Security update for lz4 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:1825-1 Final 1 1 2021-06-01T14:24:04Z current 2021-06-01T14:24:04Z 2021-06-01T14:24:04Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for lz4 This update for lz4 fixes the following issues: - CVE-2021-3520: Fixed memory corruption due to an integer overflow bug caused by memmove argument (bsc#1185438). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container bci/bci-init:15.3-2021-1825,Container bci/dotnet-aspnet:3.1-2021-1825,Container bci/dotnet-aspnet:5.0-2021-1825,Container bci/dotnet-aspnet:latest-2021-1825,Container bci/dotnet-runtime:3.1-2021-1825,Container bci/dotnet-runtime:5.0-2021-1825,Container bci/dotnet-runtime:latest-2021-1825,Container bci/dotnet-sdk:3.1-2021-1825,Container bci/dotnet-sdk:5.0-2021-1825,Container bci/dotnet-sdk:latest-2021-1825,Container bci/golang:1.16-2021-1825,Container bci/golang:1.17-2021-1825,Container bci/golang:latest-2021-1825,Container bci/node:12-2021-1825,Container bci/node:14-2021-1825,Container bci/nodejs:latest-2021-1825,Container bci/openjdk-devel:11-2021-1825,Container bci/openjdk:latest-2021-1825,Container bci/python:3-2021-1825,Container bci/ruby:latest-2021-1825,Container ses/7.1/ceph/grafana:latest-2021-1825,Container ses/7.1/ceph/haproxy:latest-2021-1825,Container ses/7.1/ceph/keepalived:latest-2021-1825,Container ses/7.1/ceph/prometheus-alertmanager:latest-2021-1825,Container ses/7.1/ceph/prometheus-node-exporter:latest-2021-1825,Container ses/7.1/ceph/prometheus-server:latest-2021-1825,Container ses/7.1/ceph/prometheus-snmp_notifier:latest-2021-1825,Container ses/7.1/cephcsi/cephcsi:latest-2021-1825,Container ses/7.1/cephcsi/csi-attacher:v4.1.0-2021-1825,Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0-2021-1825,Container ses/7.1/cephcsi/csi-provisioner:v3.4.0-2021-1825,Container ses/7.1/cephcsi/csi-resizer:v1.7.0-2021-1825,Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1-2021-1825,Container ses/7.1/rook/ceph:latest-2021-1825,Container suse/pcp:latest-2021-1825,Container suse/rmt-mariadb-client:latest-2021-1825,Container suse/rmt-mariadb:latest-2021-1825,Container suse/rmt-nginx:latest-2021-1825,Container suse/rmt-server:latest-2021-1825,Container suse/sle-micro-rancher/5.2:latest-2021-1825,Container suse/sle-micro/5.1/toolbox:latest-2021-1825,Container suse/sle-micro/5.2/toolbox:latest-2021-1825,Container suse/sle15:15.3-2021-1825,Container suse/sles/15.3/cdi-apiserver:1.37.1-2021-1825,Container suse/sles/15.3/cdi-cloner:1.37.1-2021-1825,Container suse/sles/15.3/cdi-controller:1.37.1-2021-1825,Container suse/sles/15.3/cdi-importer:1.37.1-2021-1825,Container suse/sles/15.3/cdi-operator:1.37.1-2021-1825,Container suse/sles/15.3/cdi-uploadproxy:1.37.1-2021-1825,Container suse/sles/15.3/cdi-uploadserver:1.37.1-2021-1825,Container suse/sles/15.3/libguestfs-tools:0.45.0-2021-1825,Container suse/sles/15.3/virt-api:0.45.0-2021-1825,Container suse/sles/15.3/virt-controller:0.45.0-2021-1825,Container suse/sles/15.3/virt-handler:0.45.0-2021-1825,Container suse/sles/15.3/virt-launcher:0.45.0-2021-1825,Container suse/sles/15.3/virt-operator:0.45.0-2021-1825,Container trento/trento-db:latest-2021-1825,Container trento/trento-runner:latest-2021-1825,Image