{"id":"openSUSE-SU-2021:3815-1","summary":"Security update for netcdf","details":"This update for netcdf fixes the following issues:\n\n- Fixed multiple vulnerabilities in ezXML:\n    CVE-2019-20007, CVE-2019-20006, CVE-2019-20201, CVE-2019-20202,\n    CVE-2019-20199, CVE-2019-20200, CVE-2019-20198, CVE-2021-26221,\n    CVE-2021-26222, CVE-2021-30485, CVE-2021-31229, CVE-2021-31347,\n    CVE-2021-31348, CVE-2021-31598 (bsc#1191856)\n   Note:\n   * CVE-2021-26220 https://sourceforge.net/p/ezxml/bugs/23\n     not relevant for netcdf: code isn't used.\n   * CVE-2019-20005 https://sourceforge.net/p/ezxml/bugs/14\n     Issue cannot be reproduced and no patch is available upstream.\n","modified":"2026-03-11T07:33:20.327503Z","published":"2021-11-30T10:47:40Z","related":["CVE-2019-20005","CVE-2019-20006","CVE-2019-20007","CVE-2019-20198","CVE-2019-20199","CVE-2019-20200","CVE-2019-20201","CVE-2019-20202","CVE-2021-26220","CVE-2021-26221","CVE-2021-26222","CVE-2021-30485","CVE-2021-31229","CVE-2021-31347","CVE-2021-31348","CVE-2021-31598"],"upstream":["CVE-2019-20005","CVE-2019-20006","CVE-2019-20007","CVE-2019-20198","CVE-2019-20199","CVE-2019-20200","CVE-2019-20201","CVE-2019-20202","CVE-2021-26220","CVE-2021-26221","CVE-2021-26222","CVE-2021-30485","CVE-2021-31229","CVE-2021-31347","CVE-2021-31348","CVE-2021-31598"],"references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BNULBT7RBXXDXTGAFBIJZ4GX5T4OWM7O/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1191856"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-20005"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-20006"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-20007"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-20198"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-20199"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-20200"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-20201"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-20202"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-26220"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-26221"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-26222"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-30485"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-31229"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-31347"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-31348"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-31598"}],"affected":[{"package":{"name":"netcdf_4_6_1-gnu-hpc","ecosystem":"openSUSE:Leap 15.3","purl":"pkg:rpm/opensuse/netcdf_4_6_1-gnu-hpc&distro=openSUSE%20Leap%2015.