadweights" to read from an arbitrary readable filesystem path. The bytes pulled from that pa...

Linux Distros Unpatched Vulnerability : CVE-2026-2492

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate...

DEBIAN-CVE-2026-2492

TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of TensorFlow. An attacker must first obtain the ability to execute low-privileged code on the target syste...