SLES15-SP3-BYOS-Azure-2021-1825,Image SLES15-SP3-BYOS-EC2-HVM-2021-1825,Image SLES15-SP3-BYOS-GCE-2021-1825,Image SLES15-SP3-CHOST-BYOS-Aliyun-2021-1825,Image SLES15-SP3-CHOST-BYOS-Azure-2021-1825,Image SLES15-SP3-CHOST-BYOS-EC2-2021-1825,Image SLES15-SP3-CHOST-BYOS-GCE-2021-1825,Image SLES15-SP3-CHOST-BYOS-SAP-CCloud-2021-1825,Image SLES15-SP3-EC2-ECS-HVM-2021-1825,Image SLES15-SP3-EC2-HVM-2021-1825,Image SLES15-SP3-GCE-2021-1825,Image SLES15-SP3-HPC-Azure-2021-1825,Image SLES15-SP3-HPC-BYOS-Azure-2021-1825,Image SLES15-SP3-HPC-BYOS-EC2-HVM-2021-1825,Image SLES15-SP3-HPC-BYOS-GCE-2021-1825,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure-2021-1825,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM-2021-1825,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE-2021-1825,Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure-2021-1825,Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM-2021-1825,Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE-2021-1825,Image SLES15-SP3-Micro-5-1-BYOS-Azure-2021-1825,Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM-2021-1825,Image SLES15-SP3-Micro-5-1-BYOS-GCE-2021-1825,Image SLES15-SP3-Micro-5-2-BYOS-Azure-2021-1825,Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM-2021-1825,Image SLES15-SP3-Micro-5-2-BYOS-GCE-2021-1825,Image SLES15-SP3-Micro-BYOS-GCE-2021-1825,Image SLES15-SP3-SAP-Azure-2021-1825,Image SLES15-SP3-SAP-Azure-LI-BYOS-Production-2021-1825,Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production-2021-1825,Image SLES15-SP3-SAP-BYOS-Azure-2021-1825,Image SLES15-SP3-SAP-BYOS-EC2-HVM-2021-1825,Image SLES15-SP3-SAP-BYOS-GCE-2021-1825,Image SLES15-SP3-SAP-EC2-HVM-2021-1825,Image SLES15-SP3-SAP-GCE-2021-1825,Image SLES15-SP3-SAPCAL-Azure-2021-1825,Image SLES15-SP3-SAPCAL-EC2-HVM-2021-1825,Image SLES15-SP3-SAPCAL-GCE-2021-1825,SUSE-2021-1825,SUSE-SLE-Module-Basesystem-15-SP3-2021-1825 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20211825-1/ Link for SUSE-SU-2021:1825-1 https://lists.suse.com/pipermail/sle-security-updates/2021-June/008909.html E-Mail link for SUSE-SU-2021:1825-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1185438 SUSE Bug 1185438 https://www.suse.com/security/cve/CVE-2021-3520/ SUSE CVE CVE-2021-3520 page Container bci/bci-init:15.3 Container bci/dotnet-aspnet:3.1 Container bci/dotnet-aspnet:5.0 Container bci/dotnet-aspnet:latest Container bci/dotnet-runtime:3.1 Container bci/dotnet-runtime:5.0 Container bci/dotnet-runtime:latest Container bci/dotnet-sdk:3.1 Container bci/dotnet-sdk:5.0 Container bci/dotnet-sdk:latest Container bci/golang:1.16 Container bci/golang:1.17 Container bci/golang:latest Container bci/node:12 Container bci/node:14 Container bci/nodejs:latest Container bci/openjdk-devel:11 Container bci/openjdk:latest Container bci/python:3 Container bci/ruby:latest Container ses/7.1/ceph/grafana:latest Container ses/7.1/ceph/haproxy:latest Container ses/7.1/ceph/keepalived:latest Container ses/7.1/ceph/prometheus-alertmanager:latest Container ses/7.1/ceph/prometheus-node-exporter:latest Container ses/7.1/ceph/prometheus-server:latest Container ses/7.1/ceph/prometheus-snmp_notifier:latest Container ses/7.1/cephcsi/cephcsi:latest Container ses/7.1/cephcsi/csi-attacher:v4.1.0 Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0 Container ses/7.1/cephcsi/csi-provisioner:v3.4.0 Container ses/7.1/cephcsi/csi-resizer:v1.7.0 Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1 Container ses/7.1/rook/ceph:latest Container suse/pcp:latest Container suse/rmt-mariadb-client:latest Container suse/rmt-mariadb:latest Container suse/rmt-nginx:latest Container suse/rmt-server:latest Container suse/sle-micro-rancher/5.2:latest Container suse/sle-micro/5.1/toolbox:latest Container suse/sle-micro/5.2/toolbox:latest Container suse/sle15:15.3 Container suse/sles/15.3/cdi-apiserver:1.37.1 Container suse/sles/15.3/cdi-cloner:1.37.1 Container suse/sles/15.3/cdi-controller:1.37.1 Container suse/sles/15.3/cdi-importer:1.37.1 Container suse/sles/15.3/cdi-operator:1.37.1 Container suse/sles/15.3/cdi-uploadproxy:1.37.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1 Container suse/sles/15.3/libguestfs-tools:0.45.0 Container suse/sles/15.3/virt-api:0.45.0 Container suse/sles/15.3/virt-controller:0.45.0 Container suse/sles/15.3/virt-handler:0.45.0 Container suse/sles/15.3/virt-launcher:0.45.0 Container suse/sles/15.3/virt-operator:0.45.0 Container trento/trento-db:latest Container trento/trento-runner:latest Image SLES15-SP3-BYOS-Azure Image SLES15-SP3-BYOS-EC2-HVM Image SLES15-SP3-BYOS-GCE Image SLES15-SP3-CHOST-BYOS-Aliyun Image SLES15-SP3-CHOST-BYOS-Azure Image SLES15-SP3-CHOST-BYOS-EC2 Image SLES15-SP3-CHOST-BYOS-GCE Image SLES15-SP3-CHOST-BYOS-SAP-CCloud Image SLES15-SP3-EC2-ECS-HVM Image SLES15-SP3-EC2-HVM Image SLES15-SP3-GCE Image SLES15-SP3-HPC-Azure Image SLES15-SP3-HPC-BYOS-Azure Image SLES15-SP3-HPC-BYOS-EC2-HVM Image SLES15-SP3-HPC-BYOS-GCE Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE Image SLES15-SP3-Micro-5-1-BYOS-Azure Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-1-BYOS-GCE Image SLES15-SP3-Micro-5-2-BYOS-Azure Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-2-BYOS-GCE Image SLES15-SP3-Micro-BYOS-GCE Image SLES15-SP3-SAP-Azure Image SLES15-SP3-SAP-Azure-LI-BYOS-Production Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production Image SLES15-SP3-SAP-BYOS-Azure Image SLES15-SP3-SAP-BYOS-EC2-HVM Image SLES15-SP3-SAP-BYOS-GCE Image SLES15-SP3-SAP-EC2-HVM Image SLES15-SP3-SAP-GCE Image SLES15-SP3-SAPCAL-Azure Image SLES15-SP3-SAPCAL-EC2-HVM Image SLES15-SP3-SAPCAL-GCE SUSE Linux Enterprise Module for Basesystem 15 SP3 liblz4-1-1.9.2-3.3.1 liblz4-1-32bit-1.9.2-3.3.1 liblz4-1-64bit-1.9.2-3.3.1 liblz4-devel-1.9.2-3.3.1 lz4-1.9.2-3.3.1 liblz4-1-1.9.2-3.3.1 as a component of Container bci/bci-init:15.3 liblz4-1-1.9.2-3.3.1 as a component of Container bci/dotnet-aspnet:3.1 liblz4-1-1.9.2-3.3.1 as a component of Container bci/dotnet-aspnet:5.0 liblz4-1-1.9.2-3.3.1 as a component of Container bci/dotnet-aspnet:latest liblz4-1-1.9.2-3.3.1 as a component of Container bci/dotnet-runtime:3.1 liblz4-1-1.9.2-3.3.1 as a component of Container bci/dotnet-runtime:5.0 liblz4-1-1.9.2-3.3.1 as a component of Container bci/dotnet-runtime:latest liblz4-1-1.9.2-3.3.1 as a component of Container bci/dotnet-sdk:3.1 liblz4-1-1.9.2-3.3.1 as a component of Container bci/dotnet-sdk:5.0 liblz4-1-1.9.2-3.3.1 as a component of Container bci/dotnet-sdk:latest