Security update for lz4 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:1647-1 Final 1 1 2021-05-19T11:59:45Z current 2021-05-19T11:59:45Z 2021-05-19T11:59:45Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for lz4 This update for lz4 fixes the following issues: - CVE-2021-3520: Fixed memory corruption due to an integer overflow bug caused by memmove argument (bsc#1185438). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container caasp/v4/389-ds:1.4.2-2021-1647,Container caasp/v4/busybox:1.34.1-2021-1647,Container caasp/v4/caasp-dex:2.16.0-2021-1647,Container caasp/v4/cert-exporter:2.3.0-2021-1647,Container caasp/v4/cilium-etcd-operator:2.0.5-2021-1647,Container caasp/v4/cilium-init:1.5.3-2021-1647,Container caasp/v4/cilium-operator:1.6.6-2021-1647,Container caasp/v4/cilium:1.6.6-2021-1647,Container caasp/v4/cloud-provider-openstack:1.15.0-2021-1647,Container caasp/v4/configmap-reload:0.3.0-2021-1647,Container caasp/v4/coredns:1.6.7-2021-1647,Container caasp/v4/curl:7.60.0-2021-1647,Container caasp/v4/etcd:3.4.13-2021-1647,Container caasp/v4/gangway:3.1.0-2021-1647,Container caasp/v4/grafana:7.5.12-2021-1647,Container caasp/v4/helm-tiller:2.16.12-2021-1647,Container caasp/v4/hyperkube:v1.17.17-2021-1647,Container caasp/v4/k8s-sidecar:0.1.75-2021-1647,Container caasp/v4/kube-state-metrics:1.9.3-2021-1647,Container caasp/v4/kubernetes-client:1.17.17-2021-1647,Container caasp/v4/kucero:1.3.0-2021-1647,Container caasp/v4/kured:1.3.0-2021-1647,Container caasp/v4/metrics-server:0.3.6-2021-1647,Container caasp/v4/prometheus-alertmanager:0.16.2-2021-1647,Container caasp/v4/prometheus-node-exporter:1.1.2-2021-1647,Container caasp/v4/prometheus-pushgateway:0.6.0-2021-1647,Container caasp/v4/prometheus-server:2.7.1-2021-1647,Container caasp/v4/rsyslog:8.39.0-2021-1647,Container caasp/v4/skuba-tooling:0.1.0-2021-1647,Container caasp/v4/test-update:beta-2021-1647,Container caasp/v4/velero-plugin-for-aws:1.0.1-2021-1647,Container caasp/v4/velero-plugin-for-gcp:1.0.1-2021-1647,Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1-2021-1647,Container caasp/v4/velero-restic-restore-helper:1.3.1-2021-1647,Container caasp/v4/velero:1.3.1-2021-1647,Container ses/6/cephcsi/cephcsi:latest-2021-1647,Container ses/6/rook/ceph:latest-2021-1647,Container ses/7/ceph/grafana:latest-2021-1647,Container ses/7/ceph/prometheus-alertmanager:latest-2021-1647,Container ses/7/ceph/prometheus-node-exporter:latest-2021-1647,Container ses/7/ceph/prometheus-server:latest-2021-1647,Container ses/7/cephcsi/cephcsi:latest-2021-1647,Container ses/7/cephcsi/csi-attacher:v3.3.0-2021-1647,Container ses/7/cephcsi/csi-livenessprobe:v1.1.0-2021-1647,Container ses/7/cephcsi/csi-node-driver-registrar:v2.3.0-2021-1647,Container ses/7/cephcsi/csi-provisioner:v3.0.0-2021-1647,Container ses/7/cephcsi/csi-resizer:v1.3.0-2021-1647,Container ses/7/cephcsi/csi-snapshotter:v2.1.0-2021-1647,Container ses/7/cephcsi/csi-snapshotter:v4.2.0-2021-1647,Container ses/7/prometheus-webhook-snmp:latest-2021-1647,Container ses/7/rook/ceph:latest-2021-1647,Container suse/sle15:15.0-2021-1647,Container suse/sle15:15.1-2021-1647,Container suse/sles/15.2/virt-api:0.38.1-2021-1647,Container suse/sles/15.2/virt-controller:0.38.1-2021-1647,Container suse/sles/15.2/virt-handler:0.38.1-2021-1647,Container suse/sles/15.2/virt-launcher:0.38.1-2021-1647,Container