Security update for maven and recommended update for antlr3, minlog, sbt, xmvn SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:2097-1 Final 1 1 2023-05-04T07:11:17Z current 2023-05-04T07:11:17Z 2023-05-04T07:11:17Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for maven and recommended update for antlr3, minlog, sbt, xmvn This update for antlr3, maven, minlog, sbt, xmvn fixes the following issues: maven: - Version update from 3.8.5 to 3.8.6 (jsc#SLE-23217): * Security fixes: + CVE-2021-42550: Update Version of (optional) Logback (bsc#1193795) * Bug fixes: + Fix resolver session containing non-MavenWorkspaceReader + Fix for multiple maven instances working on same source tree that can lock each other + Don't ignore bin/ otherwise bin/ in apache-maven module cannot be added back + Fix IllegalStateException in SessionScope during guice injection in multithreaded build + Revert MNG-7347 (SessionScoped beans should be singletons for a given session) + Fix compilation failure with relocated transitive dependency + Fix deadlock during forked lifecycle executions + Fix issue with resolving dependencies between submodules * New features and improvements: + Create a multiline message helper for boxed log messages + Display a warning when an aggregator mojo is locking other mojo executions + Align Assembly Descriptor NS versions * Dependency upgrades: + Upgrade SLF4J to 1.7.36 + Upgrade JUnit to 4.13.2 + Upgrade Plexus Utils to 3.3.1 - Move mvn.1 from bin to man directory antlr3: - Bug fixes in this version update from 3.5.2 to 3.5.3 (jsc#SLE-23217): * Change source compatibility to 1.8 and enable github workflows * Change Wiki URLs to theantlrguy.atlassian.net in README.txt * Add Bazel support - Remove enforcer plugin as it is not needed in a controlled environment minlog: - Bug fixes in this version update from 1.3.0 to 1.3.1 (jsc#SLE-23217): * Use currentTimeMillis * Use 3-Clause BSD * Use Java 7 JDK. sbt: - Fix build issues with maven 3.8.6 (jsc#SLE-23217) xmvn: - Remove RPM package build dependency on easymock (jsc#SLE-23217) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container bci/openjdk-devel:11-2023-2097,Container bci/openjdk-devel:latest-2023-2097,Image SLES15-SP4-Manager-Server-4-3-BYOS-2023-2097,Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure-2023-2097,Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2-2023-2097,Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE-2023-2097,SUSE-2023-2097,SUSE-SLE-Module-Development-Tools-15-SP4-2023-2097,SUSE-SLE-Module-SUSE-Manager-Server-4.3-2023-2097,SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-2097,SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-2097,SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-2097,SUSE-SLE-Product-RT-15-SP3-2023-2097,SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-2097,SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-2097,SUSE-SLE-Product-SLES_SAP-15-SP2-2023-2097,SUSE-SLE-Product-SLES_SAP-15-SP3-2023-2097,SUSE-Storage-7-2023-2097,SUSE-Storage-7.1-2023-2097,openSUSE-SLE-15.4-2023-2097 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20232097-1/ Link for SUSE-SU-2023:2097-1 https://lists.suse.com/pipermail/sle-security-updates/2023-May/014769.html E-Mail link for SUSE-SU-2023:2097-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1193795 SUSE Bug 1193795 https://www.suse.com/security/cve/CVE-2021-42550/ SUSE CVE CVE-2021-42550 page Container bci/openjdk-devel:11 Container bci/openjdk-devel:latest Image SLES15-SP4-Manager-Server-4-3-BYOS Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Real Time 15 SP3 SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Manager Server Module 4.3 openSUSE Leap 15.4 maven-3.8.6-150200.4.9.8 maven-lib-3.8.6-150200.4.9.8 antlr3-java-3.5.3-150200.3.11.8 antlr3-bootstrap-tool-3.5.3-150200.3.11.8 antlr3-java-javadoc-3.5.3-150200.3.11.8 