liblz4-1-1.9.2-3.3.1 as a component of Container bci/golang:1.16 liblz4-1-1.9.2-3.3.1 as a component of Container bci/golang:1.17 liblz4-1-1.9.2-3.3.1 as a component of Container bci/golang:latest liblz4-1-1.9.2-3.3.1 as a component of Container bci/node:12 liblz4-1-1.9.2-3.3.1 as a component of Container bci/node:14 liblz4-1-1.9.2-3.3.1 as a component of Container bci/nodejs:latest liblz4-1-1.9.2-3.3.1 as a component of Container bci/openjdk-devel:11 liblz4-1-1.9.2-3.3.1 as a component of Container bci/openjdk:latest liblz4-1-1.9.2-3.3.1 as a component of Container bci/python:3 liblz4-1-1.9.2-3.3.1 as a component of Container bci/ruby:latest liblz4-1-1.9.2-3.3.1 as a component of Container ses/7.1/ceph/grafana:latest liblz4-1-1.9.2-3.3.1 as a component of Container ses/7.1/ceph/haproxy:latest liblz4-1-1.9.2-3.3.1 as a component of Container ses/7.1/ceph/keepalived:latest liblz4-1-1.9.2-3.3.1 as a component of Container ses/7.1/ceph/prometheus-alertmanager:latest liblz4-1-1.9.2-3.3.1 as a component of Container ses/7.1/ceph/prometheus-node-exporter:latest liblz4-1-1.9.2-3.3.1 as a component of Container ses/7.1/ceph/prometheus-server:latest liblz4-1-1.9.2-3.3.1 as a component of Container ses/7.1/ceph/prometheus-snmp_notifier:latest liblz4-1-1.9.2-3.3.1 as a component of Container ses/7.1/cephcsi/cephcsi:latest liblz4-1-1.9.2-3.3.1 as a component of Container ses/7.1/cephcsi/csi-attacher:v4.1.0 liblz4-1-1.9.2-3.3.1 as a component of Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0 liblz4-1-1.9.2-3.3.1 as a component of Container ses/7.1/cephcsi/csi-provisioner:v3.4.0 liblz4-1-1.9.2-3.3.1 as a component of Container ses/7.1/cephcsi/csi-resizer:v1.7.0 liblz4-1-1.9.2-3.3.1 as a component of Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1 liblz4-1-1.9.2-3.3.1 as a component of Container ses/7.1/rook/ceph:latest liblz4-1-1.9.2-3.3.1 as a component of Container suse/pcp:latest liblz4-1-1.9.2-3.3.1 as a component of Container suse/rmt-mariadb-client:latest liblz4-1-1.9.2-3.3.1 as a component of Container suse/rmt-mariadb:latest liblz4-1-1.9.2-3.3.1 as a component of Container suse/rmt-nginx:latest liblz4-1-1.9.2-3.3.1 as a component of Container suse/rmt-server:latest liblz4-1-1.9.2-3.3.1 as a component of Container suse/sle-micro-rancher/5.2:latest liblz4-1-1.9.2-3.3.1 as a component of Container suse/sle-micro/5.1/toolbox:latest liblz4-1-1.9.2-3.3.1 as a component of Container suse/sle-micro/5.2/toolbox:latest liblz4-1-1.9.2-3.3.1 as a component of Container suse/sle15:15.3 liblz4-1-1.9.2-3.3.1 as a component of Container suse/sles/15.3/cdi-apiserver:1.37.1 liblz4-1-1.9.2-3.3.1 as a component of Container suse/sles/15.3/cdi-cloner:1.37.1 liblz4-1-1.9.2-3.3.1 as a component of Container suse/sles/15.3/cdi-controller:1.37.1 liblz4-1-1.9.2-3.3.1 as a component of Container suse/sles/15.3/cdi-importer:1.37.1 liblz4-1-1.9.2-3.3.1 as a component of Container suse/sles/15.3/cdi-operator:1.37.1 liblz4-1-1.9.2-3.3.1 as a component of Container suse/sles/15.3/cdi-uploadproxy:1.37.1 liblz4-1-1.9.2-3.3.1 as a component of Container suse/sles/15.3/cdi-uploadserver:1.37.1 liblz4-1-1.9.2-3.3.1 as a component of Container suse/sles/15.3/libguestfs-tools:0.45.0 liblz4-1-1.9.2-3.3.1 as a component of