suse/sles/15.2/virt-operator:0.38.1-2021-1647,SUSE-2021-1647,SUSE-SLE-Module-Basesystem-15-SP2-2021-1647,SUSE-SLE-Product-HPC-15-2021-1647,SUSE-SLE-Product-HPC-15-SP1-ESPOS-2021-1647,SUSE-SLE-Product-HPC-15-SP1-LTSS-2021-1647,SUSE-SLE-Product-SLES-15-2021-1647,SUSE-SLE-Product-SLES-15-SP1-BCL-2021-1647,SUSE-SLE-Product-SLES-15-SP1-LTSS-2021-1647,SUSE-SLE-Product-SLES_SAP-15-2021-1647,SUSE-SLE-Product-SLES_SAP-15-SP1-2021-1647,SUSE-SLE-Product-SUSE-Manager-Proxy-4.0-2021-1647,SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.0-2021-1647,SUSE-SLE-Product-SUSE-Manager-Server-4.0-2021-1647,SUSE-SUSE-MicroOS-5.0-2021-1647,SUSE-Storage-6-2021-1647 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20211647-1/ Link for SUSE-SU-2021:1647-1 https://lists.suse.com/pipermail/sle-updates/2021-May/018981.html E-Mail link for SUSE-SU-2021:1647-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1185438 SUSE Bug 1185438 https://www.suse.com/security/cve/CVE-2021-3520/ SUSE CVE CVE-2021-3520 page Container caasp/v4/389-ds:1.4.2 Container caasp/v4/busybox:1.34.1 Container caasp/v4/caasp-dex:2.16.0 Container caasp/v4/cert-exporter:2.3.0 Container caasp/v4/cilium-etcd-operator:2.0.5 Container caasp/v4/cilium-init:1.5.3 Container caasp/v4/cilium-operator:1.6.6 Container caasp/v4/cilium:1.6.6 Container caasp/v4/cloud-provider-openstack:1.15.0 Container caasp/v4/configmap-reload:0.3.0 Container caasp/v4/coredns:1.6.7 Container caasp/v4/curl:7.60.0 Container caasp/v4/etcd:3.4.13 Container caasp/v4/gangway:3.1.0 Container caasp/v4/grafana:7.5.12 Container caasp/v4/helm-tiller:2.16.12 Container caasp/v4/hyperkube:v1.17.17 Container caasp/v4/k8s-sidecar:0.1.75 Container caasp/v4/kube-state-metrics:1.9.3 Container caasp/v4/kubernetes-client:1.17.17 Container caasp/v4/kucero:1.3.0 Container caasp/v4/kured:1.3.0 Container caasp/v4/metrics-server:0.3.6 Container caasp/v4/prometheus-alertmanager:0.16.2 Container caasp/v4/prometheus-node-exporter:1.1.2 Container caasp/v4/prometheus-pushgateway:0.6.0 Container caasp/v4/prometheus-server:2.7.1 Container caasp/v4/rsyslog:8.39.0 Container caasp/v4/skuba-tooling:0.1.0 Container caasp/v4/test-update:beta Container caasp/v4/velero-plugin-for-aws:1.0.1 Container caasp/v4/velero-plugin-for-gcp:1.0.1 Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1 Container caasp/v4/velero-restic-restore-helper:1.3.1 Container caasp/v4/velero:1.3.1 Container ses/6/cephcsi/cephcsi:latest Container ses/6/rook/ceph:latest Container ses/7/ceph/grafana:latest Container ses/7/ceph/prometheus-alertmanager:latest Container ses/7/ceph/prometheus-node-exporter:latest Container ses/7/ceph/prometheus-server:latest Container ses/7/cephcsi/cephcsi:latest Container ses/7/cephcsi/csi-attacher:v3.3.0 Container ses/7/cephcsi/csi-livenessprobe:v1.1.0 Container ses/7/cephcsi/csi-node-driver-registrar:v2.3.0 Container ses/7/cephcsi/csi-provisioner:v3.0.0 Container ses/7/cephcsi/csi-resizer:v1.3.0 Container ses/7/cephcsi/csi-snapshotter:v2.1.0 Container ses/7/cephcsi/csi-snapshotter:v4.2.0 Container ses/7/prometheus-webhook-snmp:latest Container ses/7/rook/ceph:latest Container suse/sle15:15.0 Container suse/sle15:15.1 Container suse/sles/15.2/virt-api:0.38.1 Container suse/sles/15.2/virt-controller:0.38.1 Container suse/sles/15.2/virt-handler:0.38.1 Container suse/sles/15.2/virt-launcher:0.38.1 Container suse/sles/15.2/virt-operator:0.38.1 SUSE