Security update for netcdf (important)

An update that fixes 16 vulnerabilities is now available.

Description:

This update for netcdf fixes the following issues:

• Fixed multiple vulnerabilities in ezXML: CVE-2019-20007, CVE-2019-20006,
  CVE-2019-20201, CVE-2019-20202, CVE-2019-20199, CVE-2019-20200,
  CVE-2019-20198, CVE-2021-26221, CVE-2021-26222, CVE-2021-30485,
  CVE-2021-31229, CVE-2021-31347, CVE-2021-31348, CVE-2021-31598
  (bsc#1191856) Note:
  • CVE-2021-26220 https://sourceforge.net/p/ezxml/bugs/23 not relevant
    for netcdf: code isn’t used.
  • CVE-2019-20005 https://sourceforge.net/p/ezxml/bugs/14 Issue cannot
    be reproduced and no patch is available upstream.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.3:

  zypper in -t patch openSUSE-SLE-15.3-2021-3815=1