Container suse/sles/15.3/virt-api:0.45.0 liblz4-1-1.9.2-3.3.1 as a component of Container suse/sles/15.3/virt-controller:0.45.0 liblz4-1-1.9.2-3.3.1 as a component of Container suse/sles/15.3/virt-handler:0.45.0 liblz4-1-1.9.2-3.3.1 as a component of Container suse/sles/15.3/virt-launcher:0.45.0 liblz4-1-1.9.2-3.3.1 as a component of Container suse/sles/15.3/virt-operator:0.45.0 liblz4-1-1.9.2-3.3.1 as a component of Container trento/trento-db:latest liblz4-1-1.9.2-3.3.1 as a component of Container trento/trento-runner:latest liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-BYOS-Azure liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-BYOS-EC2-HVM liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-BYOS-GCE liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-CHOST-BYOS-Aliyun liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-CHOST-BYOS-Azure liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-CHOST-BYOS-EC2 liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-CHOST-BYOS-GCE liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-CHOST-BYOS-SAP-CCloud liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-EC2-ECS-HVM liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-EC2-HVM liblz4-1-32bit-1.9.2-3.3.1 as a component of Image SLES15-SP3-EC2-HVM liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-GCE liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-HPC-Azure liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-HPC-BYOS-Azure liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-HPC-BYOS-EC2-HVM liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-HPC-BYOS-GCE liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-Azure liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-GCE liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-Azure liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-GCE liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-Micro-BYOS-GCE liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-SAP-Azure liblz4-1-32bit-1.9.2-3.3.1 as a component of Image SLES15-SP3-SAP-Azure liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-SAP-BYOS-Azure liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-SAP-BYOS-EC2-HVM liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-SAP-BYOS-GCE liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-SAP-EC2-HVM liblz4-1-32bit-1.9.2-3.3.1 as a component of Image SLES15-SP3-SAP-EC2-HVM liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-SAP-GCE liblz4-1-32bit-1.9.2-3.3.1 as a component of Image SLES15-SP3-SAP-GCE liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-SAPCAL-Azure liblz4-1-32bit-1.9.2-3.3.1 as a component of Image SLES15-SP3-SAPCAL-Azure liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-SAPCAL-EC2-HVM liblz4-1-32bit-1.9.2-3.3.1 as a component of Image SLES15-SP3-SAPCAL-EC2-HVM liblz4-1-1.9.2-3.3.1 as a component of Image SLES15-SP3-SAPCAL-GCE liblz4-1-32bit-1.9.2-3.3.1 as a component of Image SLES15-SP3-SAPCAL-GCE liblz4-1-1.9.2-3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 liblz4-1-32bit-1.9.2-3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 liblz4-devel-1.9.2-3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 