antlr3-javadoc-3.5.3-150200.3.11.8 antlr3-tool-3.5.3-150200.3.11.8 maven-javadoc-3.8.6-150200.4.9.8 minlog-1.3.1-150200.3.7.8 minlog-javadoc-1.3.1-150200.3.7.8 sbt-0.13.18-150200.4.7.8 sbt-bootstrap-0.13.18-150200.4.7.8 xmvn-4.0.0-150200.3.7.1 xmvn-api-4.0.0-150200.3.7.1 xmvn-connector-4.0.0-150200.3.7.3 xmvn-connector-javadoc-4.0.0-150200.3.7.3 xmvn-core-4.0.0-150200.3.7.1 xmvn-install-4.0.0-150200.3.7.1 xmvn-minimal-4.0.0-150200.3.7.1 xmvn-mojo-4.0.0-150200.3.7.8 xmvn-mojo-javadoc-4.0.0-150200.3.7.8 xmvn-parent-4.0.0-150200.3.7.1 xmvn-resolve-4.0.0-150200.3.7.1 xmvn-subst-4.0.0-150200.3.7.1 xmvn-tools-javadoc-4.0.0-150200.3.7.1 maven-3.8.6-150200.4.9.8 as a component of Container bci/openjdk-devel:11 maven-lib-3.8.6-150200.4.9.8 as a component of Container bci/openjdk-devel:11 maven-3.8.6-150200.4.9.8 as a component of Container bci/openjdk-devel:latest maven-lib-3.8.6-150200.4.9.8 as a component of Container bci/openjdk-devel:latest antlr3-java-3.5.3-150200.3.11.8 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS antlr3-java-3.5.3-150200.3.11.8 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure antlr3-java-3.5.3-150200.3.11.8 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 antlr3-java-3.5.3-150200.3.11.8 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE maven-3.8.6-150200.4.9.8 as a component of SUSE Enterprise Storage 7 maven-lib-3.8.6-150200.4.9.8 as a component of SUSE Enterprise Storage 7 minlog-1.3.1-150200.3.7.8 as a component of SUSE Enterprise Storage 7 xmvn-4.0.0-150200.3.7.1 as a component of SUSE Enterprise Storage 7 xmvn-api-4.0.0-150200.3.7.1 as a component of SUSE Enterprise Storage 7 xmvn-connector-4.0.0-150200.3.7.3 as a component of SUSE Enterprise Storage 7 xmvn-core-4.0.0-150200.3.7.1 as a component of SUSE Enterprise Storage 7 xmvn-install-4.0.0-150200.3.7.1 as a component of SUSE Enterprise Storage 7 xmvn-minimal-4.0.0-150200.3.7.1 as a component of SUSE Enterprise Storage 7 xmvn-mojo-4.0.0-150200.3.7.8 as a component of SUSE Enterprise Storage 7 xmvn-resolve-4.0.0-150200.3.7.1 as a component of SUSE Enterprise Storage 7 xmvn-subst-4.0.0-150200.3.7.1 as a component of SUSE Enterprise Storage 7 maven-3.8.6-150200.4.9.8 as a component of SUSE Enterprise Storage 7.1 maven-lib-3.8.6-150200.4.9.8 as a component of SUSE Enterprise Storage 7.1 minlog-1.3.1-150200.3.7.8 as a component of SUSE Enterprise Storage 7.1 xmvn-4.0.0-150200.3.7.1 as a component of SUSE Enterprise Storage 7.1 xmvn-api-4.0.0-150200.3.7.1 as a component of SUSE Enterprise Storage 7.1 xmvn-connector-4.0.0-150200.3.7.3 as a component of SUSE Enterprise Storage 7.1 xmvn-core-4.0.0-150200.3.7.1 as a component of SUSE Enterprise Storage 7.1 xmvn-install-4.0.0-150200.3.7.1 as a component of SUSE Enterprise Storage 7.1 xmvn-minimal-4.0.0-150200.3.7.1 as a component of SUSE Enterprise Storage 7.1 xmvn-mojo-4.0.0-150200.3.7.8 as a component of SUSE Enterprise Storage 7.1 xmvn-resolve-4.0.0-150200.3.7.1 as a component of SUSE Enterprise Storage 7.1 xmvn-subst-4.0.0-150200.3.7.1 as a component of SUSE Enterprise Storage 7.1 maven-3.8.6-150200.4.9.8 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS maven-lib-3.8.6-150200.4.9.8 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS minlog-1.3.1-150200.3.7.8 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS xmvn-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS xmvn-api-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS xmvn-connector-4.0.0-150200.3.7.3 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS xmvn-core-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS xmvn-install-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS xmvn-minimal-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS xmvn-mojo-4.0.0-150200.3.7.8 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS xmvn-resolve-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS xmvn-subst-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS maven-3.8.6-150200.4.9.8 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS maven-lib-3.8.6-150200.4.9.8 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS minlog-1.3.1-150200.3.7.8 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS xmvn-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS xmvn-api-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS xmvn-connector-4.0.0-150200.3.7.3 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS xmvn-core-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS xmvn-install-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS xmvn-minimal-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS xmvn-mojo-4.0.0-150200.3.7.8 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS xmvn-resolve-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS xmvn-subst-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS maven-3.8.6-150200.4.9.8 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS maven-lib-3.8.6-150200.4.9.8 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS minlog-1.3.1-150200.3.7.8 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS xmvn-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS xmvn-api-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS xmvn-connector-4.0.0-150200.3.7.3 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS xmvn-core-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS xmvn-install-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS xmvn-minimal-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS xmvn-mojo-4.0.0-150200.3.7.8 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS xmvn-resolve-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS xmvn-subst-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS maven-3.8.6-150200.4.9.8 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 maven-lib-3.8.6-150200.4.9.8 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 minlog-1.3.1-150200.3.7.8 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 xmvn-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 xmvn-api-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 xmvn-connector-4.0.0-150200.3.7.3 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 xmvn-core-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 xmvn-install-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 xmvn-minimal-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 xmvn-mojo-4.0.0-150200.3.7.8 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 xmvn-resolve-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 xmvn-subst-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 maven-3.8.6-150200.4.9.8 as a component of SUSE Linux Enterprise Real Time 15 SP3 maven-lib-3.8.6-150200.4.9.8 as a component of SUSE Linux Enterprise Real Time 15 SP3 minlog-1.3.1-150200.3.7.8 as a component of SUSE Linux Enterprise Real Time 15 SP3 xmvn-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 xmvn-api-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 xmvn-connector-4.0.0-150200.3.7.3 as a component of SUSE Linux Enterprise Real Time 15 SP3 xmvn-core-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 xmvn-install-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 xmvn-minimal-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 xmvn-mojo-4.0.0-150200.3.7.8 as a component of SUSE Linux Enterprise Real Time 15 SP3 xmvn-resolve-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 xmvn-subst-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 maven-3.8.6-150200.4.9.8 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS maven-lib-3.8.6-150200.4.9.8 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS minlog-1.3.1-150200.3.7.8 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS xmvn-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS xmvn-api-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS xmvn-connector-4.0.0-150200.3.7.3 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS xmvn-core-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS xmvn-install-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS xmvn-minimal-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS xmvn-mojo-4.0.0-150200.3.7.8 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS xmvn-resolve-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS xmvn-subst-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS maven-3.8.6-150200.4.9.8 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS maven-lib-3.8.6-150200.4.9.8 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS minlog-1.3.1-150200.3.7.8 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS xmvn-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS xmvn-api-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS xmvn-connector-4.0.0-150200.3.7.3 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS xmvn-core-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS xmvn-install-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS xmvn-minimal-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS xmvn-mojo-4.0.0-150200.3.7.8 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS xmvn-resolve-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS xmvn-subst-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS maven-3.8.6-150200.4.9.8 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 maven-lib-3.8.6-150200.4.9.8 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 minlog-1.3.1-150200.3.7.8 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 xmvn-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 xmvn-api-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 xmvn-connector-4.0.0-150200.3.7.3 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 xmvn-core-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 xmvn-install-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 xmvn-minimal-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 xmvn-mojo-4.0.0-150200.3.7.8 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 xmvn-resolve-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 xmvn-subst-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 maven-3.8.6-150200.4.9.8 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 maven-lib-3.8.6-150200.4.9.8 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 minlog-1.3.1-150200.3.7.8 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 xmvn-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 xmvn-api-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 xmvn-connector-4.0.0-150200.3.7.3 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 xmvn-core-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 xmvn-install-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 xmvn-minimal-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 xmvn-mojo-4.0.0-150200.3.7.8 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 xmvn-resolve-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 xmvn-subst-4.0.0-150200.3.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 antlr3-java-3.5.3-150200.3.11.8 as a component of SUSE Manager Server Module 4.3 antlr3-bootstrap-tool-3.5.3-150200.3.11.8 as a component of openSUSE Leap 15.4 antlr3-java-3.5.3-150200.3.11.8 as a component of openSUSE Leap 15.4 antlr3-java-javadoc-3.5.3-150200.3.11.8 as a component of openSUSE Leap 15.4 antlr3-javadoc-3.5.3-150200.3.11.8 as a component of openSUSE Leap 15.4 antlr3-tool-3.5.3-150200.3.11.8 as a component of openSUSE Leap 15.4 maven-3.8.6-150200.4.9.8 as a component of openSUSE Leap 15.4 maven-javadoc-3.8.6-150200.4.9.8 as a component of openSUSE Leap 15.4 maven-lib-3.8.6-150200.4.9.8 as a component of openSUSE Leap 15.4 minlog-1.3.1-150200.3.7.8 as a component of openSUSE Leap 15.4 minlog-javadoc-1.3.1-150200.3.7.8 