Nearly 40 years on, HDF4 receives one final official release focused on security, stability, and long-term use. HDF4 has supported scientific computing for nearly four decades. It has powered remote sensing systems, Earth science applications, aerospace work, and long-lived research and operational systems. HDF5 has been the focus of active development for many years, but […]
Excerpt: A new ecosystem-level audit identifies recurring failure classes, clarifies where authority and responsibility reside, and proposes a phased mitigation roadmap for HDF5 and its wider software and data ecosystem. HDF5 is foundational infrastructure for science and engineering. It stores experimental observations, simulation results, images, models, sensor data, and long-lived scientific records. That reach makes
In our July 31 post, “When an HDF5 file points outside itself,” we described the use of HDF5 external raw storage in the Hugging Face incident. Some later accounts have labeled this as an “HDF5 vulnerability.” A recent Black Hat presentation, around 27:13, refers to it as “a vulnerability in HDF5 dataset parsing” and “the
by Gerd Heber, Executive Director, The HDF Group When something goes wrong, someone is going to tell the story. You’ll be better off if it’s you. Otherwise, you create an opportunity for rumors, hearsay, and false information to spread. (Jason Fried & David Heinemeier Hansson, Rework) Reports on the July 2026 OpenAI agent intrusion have
HDF5 2.2.0 Now Available The HDF Group is pleased to announce the release of HDF5 2.2.0, delivering improved cloud performance, stronger security capabilities, enhanced build and deployment workflows, and numerous reliability and usability improvements across the HDF5 ecosystem. This release focuses on making HDF5 easier to deploy, more secure in production environments, and more efficient
New CNA status enables faster response, enhanced transparency, and streamlined collaboration across the HDF5 ecosystem; milestone advances the NSF Safe‑OSE HDF5 SHINES initiative
Following the major milestone of HDF5 2.0.0, we are pleased to announce the release of HDF5 2.1.0. As the first minor release in the 2.x series, version 2.1.0 focuses on expanding support for modern hardware datatypes and improving the developer experience for Fortran users. The HDF5 2.1.0 release is now available from the HDF5 2.1.0
The HDFView 3.4.1 release is now available from the HDFView download page. With this new maintenance release, HDFView now has the following new features: Added comprehensive support for operating with float16 datatypes New user option for editing the plugin path and managing plugins The build system has been converted to Maven A bug fix to
TL;DR Use three tags when you talk about risk in the HDF5 ecosystem—impact (Safety / Security / Privacy), incident lens (Accident / Attack / Exposure), and location (FMT / LIB / EXT / TCD / OPS / PRV / SCD / UNK).
For Immediate Release. Champaign, ILL — Dec. 10, 2025. The HDF Group today announced that it has been selected by the U.S. National Science Foundation (NSF) for funding under the inaugural Safety, Security, and Privacy of Open‑Source Ecosystems (Safe‑OSE) investment. The new project, titled “NSF‑Safe‑OSE: Strengthening HDF5 for Science, Industry, and National Security Applications” (Award