lz4-1.9.2-3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling of memmove() on a negative size argument, causing an out-of-bounds write and/or a crash. The greatest impact of this flaw is to availability, with some potential impact to confidentiality and integrity as well. CVE-2021-3520 Container bci/bci-init:15.3:liblz4-1-1.9.2-3.3.1 Container bci/dotnet-aspnet:3.1:liblz4-1-1.9.2-3.3.1 Container bci/dotnet-aspnet:5.0:liblz4-1-1.9.2-3.3.1 Container bci/dotnet-aspnet:latest:liblz4-1-1.9.2-3.3.1 Container bci/dotnet-runtime:3.1:liblz4-1-1.9.2-3.3.1 Container bci/dotnet-runtime:5.0:liblz4-1-1.9.2-3.3.1 Container bci/dotnet-runtime:latest:liblz4-1-1.9.2-3.3.1 Container bci/dotnet-sdk:3.1:liblz4-1-1.9.2-3.3.1 Container bci/dotnet-sdk:5.0:liblz4-1-1.9.2-3.3.1 Container bci/dotnet-sdk:latest:liblz4-1-1.9.2-3.3.1 Container bci/golang:1.16:liblz4-1-1.9.2-3.3.1 Container bci/golang:1.17:liblz4-1-1.9.2-3.3.1 Container bci/golang:latest:liblz4-1-1.9.2-3.3.1 Container bci/node:12:liblz4-1-1.9.2-3.3.1 Container bci/node:14:liblz4-1-1.9.2-3.3.1 Container bci/nodejs:latest:liblz4-1-1.9.2-3.3.1 Container bci/openjdk-devel:11:liblz4-1-1.9.2-3.3.1 Container bci/openjdk:latest:liblz4-1-1.9.2-3.3.1 Container bci/python:3:liblz4-1-1.9.2-3.3.1 Container bci/ruby:latest:liblz4-1-1.9.2-3.3.1 Container ses/7.1/ceph/grafana:latest:liblz4-1-1.9.2-3.3.1 Container ses/7.1/ceph/haproxy:latest:liblz4-1-1.9.2-3.3.1 Container ses/7.1/ceph/keepalived:latest:liblz4-1-1.9.2-3.3.1 Container ses/7.1/ceph/prometheus-alertmanager:latest:liblz4-1-1.9.2-3.3.1 Container ses/7.1/ceph/prometheus-node-exporter:latest:liblz4-1-1.9.2-3.3.1 Container ses/7.1/ceph/prometheus-server:latest:liblz4-1-1.9.2-3.3.1 Container ses/7.1/ceph/prometheus-snmp_notifier:latest:liblz4-1-1.9.2-3.3.1 Container ses/7.1/cephcsi/cephcsi:latest:liblz4-1-1.9.2-3.3.1 Container ses/7.1/cephcsi/csi-attacher:v4.1.0:liblz4-1-1.9.2-3.3.1 Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0:liblz4-1-1.9.2-3.3.1 Container ses/7.1/cephcsi/csi-provisioner:v3.4.0:liblz4-1-1.9.2-3.3.1 Container ses/7.1/cephcsi/csi-resizer:v1.7.0:liblz4-1-1.9.2-3.3.1 Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1:liblz4-1-1.9.2-3.3.1 Container ses/7.1/rook/ceph:latest:liblz4-1-1.9.2-3.3.1 Container suse/pcp:latest:liblz4-1-1.9.2-3.3.1 Container suse/rmt-mariadb-client:latest:liblz4-1-1.9.2-3.3.1 Container suse/rmt-mariadb:latest:liblz4-1-1.9.2-3.3.1 Container suse/rmt-nginx:latest:liblz4-1-1.9.2-3.3.1 Container suse/rmt-server:latest:liblz4-1-1.9.2-3.3.1 Container suse/sle-micro-rancher/5.2:latest:liblz4-1-1.9.2-3.3.1 Container suse/sle-micro/5.1/toolbox:latest:liblz4-1-1.9.2-3.3.1 Container suse/sle-micro/5.2/toolbox:latest:liblz4-1-1.9.2-3.3.1 Container suse/sle15:15.3:liblz4-1-1.9.2-3.3.1 Container suse/sles/15.3/cdi-apiserver:1.37.1:liblz4-1-1.9.2-3.3.1 Container suse/sles/15.3/cdi-cloner:1.37.1:liblz4-1-1.9.2-3.3.1 Container suse/sles/15.3/cdi-controller:1.37.1:liblz4-1-1.9.2-3.3.1 Container suse/sles/15.3/cdi-importer:1.37.1:liblz4-1-1.9.2-3.3.1 Container suse/sles/15.3/cdi-operator:1.37.1:liblz4-1-1.9.2-3.3.1 Container suse/sles/15.3/cdi-uploadproxy:1.37.1:liblz4-1-1.9.2-3.3.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:liblz4-1-1.9.2-3.3.