Enterprise Storage 6 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Micro 5.0 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Server 15 SP1-BCL SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Manager Proxy 4.0 SUSE Manager Retail Branch Server 4.0 SUSE Manager Server 4.0 liblz4-1-1.8.0-3.8.1 liblz4-1-32bit-1.8.0-3.8.1 liblz4-1-64bit-1.8.0-3.8.1 liblz4-devel-1.8.0-3.8.1 lz4-1.8.0-3.8.1 liblz4-1-1.8.0-3.8.1 as a component of Container caasp/v4/389-ds:1.4.2 liblz4-1-1.8.0-3.8.1 as a component of Container caasp/v4/busybox:1.34.1 liblz4-1-1.8.0-3.8.1 as a component of Container caasp/v4/caasp-dex:2.16.0 liblz4-1-1.8.0-3.8.1 as a component of Container caasp/v4/cert-exporter:2.3.0 liblz4-1-1.8.0-3.8.1 as a component of Container caasp/v4/cilium-etcd-operator:2.0.5 liblz4-1-1.8.0-3.8.1 as a component of Container caasp/v4/cilium-init:1.5.3 liblz4-1-1.8.0-3.8.1 as a component of Container caasp/v4/cilium-operator:1.6.6 liblz4-1-1.8.0-3.8.1 as a component of Container caasp/v4/cilium:1.6.6 liblz4-1-1.8.0-3.8.1 as a component of Container caasp/v4/cloud-provider-openstack:1.15.0 liblz4-1-1.8.0-3.8.1 as a component of Container caasp/v4/configmap-reload:0.3.0 liblz4-1-1.8.0-3.8.1 as a component of Container caasp/v4/coredns:1.6.7 liblz4-1-1.8.0-3.8.1 as a component of Container caasp/v4/curl:7.60.0 liblz4-1-1.8.0-3.8.1 as a component of Container caasp/v4/etcd:3.4.13 liblz4-1-1.8.0-3.8.1 as a component of Container caasp/v4/gangway:3.1.0 liblz4-1-1.8.0-3.8.1 as a component of Container caasp/v4/grafana:7.5.12 liblz4-1-1.8.0-3.8.1 as a component of Container caasp/v4/helm-tiller:2.16.12 liblz4-1-1.8.0-3.8.1 as a component of Container caasp/v4/hyperkube:v1.17.17 liblz4-1-1.8.0-3.8.1 as a component of Container caasp/v4/k8s-sidecar:0.1.75 liblz4-1-1.8.0-3.8.1 as a component of Container caasp/v4/kube-state-metrics:1.9.3 liblz4-1-1.8.0-3.8.1 as a component of Container caasp/v4/kubernetes-client:1.17.17 liblz4-1-1.8.0-3.8.1 as a component of Container caasp/v4/kucero:1.3.0 liblz4-1-1.8.0-3.8.1 as a component of Container caasp/v4/kured:1.3.0 liblz4-1-1.8.0-3.8.1 as a component of Container caasp/v4/metrics-server:0.3.6 liblz4-1-1.8.0-3.8.1 as a component of Container caasp/v4/prometheus-alertmanager:0.16.2 liblz4-1-1.8.0-3.8.1 as a component of Container caasp/v4/prometheus-node-exporter:1.1.2 liblz4-1-1.8.0-3.8.1 as a component of Container caasp/v4/prometheus-pushgateway:0.6.0 liblz4-1-1.8.0-3.8.1 as a component of Container caasp/v4/prometheus-server:2.7.1 liblz4-1-1.8.0-3.8.1 as a component of Container caasp/v4/rsyslog:8.39.0 liblz4-1-1.8.0-3.8.1 as a component of Container caasp/v4/skuba-tooling:0.1.0 liblz4-1-1.8.0-3.8.1 as a component of Container caasp/v4/test-update:beta liblz4-1-1.8.0-3.8.1 as a component of Container caasp/v4/velero-plugin-for-aws:1.0.1 liblz4-1-1.8.0-3.8.1 as a component of Container caasp/v4/velero-plugin-for-gcp:1.0.1 liblz4-1-1.8.0-3.8.1 as a component of Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1 liblz4-1-1.8.0-3.8.1 as a component of Container caasp/v4/velero-restic-restore-helper:1.3.1 liblz4-1-1.8.0-3.8.1 as a component of Container caasp/v4/velero:1.3.1 liblz4-1-1.8.0-3.8.1 as a component of Container ses/6/cephcsi/cephcsi:latest liblz4-1-1.8.0-3.8.1 as a component of Container ses/6/rook/ceph:latest liblz4-1-1.8.0-3.8.1 as a component of Container ses/7/ceph/grafana:latest