ROOT-OS-DEBIAN-12-CVE-2024-33875 CVE-2024-33875 in rootio-hdf5 - Patched by Root

Root has patched CVE-2024-33875 in the rootio-hdf5 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-32622 CVE-2024-32622 in rootio-hdf5 - Patched by Root

Root has patched CVE-2024-32622 in the rootio-hdf5 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-2924 CVE-2025-2924 in rootio-hdf5 - Patched by Root

Root has patched CVE-2025-2924 in the rootio-hdf5 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2021-37501 CVE-2021-37501 in rootio-hdf5 - Patched by Root

Root has patched CVE-2021-37501 in the rootio-hdf5 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-32605 CVE-2024-32605 in rootio-hdf5 - Patched by Root

Root has patched CVE-2024-32605 in the rootio-hdf5 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2019-8396 CVE-2019-8396 in rootio-hdf5 - Patched by Root

Root has patched CVE-2019-8396 in the rootio-hdf5 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-32613 CVE-2024-32613 in rootio-hdf5 - Patched by Root

Root has patched CVE-2024-32613 in the rootio-hdf5 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-33876 CVE-2024-33876 in rootio-hdf5 - Patched by Root

Root has patched CVE-2024-33876 in the rootio-hdf5 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2018-14033 CVE-2018-14033 in rootio-hdf5 - Patched by Root

Root has patched CVE-2018-14033 in the rootio-hdf5 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-7067 CVE-2025-7067 in rootio-hdf5 - Patched by Root

Root has patched CVE-2025-7067 in the rootio-hdf5 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-32621 CVE-2024-32621 in rootio-hdf5 - Patched by Root

Root has patched CVE-2024-32621 in the rootio-hdf5 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-32619 CVE-2024-32619 in rootio-hdf5 - Patched by Root

Root has patched CVE-2024-32619 in the rootio-hdf5 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-32606 CVE-2024-32606 in rootio-hdf5 - Patched by Root

Root has patched CVE-2024-32606 in the rootio-hdf5 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-2926 CVE-2025-2926 in rootio-hdf5 - Patched by Root

Root has patched CVE-2025-2926 in the rootio-hdf5 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-32617 CVE-2024-32617 in rootio-hdf5 - Patched by Root

Root has patched CVE-2024-32617 in the rootio-hdf5 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2019-8398 CVE-2019-8398 in rootio-hdf5 - Patched by Root

Root has patched CVE-2019-8398 in the rootio-hdf5 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-2153 CVE-2025-2153 in rootio-hdf5 - Patched by Root

Root has patched CVE-2025-2153 in the rootio-hdf5 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-2925 CVE-2025-2925 in rootio-hdf5 - Patched by Root

Root has patched CVE-2025-2925 in the rootio-hdf5 package for Root:Debian:12. Multiple fixed versions available...

model.weights.h5: h5py.ExternalLink at Group level silently followed during load_model(), bypassing CVE-2025-9905 fix — information disclosure from arbitrary HDF5 files

Keras 3.x introduced a fix for CVE-2025-9905 by checking dataset.external in H5IOStore.verifydataset. This check blocks datasets whose raw bytes are stored in external files via the HDF5 "External Data Storage" mechanism. However, HDF5 supports a second, unrelated external-reference mechanism:...

Incomplete Fix for CVE-2026-1669: HDF5 External Storage File Disclosure in Legacy H5 Loading

Description Keras 3 patched CVE-2026-1669 HDF5 External Storage File Disclosure in the new .keras and .weights.h5 loading paths by adding verifydataset to check for dataset.external in H5IOStore. However, the legacy .h5 loading path keras/src/legacy/saving/legacyh5format.py was not patched. This...