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:liblz4-1-1.9.2-3.3.1 Container suse/sles/15.3/virt-api:0.45.0:liblz4-1-1.9.2-3.3.1 Container suse/sles/15.3/virt-controller:0.45.0:liblz4-1-1.9.2-3.3.1 Container suse/sles/15.3/virt-handler:0.45.0:liblz4-1-1.9.2-3.3.1 Container suse/sles/15.3/virt-launcher:0.45.0:liblz4-1-1.9.2-3.3.1 Container suse/sles/15.3/virt-operator:0.45.0:liblz4-1-1.9.2-3.3.1 Container trento/trento-db:latest:liblz4-1-1.9.2-3.3.1 Container trento/trento-runner:latest:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-BYOS-Azure:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-BYOS-EC2-HVM:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-BYOS-GCE:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-CHOST-BYOS-Aliyun:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-CHOST-BYOS-Azure:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-CHOST-BYOS-EC2:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-CHOST-BYOS-GCE:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-CHOST-BYOS-SAP-CCloud:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-EC2-ECS-HVM:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-EC2-HVM:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-EC2-HVM:liblz4-1-32bit-1.9.2-3.3.1 Image SLES15-SP3-GCE:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-HPC-Azure:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-HPC-BYOS-Azure:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-HPC-BYOS-EC2-HVM:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-HPC-BYOS-GCE:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-Micro-5-1-BYOS-Azure:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-Micro-5-1-BYOS-GCE:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-Micro-5-2-BYOS-Azure:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-Micro-5-2-BYOS-GCE:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-Micro-BYOS-GCE:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-SAP-Azure:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-SAP-Azure:liblz4-1-32bit-1.9.2-3.3.1 Image SLES15-SP3-SAP-BYOS-Azure:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-SAP-BYOS-GCE:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-SAP-EC2-HVM:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-SAP-EC2-HVM:liblz4-1-32bit-1.9.2-3.3.1 Image SLES15-SP3-SAP-GCE:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-SAP-GCE:liblz4-1-32bit-1.9.2-3.3.1 Image SLES15-SP3-SAPCAL-Azure:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-SAPCAL-Azure:liblz4-1-32bit-1.9.2-3.3.1 Image SLES15-SP3-SAPCAL-EC2-HVM:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-SAPCAL-EC2-HVM:liblz4-1-32bit-1.9.2-3.3.1 Image SLES15-SP3-SAPCAL-GCE:liblz4-1-1.9.2-3.3.1 Image SLES15-SP3-SAPCAL-GCE:liblz4-1-32bit-1.9.2-3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:liblz4-1-1.9.2-3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:liblz4-1-32bit-1.9.2-3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:liblz4-devel-1.9.2-3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:lz4-1.9.2-3.3.1 important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211825-1/ https://www.suse.com/security/cve/CVE-2021-3520.html CVE-2021-3520 https://bugzilla.suse.com/1185438 SUSE Bug 1185438