openSUSE-SU-2021:1505-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2021:1505-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2021:1505-1
Related
Published
2021-11-26T08:42:03Z
Modified
2021-11-26T08:42:03Z
Summary
Security update for netcdf
Details

This update for netcdf fixes the following issues:

  • Fixed multiple vulnerabilities in ezXML: CVE-2019-20007, CVE-2019-20006, CVE-2019-20201, CVE-2019-20202, CVE-2019-20199, CVE-2019-20200, CVE-2019-20198, CVE-2021-26221, CVE-2021-26222, CVE-2021-30485, CVE-2021-31229, CVE-2021-31347, CVE-2021-31348, CVE-2021-31598 (bsc#1191856) Note:
    • CVE-2021-26220 https://sourceforge.net/p/ezxml/bugs/23 not relevant for netcdf: code isn't used.
    • CVE-2019-20005 https://sourceforge.net/p/ezxml/bugs/14 Issue cannot be reproduced and no patch is available upstream.

This update was imported from the SUSE:SLE-15-SP2:Update update project.

References

Affected packages

openSUSE:Leap 15.2 / netcdf_4_7_3-gnu-hpc

Package

Name
netcdf_4_7_3-gnu-hpc
Purl
pkg:rpm/opensuse/netcdf_4_7_3-gnu-hpc&distro=openSUSE%20Leap%2015.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.7.3-lp152.2.6.1

Ecosystem specific 

{
    "binaries": [
        {
            "netcdf_4_7_3-gnu-mpich-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-openmpi3-hpc": "4.7.3-lp152.2.6.1",
            "libnetcdf_4_7_3-gnu-hpc": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-mpich-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-mvapich2-hpc": "4.7.3-lp152.2.6.1",
            "libnetcdf-gnu-openmpi2-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-mpich-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-mpich-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-openmpi3-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-openmpi3-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-hpc-devel": "4.7.3-lp152.2.6.1",
            "libnetcdf_4_7_3-gnu-mpich-hpc": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-openmpi3-hpc": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-mvapich2-hpc": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-mvapich2-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-openmpi2-hpc-devel": "4.7.3-lp152.2.6.1",
            "libnetcdf-gnu-hpc": "4.7.3-lp152.2.6.1",
            "libnetcdf-gnu-mvapich2-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-openmpi2-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-mvapich2-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-openmpi2-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-hpc-devel-static": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-openmpi3-hpc-devel-static": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-openmpi2-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-openmpi2-hpc-devel-static": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-mpich-hpc-devel-static": "4.7.3-lp152.2.6.1",
            "libnetcdf_4_7_3-gnu-openmpi2-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-mvapich2-hpc-devel-static": "4.7.3-lp152.2.6.1",
            "libnetcdf_4_7_3-gnu-mvapich2-hpc": "4.7.3-lp152.2.6.1",
            "libnetcdf-gnu-mpich-hpc": "4.7.3-lp152.2.6.1",
            "libnetcdf-gnu-openmpi3-hpc": "4.7.3-lp152.2.6.1",
            "libnetcdf_4_7_3-gnu-openmpi3-hpc": "4.7.3-lp152.2.6.1"
        }
    ]
}

openSUSE:Leap 15.2 / netcdf_4_7_3-gnu-mpich-hpc

Package

Name
netcdf_4_7_3-gnu-mpich-hpc
Purl
pkg:rpm/opensuse/netcdf_4_7_3-gnu-mpich-hpc&distro=openSUSE%20Leap%2015.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.7.3-lp152.2.6.1