as a component of openSUSE Leap 15.4 sbt-0.13.18-150200.4.7.8 as a component of openSUSE Leap 15.4 sbt-bootstrap-0.13.18-150200.4.7.8 as a component of openSUSE Leap 15.4 xmvn-4.0.0-150200.3.7.1 as a component of openSUSE Leap 15.4 xmvn-api-4.0.0-150200.3.7.1 as a component of openSUSE Leap 15.4 xmvn-connector-4.0.0-150200.3.7.3 as a component of openSUSE Leap 15.4 xmvn-connector-javadoc-4.0.0-150200.3.7.3 as a component of openSUSE Leap 15.4 xmvn-core-4.0.0-150200.3.7.1 as a component of openSUSE Leap 15.4 xmvn-install-4.0.0-150200.3.7.1 as a component of openSUSE Leap 15.4 xmvn-minimal-4.0.0-150200.3.7.1 as a component of openSUSE Leap 15.4 xmvn-mojo-4.0.0-150200.3.7.8 as a component of openSUSE Leap 15.4 xmvn-mojo-javadoc-4.0.0-150200.3.7.8 as a component of openSUSE Leap 15.4 xmvn-parent-4.0.0-150200.3.7.1 as a component of openSUSE Leap 15.4 xmvn-resolve-4.0.0-150200.3.7.1 as a component of openSUSE Leap 15.4 xmvn-subst-4.0.0-150200.3.7.1 as a component of openSUSE Leap 15.4 xmvn-tools-javadoc-4.0.0-150200.3.7.1 as a component of openSUSE Leap 15.4 In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers. CVE-2021-42550 Container bci/openjdk-devel:11:maven-3.8.6-150200.4.9.8 Container bci/openjdk-devel:11:maven-lib-3.8.6-150200.4.9.8 Container bci/openjdk-devel:latest:maven-3.8.6-150200.4.9.8 Container bci/openjdk-devel:latest:maven-lib-3.8.6-150200.4.9.8 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:antlr3-java-3.5.3-150200.3.11.8 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:antlr3-java-3.5.3-150200.3.11.8 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:antlr3-java-3.5.3-150200.3.11.8 Image SLES15-SP4-Manager-Server-4-3-BYOS:antlr3-java-3.5.3-150200.3.11.8 SUSE Enterprise Storage 7.1:maven-3.8.6-150200.4.9.8 SUSE Enterprise Storage 7.1:maven-lib-3.8.6-150200.4.9.8 SUSE Enterprise Storage 7.1:minlog-1.3.1-150200.3.7.8 SUSE Enterprise Storage 7.1:xmvn-4.0.0-150200.3.7.1 SUSE Enterprise Storage 7.1:xmvn-api-4.0.0-150200.3.7.1 SUSE Enterprise Storage 7.1:xmvn-connector-4.0.0-150200.3.7.3 SUSE Enterprise Storage 7.1:xmvn-core-4.0.0-150200.3.7.1 SUSE Enterprise Storage 7.1:xmvn-install-4.0.0-150200.3.7.1 SUSE Enterprise Storage 7.1:xmvn-minimal-4.0.0-150200.3.7.1 SUSE Enterprise Storage 7.1:xmvn-mojo-4.0.0-150200.3.7.8 SUSE Enterprise Storage 7.1:xmvn-resolve-4.0.0-150200.3.7.1 SUSE Enterprise Storage 7.1:xmvn-subst-4.0.0-150200.3.7.1 SUSE Enterprise Storage 7:maven-3.8.6-150200.4.9.8 SUSE Enterprise Storage 7:maven-lib-3.8.6-150200.4.9.8 SUSE Enterprise Storage 7:minlog-1.3.1-150200.3.7.8 SUSE Enterprise Storage 7:xmvn-4.0.0-150200.3.7.1 SUSE Enterprise Storage 7:xmvn-api-4.0.0-150200.3.7.1 SUSE Enterprise Storage 7:xmvn-connector-4.0.0-150200.3.7.3 SUSE Enterprise Storage 7:xmvn-core-4.0.0-150200.3.7.1 SUSE Enterprise Storage 7:xmvn-install-4.0.0-150200.3.7.1 SUSE Enterprise Storage 7:xmvn-minimal-4.0.0-150200.3.7.1 SUSE Enterprise Storage 7:xmvn-mojo-4.0.0-150200.3.7.8 SUSE Enterprise Storage 7:xmvn-resolve-4.0.0-150200.3.7.1 SUSE Enterprise Storage 7:xmvn-subst-4.0.0-150200.3.7.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:maven-3.8.6-150200.4.9.8 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:maven-lib-3.8.6-150200.4.9.8 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:minlog-1.3.1-150200.3.7.8 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:xmvn-4.0.0-150200.3.7.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:xmvn-api-4.0.0-150200.3.7.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:xmvn-connector-4.0.0-150200.3.7.3 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:xmvn-core-4.0.0-150200.3.7.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:xmvn-install-4.0.0-150200.3.7.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:xmvn-minimal-4.0.0-150200.3.7.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:xmvn-mojo-4.0.0-150200.3.7.8 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:xmvn-resolve-4.0.0-150200.3.7.