openSUSE-SU-2021:3805-1
See a problem?- Import Source
- https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2021:3805-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/openSUSE-SU-2021:3805-1
- Related
- Published
- 2021-11-25T12:54:40Z
- Modified
- 2025-05-07T18:10:58.749523Z
- Upstream
- Summary
- Security update for netcdf
- Details
-
This update for netcdf fixes the following issues:
- Fixed multiple vulnerabilities in ezXML:
CVE-2019-20007, CVE-2019-20006, CVE-2019-20201, CVE-2019-20202,
CVE-2019-20199, CVE-2019-20200, CVE-2019-20198, CVE-2021-26221,
CVE-2021-26222, CVE-2021-30485, CVE-2021-31229, CVE-2021-31347,
CVE-2021-31348, CVE-2021-31598 (bsc#1191856)
Note:
- CVE-2021-26220 https://sourceforge.net/p/ezxml/bugs/23 not relevant for netcdf: code isn't used.
- CVE-2019-20005 https://sourceforge.net/p/ezxml/bugs/14 Issue cannot be reproduced and no patch is available upstream.
- Fixed multiple vulnerabilities in ezXML:
CVE-2019-20007, CVE-2019-20006, CVE-2019-20201, CVE-2019-20202,
CVE-2019-20199, CVE-2019-20200, CVE-2019-20198, CVE-2021-26221,
CVE-2021-26222, CVE-2021-30485, CVE-2021-31229, CVE-2021-31347,
CVE-2021-31348, CVE-2021-31598 (bsc#1191856)
Note:
- References
-
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KLIABFAMSFMQHHJZHXO7ZW2B6USV456X/
- https://bugzilla.suse.com/1191856
- https://www.suse.com/security/cve/CVE-2019-20005
- https://www.suse.com/security/cve/CVE-2019-20006
- https://www.suse.com/security/cve/CVE-2019-20007
- https://www.suse.com/security/cve/CVE-2019-20198
- https://www.suse.com/security/cve/CVE-2019-20199
- https://www.suse.com/security/cve/CVE-2019-20200
- https://www.suse.com/security/cve/CVE-2019-20201
- https://www.suse.com/security/cve/CVE-2019-20202
- https://www.suse.com/security/cve/CVE-2021-26220
- https://www.suse.com/security/cve/CVE-2021-26221
- https://www.suse.com/security/cve/CVE-2021-26222
- https://www.suse.com/security/cve/CVE-2021-30485
- https://www.suse.com/security/cve/CVE-2021-31229
- https://www.suse.com/security/cve/CVE-2021-31347
- https://www.suse.com/security/cve/CVE-2021-31348
- https://www.suse.com/security/cve/CVE-2021-31598
Affected packages
openSUSE:Leap 15.3 / netcdf_4_7_3-gnu-hpc
Package
- Name
- netcdf_4_7_3-gnu-hpc
- Purl
- pkg:rpm/opensuse/netcdf_4_7_3-gnu-hpc&distro=openSUSE%20Leap%2015.3
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed4.7.3-3.7.2
Ecosystem specific
{
"binaries": [
{
"netcdf_4_7_3-gnu-mpich-hpc-devel": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-openmpi3-hpc": "4.7.3-3.7.2",
"libnetcdf_4_7_3-gnu-hpc": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-mvapich2-hpc": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-mvapich2-hpc-devel": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-mpich-hpc": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-hpc-devel": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-hpc-devel-static": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-openmpi3-hpc-devel-static": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-openmpi2-hpc": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-openmpi3-hpc-devel": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-openmpi2-hpc-devel-static": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-hpc": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-mpich-hpc-devel-static": "4.7.3-3.7.2",
"libnetcdf_4_7_3-gnu-mpich-hpc": "4.7.3-3.7.2",
"libnetcdf_4_7_3-gnu-openmpi2-hpc": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-mvapich2-hpc-devel-static": "4.7.3-3.7.2",
"libnetcdf_4_7_3-gnu-mvapich2-hpc": "4.7.3-3.7.2",
"libnetcdf_4_7_3-gnu-openmpi3-hpc": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-openmpi2-hpc-devel": "4.7.3-3.7.2"
}
]
}
openSUSE:Leap 15.3 / netcdf_4_7_3-gnu-mpich-hpc
Package
- Name
- netcdf_4_7_3-gnu-mpich-hpc
- Purl
- pkg:rpm/opensuse/netcdf_4_7_3-gnu-mpich-hpc&distro=openSUSE%20Leap%2015.3
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed4.7.3-3.7.2
Ecosystem specific
{
"binaries": [
{
"netcdf_4_7_3-gnu-mpich-hpc-devel": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-openmpi3-hpc": "4.7.3-3.7.2",
"libnetcdf_4_7_3-gnu-hpc": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-mvapich2-hpc": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-mvapich2-hpc-devel": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-mpich-hpc": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-hpc-devel": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-hpc-devel-static": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-openmpi3-hpc-devel-static": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-openmpi2-hpc": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-openmpi3-hpc-devel": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-openmpi2-hpc-devel-static": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-hpc": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-mpich-hpc-devel-static": "4.7.3-3.7.2",
"libnetcdf_4_7_3-gnu-mpich-hpc": "4.7.3-3.7.2",