Ecosystem specific 

{
    "binaries": [
        {
            "netcdf_4_7_3-gnu-mpich-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-openmpi3-hpc": "4.7.3-lp152.2.6.1",
            "libnetcdf_4_7_3-gnu-hpc": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-mpich-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-mvapich2-hpc": "4.7.3-lp152.2.6.1",
            "libnetcdf-gnu-openmpi2-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-mpich-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-mpich-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-openmpi3-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-openmpi3-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-hpc-devel": "4.7.3-lp152.2.6.1",
            "libnetcdf_4_7_3-gnu-mpich-hpc": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-openmpi3-hpc": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-mvapich2-hpc": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-mvapich2-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-openmpi2-hpc-devel": "4.7.3-lp152.2.6.1",
            "libnetcdf-gnu-hpc": "4.7.3-lp152.2.6.1",
            "libnetcdf-gnu-mvapich2-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-openmpi2-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-mvapich2-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-openmpi2-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-hpc-devel-static": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-openmpi3-hpc-devel-static": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-openmpi2-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-openmpi2-hpc-devel-static": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-mpich-hpc-devel-static": "4.7.3-lp152.2.6.1",
            "libnetcdf_4_7_3-gnu-openmpi2-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-mvapich2-hpc-devel-static": "4.7.3-lp152.2.6.1",
            "libnetcdf_4_7_3-gnu-mvapich2-hpc": "4.7.3-lp152.2.6.1",
            "libnetcdf-gnu-mpich-hpc": "4.7.3-lp152.2.6.1",
            "libnetcdf-gnu-openmpi3-hpc": "4.7.3-lp152.2.6.1",
            "libnetcdf_4_7_3-gnu-openmpi3-hpc": "4.7.3-lp152.2.6.1"
        }
    ]
}

openSUSE:Leap 15.2 / netcdf_4_7_3-gnu-mvapich2-hpc

Package

Name
netcdf_4_7_3-gnu-mvapich2-hpc
Purl
pkg:rpm/opensuse/netcdf_4_7_3-gnu-mvapich2-hpc&distro=openSUSE%20Leap%2015.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.7.3-lp152.2.6.1

Ecosystem specific 

{
    "binaries": [
        {
            "netcdf_4_7_3-gnu-mpich-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-openmpi3-hpc": "4.7.3-lp152.2.6.1",
            "libnetcdf_4_7_3-gnu-hpc": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-mpich-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-mvapich2-hpc": "4.7.3-lp152.2.6.1",
            "libnetcdf-gnu-openmpi2-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-mpich-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-mpich-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-openmpi3-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-openmpi3-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-hpc-devel": "4.7.3-lp152.2.6.1",
            "libnetcdf_4_7_3-gnu-mpich-hpc": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-openmpi3-hpc": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-mvapich2-hpc": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-mvapich2-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-openmpi2-hpc-devel": "4.7.3-lp152.2.6.1",
            "libnetcdf-gnu-hpc": "4.7.3-lp152.2.6.1",
            "libnetcdf-gnu-mvapich2-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-openmpi2-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-mvapich2-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-openmpi2-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-hpc-devel-static": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-openmpi3-hpc-devel-static": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-openmpi2-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-openmpi2-hpc-devel-static": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-mpich-hpc-devel-static": "4.7.3-lp152.2.6.1",
            "libnetcdf_4_7_3-gnu-openmpi2-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-mvapich2-hpc-devel-static": "4.7.3-lp152.2.6.1",
            "libnetcdf_4_7_3-gnu-mvapich2-hpc": "4.7.3-lp152.2.6.1",
            "libnetcdf-gnu-mpich-hpc": "4.7.3-lp152.2.6.1",
            "libnetcdf-gnu-openmpi3-hpc": "4.7.3-lp152.2.6.1",
            "libnetcdf_4_7_3-gnu-openmpi3-hpc": "4.7.3-lp152.2.6.1"
        }
    ]
}

openSUSE:Leap 15.2 / netcdf_4_7_3-gnu-openmpi2-hpc

Package

Name
netcdf_4_7_3-gnu-openmpi2-hpc
Purl
pkg:rpm/opensuse/netcdf_4_7_3-gnu-openmpi2-hpc&distro=openSUSE%20Leap%2015.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.7.3-lp152.2.6.1