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:xmvn-subst-4.0.0-150200.3.7.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:maven-3.8.6-150200.4.9.8 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:maven-lib-3.8.6-150200.4.9.8 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:minlog-1.3.1-150200.3.7.8 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:xmvn-4.0.0-150200.3.7.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:xmvn-api-4.0.0-150200.3.7.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:xmvn-connector-4.0.0-150200.3.7.3 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:xmvn-core-4.0.0-150200.3.7.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:xmvn-install-4.0.0-150200.3.7.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:xmvn-minimal-4.0.0-150200.3.7.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:xmvn-mojo-4.0.0-150200.3.7.8 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:xmvn-resolve-4.0.0-150200.3.7.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:xmvn-subst-4.0.0-150200.3.7.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:maven-3.8.6-150200.4.9.8 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:maven-lib-3.8.6-150200.4.9.8 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:minlog-1.3.1-150200.3.7.8 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xmvn-4.0.0-150200.3.7.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xmvn-api-4.0.0-150200.3.7.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xmvn-connector-4.0.0-150200.3.7.3 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xmvn-core-4.0.0-150200.3.7.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xmvn-install-4.0.0-150200.3.7.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xmvn-minimal-4.0.0-150200.3.7.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xmvn-mojo-4.0.0-150200.3.7.8 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xmvn-resolve-4.0.0-150200.3.7.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xmvn-subst-4.0.0-150200.3.7.1 SUSE Linux Enterprise Module for Development Tools 15 SP4:maven-3.8.6-150200.4.9.8 SUSE Linux Enterprise Module for Development Tools 15 SP4:maven-lib-3.8.6-150200.4.9.8 SUSE Linux Enterprise Module for Development Tools 15 SP4:minlog-1.3.1-150200.3.7.8 SUSE Linux Enterprise Module for Development Tools 15 SP4:xmvn-4.0.0-150200.3.7.1 SUSE Linux Enterprise Module for Development Tools 15 SP4:xmvn-api-4.0.0-150200.3.7.1 SUSE Linux Enterprise Module for Development Tools 15 SP4:xmvn-connector-4.0.0-150200.3.7.3 SUSE Linux Enterprise Module for Development Tools 15 SP4:xmvn-core-4.0.0-150200.3.7.1 SUSE Linux Enterprise Module for Development Tools 15 SP4:xmvn-install-4.0.0-150200.3.7.1 SUSE Linux Enterprise Module for Development Tools 15 SP4:xmvn-minimal-4.0.0-150200.3.7.1 SUSE Linux Enterprise Module for Development Tools 15 SP4:xmvn-mojo-4.0.0-150200.3.7.8 SUSE Linux Enterprise Module for Development Tools 15 SP4:xmvn-resolve-4.0.0-150200.3.7.1 SUSE Linux Enterprise Module for Development Tools 15 SP4:xmvn-subst-4.0.0-150200.3.7.1 SUSE Linux Enterprise Real Time 15 SP3:maven-3.8.6-150200.4.9.8 SUSE Linux Enterprise Real Time 15 SP3:maven-lib-3.8.6-150200.4.9.8 SUSE Linux Enterprise Real Time 15 SP3:minlog-1.3.1-150200.3.7.8 SUSE Linux Enterprise Real Time 15 SP3:xmvn-4.0.0-150200.3.7.1 SUSE Linux Enterprise Real Time 15 SP3:xmvn-api-4.0.0-150200.3.7.1 SUSE Linux Enterprise Real Time 15 SP3:xmvn-connector-4.0.0-150200.3.7.3 SUSE Linux Enterprise Real Time 15 SP3:xmvn-core-4.0.0-150200.3.7.1 SUSE Linux Enterprise Real Time 15 SP3:xmvn-install-4.0.0-150200.3.7.1 SUSE Linux Enterprise Real Time 15 SP3:xmvn-minimal-4.0.0-150200.3.7.1 SUSE Linux Enterprise Real Time 15 SP3:xmvn-mojo-4.0.0-150200.3.7.8 SUSE Linux Enterprise Real Time 15 