liblz4-1-1.8.0-3.8.1 as a component of Container ses/7/ceph/prometheus-alertmanager:latest liblz4-1-1.8.0-3.8.1 as a component of Container ses/7/ceph/prometheus-node-exporter:latest liblz4-1-1.8.0-3.8.1 as a component of Container ses/7/ceph/prometheus-server:latest liblz4-1-1.8.0-3.8.1 as a component of Container ses/7/cephcsi/cephcsi:latest liblz4-1-1.8.0-3.8.1 as a component of Container ses/7/cephcsi/csi-attacher:v3.3.0 liblz4-1-1.8.0-3.8.1 as a component of Container ses/7/cephcsi/csi-livenessprobe:v1.1.0 liblz4-1-1.8.0-3.8.1 as a component of Container ses/7/cephcsi/csi-node-driver-registrar:v2.3.0 liblz4-1-1.8.0-3.8.1 as a component of Container ses/7/cephcsi/csi-provisioner:v3.0.0 liblz4-1-1.8.0-3.8.1 as a component of Container ses/7/cephcsi/csi-resizer:v1.3.0 liblz4-1-1.8.0-3.8.1 as a component of Container ses/7/cephcsi/csi-snapshotter:v2.1.0 liblz4-1-1.8.0-3.8.1 as a component of Container ses/7/cephcsi/csi-snapshotter:v4.2.0 liblz4-1-1.8.0-3.8.1 as a component of Container ses/7/prometheus-webhook-snmp:latest liblz4-1-1.8.0-3.8.1 as a component of Container ses/7/rook/ceph:latest liblz4-1-1.8.0-3.8.1 as a component of Container suse/sle15:15.0 liblz4-1-1.8.0-3.8.1 as a component of Container suse/sle15:15.1 liblz4-1-1.8.0-3.8.1 as a component of Container suse/sles/15.2/virt-api:0.38.1 liblz4-1-1.8.0-3.8.1 as a component of Container suse/sles/15.2/virt-controller:0.38.1 liblz4-1-1.8.0-3.8.1 as a component of Container suse/sles/15.2/virt-handler:0.38.1 liblz4-1-1.8.0-3.8.1 as a component of Container suse/sles/15.2/virt-launcher:0.38.1 liblz4-1-1.8.0-3.8.1 as a component of Container suse/sles/15.2/virt-operator:0.38.1 liblz4-1-1.8.0-3.8.1 as a component of SUSE Enterprise Storage 6 liblz4-1-32bit-1.8.0-3.8.1 as a component of SUSE Enterprise Storage 6 liblz4-devel-1.8.0-3.8.1 as a component of SUSE Enterprise Storage 6 lz4-1.8.0-3.8.1 as a component of SUSE Enterprise Storage 6 liblz4-1-1.8.0-3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS liblz4-1-32bit-1.8.0-3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS liblz4-devel-1.8.0-3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS lz4-1.8.0-3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS liblz4-1-1.8.0-3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS liblz4-1-32bit-1.8.0-3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS liblz4-devel-1.8.0-3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS lz4-1.8.0-3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS liblz4-1-1.8.0-3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS liblz4-1-32bit-1.8.0-3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS liblz4-devel-1.8.0-3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS lz4-1.8.0-3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS liblz4-1-1.8.0-3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS liblz4-1-32bit-1.8.0-3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS liblz4-devel-1.8.0-3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS lz4-1.8.0-3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS liblz4-1-1.8.0-3.8.1 as a component of SUSE Linux Enterprise Micro 5.0 liblz4-1-1.8.0-3.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 liblz4-1-32bit-1.8.0-3.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 liblz4-devel-1.8.0-3.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 lz4-1.8.0-3.