"libnetcdf_4_7_3-gnu-openmpi2-hpc": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-mvapich2-hpc-devel-static": "4.7.3-3.7.2",
"libnetcdf_4_7_3-gnu-mvapich2-hpc": "4.7.3-3.7.2",
"libnetcdf_4_7_3-gnu-openmpi3-hpc": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-openmpi2-hpc-devel": "4.7.3-3.7.2"
}
]
}
openSUSE:Leap 15.3 / netcdf_4_7_3-gnu-mvapich2-hpc
Package
- Name
- netcdf_4_7_3-gnu-mvapich2-hpc
- Purl
- pkg:rpm/opensuse/netcdf_4_7_3-gnu-mvapich2-hpc&distro=openSUSE%20Leap%2015.3
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed4.7.3-3.7.2
Ecosystem specific
{
"binaries": [
{
"netcdf_4_7_3-gnu-mpich-hpc-devel": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-openmpi3-hpc": "4.7.3-3.7.2",
"libnetcdf_4_7_3-gnu-hpc": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-mvapich2-hpc": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-mvapich2-hpc-devel": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-mpich-hpc": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-hpc-devel": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-hpc-devel-static": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-openmpi3-hpc-devel-static": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-openmpi2-hpc": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-openmpi3-hpc-devel": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-openmpi2-hpc-devel-static": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-hpc": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-mpich-hpc-devel-static": "4.7.3-3.7.2",
"libnetcdf_4_7_3-gnu-mpich-hpc": "4.7.3-3.7.2",
"libnetcdf_4_7_3-gnu-openmpi2-hpc": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-mvapich2-hpc-devel-static": "4.7.3-3.7.2",
"libnetcdf_4_7_3-gnu-mvapich2-hpc": "4.7.3-3.7.2",
"libnetcdf_4_7_3-gnu-openmpi3-hpc": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-openmpi2-hpc-devel": "4.7.3-3.7.2"
}
]
}
openSUSE:Leap 15.3 / netcdf_4_7_3-gnu-openmpi2-hpc
Package
- Name
- netcdf_4_7_3-gnu-openmpi2-hpc
- Purl
- pkg:rpm/opensuse/netcdf_4_7_3-gnu-openmpi2-hpc&distro=openSUSE%20Leap%2015.3
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed4.7.3-3.7.2
Ecosystem specific
{
"binaries": [
{
"netcdf_4_7_3-gnu-mpich-hpc-devel": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-openmpi3-hpc": "4.7.3-3.7.2",
"libnetcdf_4_7_3-gnu-hpc": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-mvapich2-hpc": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-mvapich2-hpc-devel": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-mpich-hpc": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-hpc-devel": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-hpc-devel-static": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-openmpi3-hpc-devel-static": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-openmpi2-hpc": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-openmpi3-hpc-devel": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-openmpi2-hpc-devel-static": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-hpc": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-mpich-hpc-devel-static": "4.7.3-3.7.2",
"libnetcdf_4_7_3-gnu-mpich-hpc": "4.7.3-3.7.2",
"libnetcdf_4_7_3-gnu-openmpi2-hpc": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-mvapich2-hpc-devel-static": "4.7.3-3.7.2",
"libnetcdf_4_7_3-gnu-mvapich2-hpc": "4.7.3-3.7.2",
"libnetcdf_4_7_3-gnu-openmpi3-hpc": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-openmpi2-hpc-devel": "4.7.3-3.7.2"
}
]
}
openSUSE:Leap 15.3 / netcdf_4_7_3-gnu-openmpi3-hpc
Package
- Name
- netcdf_4_7_3-gnu-openmpi3-hpc
- Purl
- pkg:rpm/opensuse/netcdf_4_7_3-gnu-openmpi3-hpc&distro=openSUSE%20Leap%2015.3
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed4.7.3-3.7.2
Ecosystem specific
{
"binaries": [
{
"netcdf_4_7_3-gnu-mpich-hpc-devel": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-openmpi3-hpc": "4.7.3-3.7.2",
"libnetcdf_4_7_3-gnu-hpc": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-mvapich2-hpc": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-mvapich2-hpc-devel": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-mpich-hpc": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-hpc-devel": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-hpc-devel-static": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-openmpi3-hpc-devel-static": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-openmpi2-hpc": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-openmpi3-hpc-devel": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-openmpi2-hpc-devel-static": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-hpc": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-mpich-hpc-devel-static": "4.7.3-3.7.2",
"libnetcdf_4_7_3-gnu-mpich-hpc": "4.7.3-3.7.2",
"libnetcdf_4_7_3-gnu-openmpi2-hpc": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-mvapich2-hpc-devel-static": "4.7.3-3.7.2",
"libnetcdf_4_7_3-gnu-mvapich2-hpc": "4.7.3-3.7.2",
"libnetcdf_4_7_3-gnu-openmpi3-hpc": "4.7.3-3.7.2",
"netcdf_4_7_3-gnu-openmpi2-hpc-devel": "4.7.3-3.7.2"
}
]
}