openSUSE-SU-2021:3805-1

See a problem?

Import Source

https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2021:3805-1.json

JSON Data

https://api.osv.dev/v1/vulns/openSUSE-SU-2021:3805-1

Related

Published

2021-11-25T12:54:40Z

Modified

2021-11-25T12:54:40Z

Summary

Security update for netcdf

Details

This update for netcdf fixes the following issues:

Fixed multiple vulnerabilities in ezXML: CVE-2019-20007, CVE-2019-20006, CVE-2019-20201, CVE-2019-20202, CVE-2019-20199, CVE-2019-20200, CVE-2019-20198, CVE-2021-26221, CVE-2021-26222, CVE-2021-30485, CVE-2021-31229, CVE-2021-31347, CVE-2021-31348, CVE-2021-31598 (bsc#1191856) Note:
- CVE-2021-26220 https://sourceforge.net/p/ezxml/bugs/23 not relevant for netcdf: code isn't used.
- CVE-2019-20005 https://sourceforge.net/p/ezxml/bugs/14 Issue cannot be reproduced and no patch is available upstream.

References

Affected packages

openSUSE:Leap 15.3 / netcdf_4_7_3-gnu-hpc

Package

Name: netcdf_4_7_3-gnu-hpc
Purl: pkg:rpm/opensuse/netcdf_4_7_3-gnu-hpc&distro=openSUSE%20Leap%2015.3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.7.3-3.7.2

Ecosystem specific

{
    "binaries": [
        {
            "netcdf_4_7_3-gnu-mpich-hpc-devel": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-openmpi3-hpc": "4.7.3-3.7.2",
            "libnetcdf_4_7_3-gnu-hpc": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-mvapich2-hpc": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-mvapich2-hpc-devel": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-mpich-hpc": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-hpc-devel": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-hpc-devel-static": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-openmpi3-hpc-devel-static": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-openmpi2-hpc": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-openmpi3-hpc-devel": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-openmpi2-hpc-devel-static": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-hpc": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-mpich-hpc-devel-static": "4.7.3-3.7.2",
            "libnetcdf_4_7_3-gnu-mpich-hpc": "4.7.3-3.7.2",
            "libnetcdf_4_7_3-gnu-openmpi2-hpc": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-mvapich2-hpc-devel-static": "4.7.3-3.7.2",
            "libnetcdf_4_7_3-gnu-mvapich2-hpc": "4.7.3-3.7.2",
            "libnetcdf_4_7_3-gnu-openmpi3-hpc": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-openmpi2-hpc-devel": "4.7.3-3.7.2"
        }
    ]
}

openSUSE:Leap 15.3 / netcdf_4_7_3-gnu-mpich-hpc

Package

Name: netcdf_4_7_3-gnu-mpich-hpc
Purl: pkg:rpm/opensuse/netcdf_4_7_3-gnu-mpich-hpc&distro=openSUSE%20Leap%2015.3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.7.3-3.7.2

Ecosystem specific

{
    "binaries": [
        {
            "netcdf_4_7_3-gnu-mpich-hpc-devel": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-openmpi3-hpc": "4.7.3-3.7.2",
            "libnetcdf_4_7_3-gnu-hpc": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-mvapich2-hpc": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-mvapich2-hpc-devel": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-mpich-hpc": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-hpc-devel": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-hpc-devel-static": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-openmpi3-hpc-devel-static": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-openmpi2-hpc": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-openmpi3-hpc-devel": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-openmpi2-hpc-devel-static": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-hpc": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-mpich-hpc-devel-static": "4.7.3-3.7.2",
            "libnetcdf_4_7_3-gnu-mpich-hpc": "4.7.3-3.7.2",
            "libnetcdf_4_7_3-gnu-openmpi2-hpc": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-mvapich2-hpc-devel-static": "4.7.3-3.7.2",
            "libnetcdf_4_7_3-gnu-mvapich2-hpc": "4.7.3-3.7.2",
            "libnetcdf_4_7_3-gnu-openmpi3-hpc": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-openmpi2-hpc-devel": "4.7.3-3.7.2"
        }
    ]
}

openSUSE:Leap 15.3 / netcdf_4_7_3-gnu-mvapich2-hpc

Package

Name: netcdf_4_7_3-gnu-mvapich2-hpc
Purl: pkg:rpm/opensuse/netcdf_4_7_3-gnu-mvapich2-hpc&distro=openSUSE%20Leap%2015.3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.7.3-3.7.2

