- Fix:
* CVE-2019-20007 https://sourceforge.net/p/ezxml/bugs/13
* CVE-2019-20006 https://sourceforge.net/p/ezxml/bugs/15
* CVE-2019-20201 https://sourceforge.net/p/ezxml/bugs/16
* CVE-2019-20202 https://sourceforge.net/p/ezxml/bugs/17
* CVE-2019-20199 https://sourceforge.net/p/ezxml/bugs/18
* CVE-2019-20200 https://sourceforge.net/p/ezxml/bugs/19
* CVE-2019-20198 https://sourceforge.net/p/ezxml/bugs/20
* CVE-2021-26221 https://sourceforge.net/p/ezxml/bugs/21
* CVE-2021-26222 https://sourceforge.net/p/ezxml/bugs/22
* CVE-2021-30485 https://sourceforge.net/p/ezxml/bugs/25
* CVE-2021-31229 https://sourceforge.net/p/ezxml/bugs/26
* CVE-2021-31347 &
* CVE-2021-31348 https://sourceforge.net/p/ezxml/bugs/27
* CVE-2021-31598 https://sourceforge.net/p/ezxml/bugs/28
(bsc#1191856)
Note:
* CVE-2021-26220 https://sourceforge.net/p/ezxml/bugs/23
not relevant for netcdf: code isn't used.
* CVE-2019-20005 https://sourceforge.net/p/ezxml/bugs/14
Issue cannot be reproduced and no patch is available upstream.
Added:
* Fix-CVE-2021-30485-bug-25.patch
* Fix-CVE-2021-31229-bug-26-CVE-2019-20201-bug-16-CVE-2019-20198-bug-20.patch
* Fix-CVE-2021-31347-bug-27.patch
* Fix-for-CVE-2019-20006-CVE-2019-20202-CVE-2021-31598-ezxml-bug-15-17-28.patch
* Fix-for-CVE-2019-20007-ezxml-bug-13.patch
* Fix-for-CVE-2019-20199-ezxml-bug-18.patch
* Fix-for-CVE-2019-20200-ezxml-bug-19.patch
* Fix-for-CVE-2021-26221-ezxml-bug-21.patch