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 liblz4-1-1.8.0-3.8.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL liblz4-1-32bit-1.8.0-3.8.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL liblz4-devel-1.8.0-3.8.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL lz4-1.8.0-3.8.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL liblz4-1-1.8.0-3.8.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS liblz4-1-32bit-1.8.0-3.8.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS liblz4-devel-1.8.0-3.8.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS lz4-1.8.0-3.8.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS liblz4-1-1.8.0-3.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS liblz4-1-32bit-1.8.0-3.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS liblz4-devel-1.8.0-3.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS lz4-1.8.0-3.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS liblz4-1-1.8.0-3.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 liblz4-1-32bit-1.8.0-3.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 liblz4-devel-1.8.0-3.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 lz4-1.8.0-3.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 liblz4-1-1.8.0-3.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 liblz4-1-32bit-1.8.0-3.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 liblz4-devel-1.8.0-3.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 lz4-1.8.0-3.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 liblz4-1-1.8.0-3.8.1 as a component of SUSE Manager Proxy 4.0 liblz4-1-32bit-1.8.0-3.8.1 as a component of SUSE Manager Proxy 4.0 liblz4-devel-1.8.0-3.8.1 as a component of SUSE Manager Proxy 4.0 lz4-1.8.0-3.8.1 as a component of SUSE Manager Proxy 4.0 liblz4-1-1.8.0-3.8.1 as a component of SUSE Manager Retail Branch Server 4.0 liblz4-1-32bit-1.8.0-3.8.1 as a component of SUSE Manager Retail Branch Server 4.0 liblz4-devel-1.8.0-3.8.1 as a component of SUSE Manager Retail Branch Server 4.0 lz4-1.8.0-3.8.1 as a component of SUSE Manager Retail Branch Server 4.0 liblz4-1-1.8.0-3.8.1 as a component of SUSE Manager Server 4.0 liblz4-1-32bit-1.8.0-3.8.1 as a component of SUSE Manager Server 4.0 liblz4-devel-1.8.0-3.8.1 as a component of SUSE Manager Server 4.0 lz4-1.8.0-3.8.1 as a component of SUSE Manager Server 4.0 There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling of memmove() on a negative size argument, causing an out-of-bounds write and/or a crash. The greatest impact of this flaw is to availability, with some potential impact to confidentiality and integrity as well. CVE-2021-3520 Container caasp/v4/389-ds:1.4.2:liblz4-1-1.8.0-3.8.1 Container caasp/v4/busybox:1.34.1:liblz4-1-1.8.0-3.8.1 Container caasp/v4/caasp-dex:2.16.0:liblz4-1-1.8.0-3.8.1 Container caasp/v4/cert-exporter:2.3.0:liblz4-1-1.8.0-3.8.1 Container caasp/v4/cilium-etcd-operator:2.0.5:liblz4-1-1.8.0-3.8.1 Container caasp/v4/cilium-init:1.5.3:liblz4-1-1.8.0-3.8.1 Container caasp/v4/cilium-operator:1.6.6:liblz4-1-1.8.0-3.8.1 Container caasp/v4/cilium:1.6.6:liblz4-1-1.8.0-3.8.1 Container caasp/v4/cloud-provider-openstack:1.15.0:liblz4-1-1.8.0-3.8.1 Container caasp/v4/configmap-reload:0.3.0:liblz4-1-1.8.0-3.8.1 Container caasp/v4/coredns:1.6.7:liblz4-1-1.8.0-3.8.1 Container caasp/v4/curl:7.60.0:liblz4-1-1.8.0-3.8.1 Container