Security update for hawk2 (important)

An update that solves two vulnerabilities and has one
errata is now available.

Description:

This update for hawk2 fixes the following issues:

• Update to version 2.6.3:
  • Remove hawk_invoke and use capture3 instead of runas
    (bsc#1179999)(CVE-2020-35459)
  • Remove unnecessary chmod (bsc#1182166)(CVE-2021-25314)
  • Sanitize filename to contains whitelist of alphanumeric (bsc#1182165)

This update was imported from the SUSE:SLE-15:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.2:

  zypper in -t patch openSUSE-2021-473=1