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-10.7.2"}]}],"ecosystem_specific":{"binaries":[{"libnetcdf_4_6_1-gnu-mvapich2-hpc":"4.6.1-10.7.2","libnetcdf_4_6_1-gnu-openmpi1-hpc":"4.6.1-10.7.2","netcdf_4_6_1-gnu-mpich-hpc-devel-static":"4.6.1-10.7.2","netcdf_4_6_1-gnu-mpich-hpc-devel":"4.6.1-10.7.2","netcdf_4_6_1-gnu-mpich-hpc":"4.6.1-10.7.2","netcdf_4_6_1-gnu-openmpi2-hpc-devel-static":"4.6.1-10.7.2","libnetcdf_4_6_1-gnu-mpich-hpc":"4.6.1-10.7.2","netcdf-gnu-openmpi1-hpc":"4.6.1-10.7.2","netcdf_4_6_1-gnu-mvapich2-hpc":"4.6.1-10.7.2","libnetcdf-gnu-openmpi1-hpc":"4.6.1-10.7.2","libnetcdf_4_6_1-gnu-hpc":"4.6.1-10.7.2","libnetcdf_4_6_1-gnu-openmpi2-hpc":"4.6.1-10.7.2","netcdf-gnu-openmpi1-hpc-devel":"4.6.1-10.7.2","netcdf_4_6_1-gnu-hpc-devel-static":"4.6.1-10.7.2","netcdf_4_6_1-gnu-hpc-devel":"4.6.1-10.7.2","netcdf_4_6_1-gnu-hpc":"4.6.1-10.7.2","netcdf_4_6_1-gnu-mvapich2-hpc-devel-static":"4.6.1-10.7.2","netcdf_4_6_1-gnu-hpc-devel-data":"4.6.1-10.7.2","netcdf_4_6_1-gnu-mvapich2-hpc-devel":"4.6.1-10.7.2","netcdf_4_6_1-gnu-openmpi1-hpc-devel-static":"4.6.1-10.7.2","netcdf_4_6_1-gnu-openmpi1-hpc-devel":"4.6.1-10.7.2","netcdf_4_6_1-gnu-openmpi1-hpc":"4.6.1-10.7.2","netcdf_4_6_1-gnu-openmpi2-hpc-devel":"4.6.1-10.7.2","netcdf_4_6_1-gnu-openmpi2-hpc":"4.6.1-10.7.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2021:3815-1.json"}},{"package":{"name":"netcdf_4_6_1-gnu-mpich-hpc","ecosystem":"openSUSE:Leap 15.3","purl":"pkg:rpm/opensuse/netcdf_4_6_1-gnu-mpich-hpc&distro=openSUSE%20Leap%2015.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-10.7.2"}]}],"ecosystem_specific":{"binaries":[{"netcdf_4_6_1-gnu-openmpi1-hpc-devel-static":"4.6.1-10.7.2","netcdf_4_6_1-gnu-openmpi1-hpc-devel":"4.6.1-10.7.2","netcdf_4_6_1-gnu-openmpi1-hpc":"4.6.1-10.7.2","netcdf_4_6_1-gnu-openmpi2-hpc-devel-static":"4.6.1-10.7.2","netcdf_4_6_1-gnu-openmpi2-hpc-devel":"4.6.1-10.7.2","libnetcdf_4_6_1-gnu-mpich-hpc":"4.6.1-10.7.2","netcdf-gnu-openmpi1-hpc":"4.6.1-10.7.2","libnetcdf_4_6_1-gnu-hpc":"4.6.1-10.7.2","libnetcdf_4_6_1-gnu-openmpi1-hpc":"4.6.1-10.7.2","netcdf_4_6_1-gnu-mpich-hpc":"4.6.1-10.7.2","netcdf_4_6_1-gnu-mvapich2-hpc-devel-static":"4.6.1-10.7.2","netcdf_4_6_1-gnu-mvapich2-hpc":"4.6.1-10.7.2","netcdf_4_6_1-gnu-openmpi2-hpc":"4.6.1-10.7.2","netcdf_4_6_1-gnu-mpich-hpc-devel-static":"4.6.1-10.7.2","netcdf_4_6_1-gnu-mpich-hpc-devel":"4.6.1-10.7.2","libnetcdf_4_6_1-gnu-mvapich2-hpc":"4.6.1-10.7.2","libnetcdf_4_6_1-gnu-openmpi2-hpc":"4.6.1-10.7.2","netcdf-gnu-openmpi1-hpc-devel":"4.6.1-10.7.2","netcdf_4_6_1-gnu-hpc-devel-data":"4.6.1-10.7.2","netcdf_4_6_1-gnu-hpc-devel":"4.6.1-10.7.2","netcdf_4_6_1-gnu-hpc":"4.6.1-10.7.2","libnetcdf-gnu-openmpi1-hpc":"4.6.1-10.7.2","netcdf_4_6_1-gnu-hpc-devel-static":"4.6.1-10.7.2","netcdf_4_6_1-gnu-mvapich2-hpc-devel":"4.6.1-10.7.