caasp/v4/etcd:3.4.13:liblz4-1-1.8.0-3.8.1 Container caasp/v4/gangway:3.1.0:liblz4-1-1.8.0-3.8.1 Container caasp/v4/grafana:7.5.12:liblz4-1-1.8.0-3.8.1 Container caasp/v4/helm-tiller:2.16.12:liblz4-1-1.8.0-3.8.1 Container caasp/v4/hyperkube:v1.17.17:liblz4-1-1.8.0-3.8.1 Container caasp/v4/k8s-sidecar:0.1.75:liblz4-1-1.8.0-3.8.1 Container caasp/v4/kube-state-metrics:1.9.3:liblz4-1-1.8.0-3.8.1 Container caasp/v4/kubernetes-client:1.17.17:liblz4-1-1.8.0-3.8.1 Container caasp/v4/kucero:1.3.0:liblz4-1-1.8.0-3.8.1 Container caasp/v4/kured:1.3.0:liblz4-1-1.8.0-3.8.1 Container caasp/v4/metrics-server:0.3.6:liblz4-1-1.8.0-3.8.1 Container caasp/v4/prometheus-alertmanager:0.16.2:liblz4-1-1.8.0-3.8.1 Container caasp/v4/prometheus-node-exporter:1.1.2:liblz4-1-1.8.0-3.8.1 Container caasp/v4/prometheus-pushgateway:0.6.0:liblz4-1-1.8.0-3.8.1 Container caasp/v4/prometheus-server:2.7.1:liblz4-1-1.8.0-3.8.1 Container caasp/v4/rsyslog:8.39.0:liblz4-1-1.8.0-3.8.1 Container caasp/v4/skuba-tooling:0.1.0:liblz4-1-1.8.0-3.8.1 Container caasp/v4/test-update:beta:liblz4-1-1.8.0-3.8.1 Container caasp/v4/velero-plugin-for-aws:1.0.1:liblz4-1-1.8.0-3.8.1 Container caasp/v4/velero-plugin-for-gcp:1.0.1:liblz4-1-1.8.0-3.8.1 Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1:liblz4-1-1.8.0-3.8.1 Container caasp/v4/velero-restic-restore-helper:1.3.1:liblz4-1-1.8.0-3.8.1 Container caasp/v4/velero:1.3.1:liblz4-1-1.8.0-3.8.1 Container ses/6/cephcsi/cephcsi:latest:liblz4-1-1.8.0-3.8.1 Container ses/6/rook/ceph:latest:liblz4-1-1.8.0-3.8.1 Container ses/7/ceph/grafana:latest:liblz4-1-1.8.0-3.8.1 Container ses/7/ceph/prometheus-alertmanager:latest:liblz4-1-1.8.0-3.8.1 Container ses/7/ceph/prometheus-node-exporter:latest:liblz4-1-1.8.0-3.8.1 Container ses/7/ceph/prometheus-server:latest:liblz4-1-1.8.0-3.8.1 Container ses/7/cephcsi/cephcsi:latest:liblz4-1-1.8.0-3.8.1 Container ses/7/cephcsi/csi-attacher:v3.3.0:liblz4-1-1.8.0-3.8.1 Container ses/7/cephcsi/csi-livenessprobe:v1.1.0:liblz4-1-1.8.0-3.8.1 Container ses/7/cephcsi/csi-node-driver-registrar:v2.3.0:liblz4-1-1.8.0-3.8.1 Container ses/7/cephcsi/csi-provisioner:v3.0.0:liblz4-1-1.8.0-3.8.1 Container ses/7/cephcsi/csi-resizer:v1.3.0:liblz4-1-1.8.0-3.8.1 Container ses/7/cephcsi/csi-snapshotter:v2.1.0:liblz4-1-1.8.0-3.8.1 Container ses/7/cephcsi/csi-snapshotter:v4.2.0:liblz4-1-1.8.0-3.8.1 Container ses/7/prometheus-webhook-snmp:latest:liblz4-1-1.8.0-3.8.1 Container ses/7/rook/ceph:latest:liblz4-1-1.8.0-3.8.1 Container suse/sle15:15.0:liblz4-1-1.8.0-3.8.1 Container suse/sle15:15.1:liblz4-1-1.8.0-3.8.1 Container suse/sles/15.2/virt-api:0.38.1:liblz4-1-1.8.0-3.8.1 Container suse/sles/15.2/virt-controller:0.38.1:liblz4-1-1.8.0-3.8.1 Container suse/sles/15.2/virt-handler:0.38.1:liblz4-1-1.8.0-3.8.1 Container suse/sles/15.2/virt-launcher:0.38.1:liblz4-1-1.8.0-3.8.1 Container suse/sles/15.2/virt-operator:0.38.1:liblz4-1-1.8.0-3.8.1 SUSE Enterprise Storage 6:liblz4-1-1.8.0-3.8.1 SUSE Enterprise Storage 6:liblz4-1-32bit-1.8.0-3.8.1 SUSE Enterprise Storage 6:liblz4-devel-1.8.0-3.8.1 SUSE Enterprise Storage 6:lz4-1.8.0-3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:liblz4-1-1.8.0-3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:liblz4-1-32bit-1.8.0-3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:liblz4-devel-1.8.0-3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:lz4-1.8.0-3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:liblz4-1-1.8.0-3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:liblz4-1-32bit-1.8.0-3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:liblz4-devel-1.8.0-3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:lz4-1.8.0-3.