Ecosystem specific

{
    "binaries": [
        {
            "netcdf_4_7_3-gnu-mpich-hpc-devel": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-openmpi3-hpc": "4.7.3-3.7.2",
            "libnetcdf_4_7_3-gnu-hpc": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-mvapich2-hpc": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-mvapich2-hpc-devel": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-mpich-hpc": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-hpc-devel": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-hpc-devel-static": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-openmpi3-hpc-devel-static": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-openmpi2-hpc": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-openmpi3-hpc-devel": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-openmpi2-hpc-devel-static": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-hpc": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-mpich-hpc-devel-static": "4.7.3-3.7.2",
            "libnetcdf_4_7_3-gnu-mpich-hpc": "4.7.3-3.7.2",
            "libnetcdf_4_7_3-gnu-openmpi2-hpc": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-mvapich2-hpc-devel-static": "4.7.3-3.7.2",
            "libnetcdf_4_7_3-gnu-mvapich2-hpc": "4.7.3-3.7.2",
            "libnetcdf_4_7_3-gnu-openmpi3-hpc": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-openmpi2-hpc-devel": "4.7.3-3.7.2"
        }
    ]
}

openSUSE:Leap 15.3 / netcdf_4_7_3-gnu-openmpi2-hpc

Package

Name: netcdf_4_7_3-gnu-openmpi2-hpc
Purl: pkg:rpm/opensuse/netcdf_4_7_3-gnu-openmpi2-hpc&distro=openSUSE%20Leap%2015.3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.7.3-3.7.2

Ecosystem specific

{
    "binaries": [
        {
            "netcdf_4_7_3-gnu-mpich-hpc-devel": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-openmpi3-hpc": "4.7.3-3.7.2",
            "libnetcdf_4_7_3-gnu-hpc": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-mvapich2-hpc": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-mvapich2-hpc-devel": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-mpich-hpc": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-hpc-devel": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-hpc-devel-static": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-openmpi3-hpc-devel-static": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-openmpi2-hpc": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-openmpi3-hpc-devel": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-openmpi2-hpc-devel-static": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-hpc": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-mpich-hpc-devel-static": "4.7.3-3.7.2",
            "libnetcdf_4_7_3-gnu-mpich-hpc": "4.7.3-3.7.2",
            "libnetcdf_4_7_3-gnu-openmpi2-hpc": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-mvapich2-hpc-devel-static": "4.7.3-3.7.2",
            "libnetcdf_4_7_3-gnu-mvapich2-hpc": "4.7.3-3.7.2",
            "libnetcdf_4_7_3-gnu-openmpi3-hpc": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-openmpi2-hpc-devel": "4.7.3-3.7.2"
        }
    ]
}

openSUSE:Leap 15.3 / netcdf_4_7_3-gnu-openmpi3-hpc

Package

Name: netcdf_4_7_3-gnu-openmpi3-hpc
Purl: pkg:rpm/opensuse/netcdf_4_7_3-gnu-openmpi3-hpc&distro=openSUSE%20Leap%2015.3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.7.3-3.7.2

Ecosystem specific

{
    "binaries": [
        {
            "netcdf_4_7_3-gnu-mpich-hpc-devel": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-openmpi3-hpc": "4.7.3-3.7.2",
            "libnetcdf_4_7_3-gnu-hpc": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-mvapich2-hpc": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-mvapich2-hpc-devel": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-mpich-hpc": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-hpc-devel": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-hpc-devel-static": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-openmpi3-hpc-devel-static": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-openmpi2-hpc": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-openmpi3-hpc-devel": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-openmpi2-hpc-devel-static": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-hpc": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-mpich-hpc-devel-static": "4.7.3-3.7.2",
            "libnetcdf_4_7_3-gnu-mpich-hpc": "4.7.3-3.7.2",
            "libnetcdf_4_7_3-gnu-openmpi2-hpc": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-mvapich2-hpc-devel-static": "4.7.3-3.7.2",
            "libnetcdf_4_7_3-gnu-mvapich2-hpc": "4.7.3-3.7.2",
            "libnetcdf_4_7_3-gnu-openmpi3-hpc": "4.7.3-3.7.2",
            "netcdf_4_7_3-gnu-openmpi2-hpc-devel": "4.7.3-3.7.2"
        }
    ]
}