Ecosystem specific 

{
    "binaries": [
        {
            "netcdf_4_7_3-gnu-mpich-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-openmpi3-hpc": "4.7.3-lp152.2.6.1",
            "libnetcdf_4_7_3-gnu-hpc": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-mpich-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-mvapich2-hpc": "4.7.3-lp152.2.6.1",
            "libnetcdf-gnu-openmpi2-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-mpich-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-mpich-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-openmpi3-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-openmpi3-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-hpc-devel": "4.7.3-lp152.2.6.1",
            "libnetcdf_4_7_3-gnu-mpich-hpc": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-openmpi3-hpc": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-mvapich2-hpc": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-mvapich2-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-openmpi2-hpc-devel": "4.7.3-lp152.2.6.1",
            "libnetcdf-gnu-hpc": "4.7.3-lp152.2.6.1",
            "libnetcdf-gnu-mvapich2-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-openmpi2-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-mvapich2-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-openmpi2-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-hpc-devel-static": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-openmpi3-hpc-devel-static": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-openmpi2-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-openmpi2-hpc-devel-static": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-mpich-hpc-devel-static": "4.7.3-lp152.2.6.1",
            "libnetcdf_4_7_3-gnu-openmpi2-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-mvapich2-hpc-devel-static": "4.7.3-lp152.2.6.1",
            "libnetcdf_4_7_3-gnu-mvapich2-hpc": "4.7.3-lp152.2.6.1",
            "libnetcdf-gnu-mpich-hpc": "4.7.3-lp152.2.6.1",
            "libnetcdf-gnu-openmpi3-hpc": "4.7.3-lp152.2.6.1",
            "libnetcdf_4_7_3-gnu-openmpi3-hpc": "4.7.3-lp152.2.6.1"
        }
    ]
}

openSUSE:Leap 15.2 / netcdf_4_7_3-gnu-openmpi3-hpc

Package

Name
netcdf_4_7_3-gnu-openmpi3-hpc
Purl
pkg:rpm/opensuse/netcdf_4_7_3-gnu-openmpi3-hpc&distro=openSUSE%20Leap%2015.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.7.3-lp152.2.6.1

Ecosystem specific 

{
    "binaries": [
        {
            "netcdf_4_7_3-gnu-mpich-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-openmpi3-hpc": "4.7.3-lp152.2.6.1",
            "libnetcdf_4_7_3-gnu-hpc": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-mpich-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-mvapich2-hpc": "4.7.3-lp152.2.6.1",
            "libnetcdf-gnu-openmpi2-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-mpich-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-mpich-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-openmpi3-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-openmpi3-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-hpc-devel": "4.7.3-lp152.2.6.1",
            "libnetcdf_4_7_3-gnu-mpich-hpc": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-openmpi3-hpc": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-mvapich2-hpc": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-mvapich2-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-openmpi2-hpc-devel": "4.7.3-lp152.2.6.1",
            "libnetcdf-gnu-hpc": "4.7.3-lp152.2.6.1",
            "libnetcdf-gnu-mvapich2-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-openmpi2-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-mvapich2-hpc-devel": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-openmpi2-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-hpc-devel-static": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-openmpi3-hpc-devel-static": "4.7.3-lp152.2.6.1",
            "netcdf-gnu-openmpi2-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-openmpi2-hpc-devel-static": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-mpich-hpc-devel-static": "4.7.3-lp152.2.6.1",
            "libnetcdf_4_7_3-gnu-openmpi2-hpc": "4.7.3-lp152.2.6.1",
            "netcdf_4_7_3-gnu-mvapich2-hpc-devel-static": "4.7.3-lp152.2.6.1",
            "libnetcdf_4_7_3-gnu-mvapich2-hpc": "4.7.3-lp152.2.6.1",
            "libnetcdf-gnu-mpich-hpc": "4.7.3-lp152.2.6.1",
            "libnetcdf-gnu-openmpi3-hpc": "4.7.3-lp152.2.6.1",
            "libnetcdf_4_7_3-gnu-openmpi3-hpc": "4.7.3-lp152.2.6.1"
        }
    ]
}