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2021:3815-1.json"}},{"package":{"name":"netcdf_4_6_1-gnu-mvapich2-hpc","ecosystem":"openSUSE:Leap 15.3","purl":"pkg:rpm/opensuse/netcdf_4_6_1-gnu-mvapich2-hpc&distro=openSUSE%20Leap%2015.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-10.7.2"}]}],"ecosystem_specific":{"binaries":[{"libnetcdf_4_6_1-gnu-hpc":"4.6.1-10.7.2","libnetcdf_4_6_1-gnu-mpich-hpc":"4.6.1-10.7.2","libnetcdf_4_6_1-gnu-mvapich2-hpc":"4.6.1-10.7.2","netcdf-gnu-openmpi1-hpc-devel":"4.6.1-10.7.2","netcdf_4_6_1-gnu-hpc-devel-data":"4.6.1-10.7.2","netcdf_4_6_1-gnu-mpich-hpc-devel-static":"4.6.1-10.7.2","netcdf_4_6_1-gnu-mpich-hpc-devel":"4.6.1-10.7.2","netcdf_4_6_1-gnu-mvapich2-hpc-devel":"4.6.1-10.7.2","netcdf-gnu-openmpi1-hpc":"4.6.1-10.7.2","netcdf_4_6_1-gnu-openmpi1-hpc-devel-static":"4.6.1-10.7.2","netcdf_4_6_1-gnu-openmpi2-hpc-devel":"4.6.1-10.7.2","netcdf_4_6_1-gnu-openmpi2-hpc":"4.6.1-10.7.2","libnetcdf-gnu-openmpi1-hpc":"4.6.1-10.7.2","netcdf_4_6_1-gnu-hpc-devel":"4.6.1-10.7.2","netcdf_4_6_1-gnu-hpc":"4.6.1-10.7.2","netcdf_4_6_1-gnu-mpich-hpc":"4.6.1-10.7.2","netcdf_4_6_1-gnu-openmpi1-hpc-devel":"4.6.1-10.7.2","netcdf_4_6_1-gnu-openmpi1-hpc":"4.6.1-10.7.2","netcdf_4_6_1-gnu-openmpi2-hpc-devel-static":"4.6.1-10.7.2","libnetcdf_4_6_1-gnu-openmpi1-hpc":"4.6.1-10.7.2","libnetcdf_4_6_1-gnu-openmpi2-hpc":"4.6.1-10.7.2","netcdf_4_6_1-gnu-hpc-devel-static":"4.6.1-10.7.2","netcdf_4_6_1-gnu-mvapich2-hpc-devel-static":"4.6.1-10.7.2","netcdf_4_6_1-gnu-mvapich2-hpc":"4.6.1-10.7.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2021:3815-1.json"}},{"package":{"name":"netcdf_4_6_1-gnu-openmpi1-hpc","ecosystem":"openSUSE:Leap 15.3","purl":"pkg:rpm/opensuse/netcdf_4_6_1-gnu-openmpi1-hpc&distro=openSUSE%20Leap%2015.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-10.7.2"}]}],"ecosystem_specific":{"binaries":[{"netcdf_4_6_1-gnu-openmpi2-hpc":"4.6.1-10.7.2","libnetcdf_4_6_1-gnu-mpich-hpc":"4.6.1-10.7.2","netcdf_4_6_1-gnu-hpc-devel":"4.6.1-10.7.2","netcdf_4_6_1-gnu-mpich-hpc-devel-static":"4.6.1-10.7.2","netcdf_4_6_1-gnu-mvapich2-hpc-devel-static":"4.6.1-10.7.2","netcdf_4_6_1-gnu-mvapich2-hpc-devel":"4.6.1-10.7.2","netcdf_4_6_1-gnu-openmpi2-hpc-devel":"4.6.1-10.7.2","libnetcdf_4_6_1-gnu-hpc":"4.6.1-10.7.2","netcdf_4_6_1-gnu-hpc-devel-data":"4.6.1-10.7.2","netcdf_4_6_1-gnu-hpc":"4.6.1-10.7.2","netcdf_4_6_1-gnu-mpich-hpc-devel":"4.6.1-10.7.2","netcdf_4_6_1-gnu-mvapich2-hpc":"4.6.1-10.7.2","libnetcdf-gnu-openmpi1-hpc":"4.6.1-10.7.2","libnetcdf_4_6_1-gnu-openmpi1-hpc":"4.6.1-10.7.2","netcdf_4_6_1-gnu-openmpi1-hpc-devel-static":"4.6.1-10.7.2","netcdf_4_6_1-gnu-openmpi1-hpc-devel":"4.6.1-10.7.2","netcdf_4_6_1-gnu-openmpi1-hpc":"4.6.1-10.7.2","libnetcdf_4_6_1-gnu-mvapich2-hpc":"4.6.1-10.7.2","libnetcdf_4_6_1-gnu-openmpi2-hpc":"4.6.1-10.7.2","netcdf-gnu-openmpi1-hpc-devel":"4.6.1-10.7.2","netcdf-gnu-openmpi1-hpc":"4.6.1-10.7.2","netcdf_4_6_1-gnu-hpc-devel-static":"4.6.1-10.7.2","netcdf_4_6_1-gnu-mpich-hpc":"4.6.1-10.7.2","netcdf_4_6_1-gnu-openmpi2-hpc-devel-static":"4.6.1-10.7.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2021:3815-1.json"}},{"package":{"name":"netcdf_4_6_1-gnu-openmpi2-hpc","ecosystem":"openSUSE:Leap 15.3","purl":"pkg:rpm/opensuse/netcdf_4_6_1-gnu-openmpi2-hpc&distro=openSUSE%20Leap%2015.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.1-10.7.2"}]}],"ecosystem_specific":{"binaries":[{"libnetcdf-gnu-openmpi1-hpc":"4.6.1-10.7.2","netcdf_4_6_1-gnu-hpc-devel-data":"4.6.1-10.7.2","netcdf_4_6_1-gnu-hpc-devel-static":"4.6.1-10.7.2","netcdf_4_6_1-gnu-hpc-devel":"4.6.1-10.7.2","netcdf_4_6_1-gnu-mpich-hpc":"4.6.1-10.7.2","netcdf_4_6_1-gnu-mvapich2-hpc-devel":"4.6.1-10.7.2","netcdf_4_6_1-gnu-openmpi2-hpc":"4.6.1-10.7.2","libnetcdf_4_6_1-gnu-hpc":"4.6.1-10.7.2","libnetcdf_4_6_1-gnu-mpich-hpc":"4.6.1-10.7.2","libnetcdf_4_6_1-gnu-openmpi2-hpc":"4.6.1-10.7.2","netcdf-gnu-openmpi1-hpc":"4.6.1-10.7.2","netcdf_4_6_1-gnu-mpich-hpc-devel-static":"4.6.1-10.7.2","netcdf_4_6_1-gnu-openmpi2-hpc-devel":"4.6.1-10.7.2","libnetcdf_4_6_1-gnu-mvapich2-hpc":"4.6.1-10.7.2","libnetcdf_4_6_1-gnu-openmpi1-hpc":"4.6.1-10.7.2","netcdf-gnu-openmpi1-hpc-devel":"4.6.1-10.7.2","netcdf_4_6_1-gnu-mpich-hpc-devel":"4.6.1-10.7.2","netcdf_4_6_1-gnu-mvapich2-hpc":"4.6.1-10.7.2","netcdf_4_6_1-gnu-openmpi1-hpc-devel-static":"4.6.1-10.7.2","netcdf_4_6_1-gnu-openmpi1-hpc":"4.6.1-10.7.2","netcdf_4_6_1-gnu-openmpi2-hpc-devel-static":"4.6.1-10.7.2","netcdf_4_6_1-gnu-hpc":"4.6.1-10.7.2","netcdf_4_6_1-gnu-mvapich2-hpc-devel-static":"4.6.1-10.7.2","netcdf_4_6_1-gnu-openmpi1-hpc-devel":"4.6.1-10.7.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2021:3815-1.json"}}],"schema_version":"1.7.5"}