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:liblz4-1-1.8.0-3.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:liblz4-1-32bit-1.8.0-3.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:liblz4-devel-1.8.0-3.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:lz4-1.8.0-3.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:liblz4-1-1.8.0-3.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:liblz4-1-32bit-1.8.0-3.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:liblz4-devel-1.8.0-3.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:lz4-1.8.0-3.8.1 SUSE Linux Enterprise Micro 5.0:liblz4-1-1.8.0-3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:liblz4-1-1.8.0-3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:liblz4-1-32bit-1.8.0-3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:liblz4-devel-1.8.0-3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:lz4-1.8.0-3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:liblz4-1-1.8.0-3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:liblz4-1-32bit-1.8.0-3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:liblz4-devel-1.8.0-3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:lz4-1.8.0-3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:liblz4-1-1.8.0-3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:liblz4-1-32bit-1.8.0-3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:liblz4-devel-1.8.0-3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:lz4-1.8.0-3.8.1 SUSE Linux Enterprise Server 15-LTSS:liblz4-1-1.8.0-3.8.1 SUSE Linux Enterprise Server 15-LTSS:liblz4-1-32bit-1.8.0-3.8.1 SUSE Linux Enterprise Server 15-LTSS:liblz4-devel-1.8.0-3.8.1 SUSE Linux Enterprise Server 15-LTSS:lz4-1.8.0-3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:liblz4-1-1.8.0-3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:liblz4-1-32bit-1.8.0-3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:liblz4-devel-1.8.0-3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:lz4-1.8.0-3.8.1 SUSE Linux Enterprise Server for SAP Applications 15:liblz4-1-1.8.0-3.8.1 SUSE Linux Enterprise Server for SAP Applications 15:liblz4-1-32bit-1.8.0-3.8.1 SUSE Linux Enterprise Server for SAP Applications 15:liblz4-devel-1.8.0-3.8.1 SUSE Linux Enterprise Server for SAP Applications 15:lz4-1.8.0-3.8.1 SUSE Manager Proxy 4.0:liblz4-1-1.8.0-3.8.1 SUSE Manager Proxy 4.0:liblz4-1-32bit-1.8.0-3.8.1 SUSE Manager Proxy 4.0:liblz4-devel-1.8.0-3.8.1 SUSE Manager Proxy 4.0:lz4-1.8.0-3.8.1 SUSE Manager Retail Branch Server 4.0:liblz4-1-1.8.0-3.8.1 SUSE Manager Retail Branch Server 4.0:liblz4-1-32bit-1.8.0-3.8.1 SUSE Manager Retail Branch Server 4.0:liblz4-devel-1.8.0-3.8.1 SUSE Manager Retail Branch Server 4.0:lz4-1.8.0-3.8.1 SUSE Manager Server 4.0:liblz4-1-1.8.0-3.8.1 SUSE Manager Server 4.0:liblz4-1-32bit-1.8.0-3.8.1 SUSE Manager Server 4.0:liblz4-devel-1.8.0-3.8.1 SUSE Manager Server 4.0:lz4-1.8.0-3.8.1 important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211647-1/ https://www.suse.com/security/cve/CVE-2021-3520.html CVE-2021-3520 https://bugzilla.suse.com/1185438 SUSE Bug 1185438