SP3:xmvn-resolve-4.0.0-150200.3.7.1 SUSE Linux Enterprise Real Time 15 SP3:xmvn-subst-4.0.0-150200.3.7.1 SUSE Linux Enterprise Server 15 SP2-LTSS:maven-3.8.6-150200.4.9.8 SUSE Linux Enterprise Server 15 SP2-LTSS:maven-lib-3.8.6-150200.4.9.8 SUSE Linux Enterprise Server 15 SP2-LTSS:minlog-1.3.1-150200.3.7.8 SUSE Linux Enterprise Server 15 SP2-LTSS:xmvn-4.0.0-150200.3.7.1 SUSE Linux Enterprise Server 15 SP2-LTSS:xmvn-api-4.0.0-150200.3.7.1 SUSE Linux Enterprise Server 15 SP2-LTSS:xmvn-connector-4.0.0-150200.3.7.3 SUSE Linux Enterprise Server 15 SP2-LTSS:xmvn-core-4.0.0-150200.3.7.1 SUSE Linux Enterprise Server 15 SP2-LTSS:xmvn-install-4.0.0-150200.3.7.1 SUSE Linux Enterprise Server 15 SP2-LTSS:xmvn-minimal-4.0.0-150200.3.7.1 SUSE Linux Enterprise Server 15 SP2-LTSS:xmvn-mojo-4.0.0-150200.3.7.8 SUSE Linux Enterprise Server 15 SP2-LTSS:xmvn-resolve-4.0.0-150200.3.7.1 SUSE Linux Enterprise Server 15 SP2-LTSS:xmvn-subst-4.0.0-150200.3.7.1 SUSE Linux Enterprise Server 15 SP3-LTSS:maven-3.8.6-150200.4.9.8 SUSE Linux Enterprise Server 15 SP3-LTSS:maven-lib-3.8.6-150200.4.9.8 SUSE Linux Enterprise Server 15 SP3-LTSS:minlog-1.3.1-150200.3.7.8 SUSE Linux Enterprise Server 15 SP3-LTSS:xmvn-4.0.0-150200.3.7.1 SUSE Linux Enterprise Server 15 SP3-LTSS:xmvn-api-4.0.0-150200.3.7.1 SUSE Linux Enterprise Server 15 SP3-LTSS:xmvn-connector-4.0.0-150200.3.7.3 SUSE Linux Enterprise Server 15 SP3-LTSS:xmvn-core-4.0.0-150200.3.7.1 SUSE Linux Enterprise Server 15 SP3-LTSS:xmvn-install-4.0.0-150200.3.7.1 SUSE Linux Enterprise Server 15 SP3-LTSS:xmvn-minimal-4.0.0-150200.3.7.1 SUSE Linux Enterprise Server 15 SP3-LTSS:xmvn-mojo-4.0.0-150200.3.7.8 SUSE Linux Enterprise Server 15 SP3-LTSS:xmvn-resolve-4.0.0-150200.3.7.1 SUSE Linux Enterprise Server 15 SP3-LTSS:xmvn-subst-4.0.0-150200.3.7.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:maven-3.8.6-150200.4.9.8 SUSE Linux Enterprise Server for SAP Applications 15 SP2:maven-lib-3.8.6-150200.4.9.8 SUSE Linux Enterprise Server for SAP Applications 15 SP2:minlog-1.3.1-150200.3.7.8 SUSE Linux Enterprise Server for SAP Applications 15 SP2:xmvn-4.0.0-150200.3.7.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:xmvn-api-4.0.0-150200.3.7.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:xmvn-connector-4.0.0-150200.3.7.3 SUSE Linux Enterprise Server for SAP Applications 15 SP2:xmvn-core-4.0.0-150200.3.7.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:xmvn-install-4.0.0-150200.3.7.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:xmvn-minimal-4.0.0-150200.3.7.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:xmvn-mojo-4.0.0-150200.3.7.8 SUSE Linux Enterprise Server for SAP Applications 15 SP2:xmvn-resolve-4.0.0-150200.3.7.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:xmvn-subst-4.0.0-150200.3.7.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:maven-3.8.6-150200.4.9.8 SUSE Linux Enterprise Server for SAP Applications 15 SP3:maven-lib-3.8.6-150200.4.9.8 SUSE Linux Enterprise Server for SAP Applications 15 SP3:minlog-1.3.1-150200.3.7.8 SUSE Linux Enterprise Server for SAP Applications 15 SP3:xmvn-4.0.0-150200.3.7.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:xmvn-api-4.0.0-150200.3.7.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:xmvn-connector-4.0.0-150200.3.7.3 SUSE Linux Enterprise Server for SAP Applications 15 SP3:xmvn-core-4.0.0-150200.3.7.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:xmvn-install-4.0.0-150200.3.7.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:xmvn-minimal-4.0.0-150200.3.7.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:xmvn-mojo-4.0.0-150200.3.7.8 SUSE Linux Enterprise Server for SAP Applications 15 SP3:xmvn-resolve-4.0.0-150200.3.7.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:xmvn-subst-4.0.0-150200.3.7.1 SUSE Manager Server Module 4.3:antlr3-java-3.5.3-150200.3.11.8 openSUSE Leap 15.4:antlr3-bootstrap-tool-3.5.3-150200.3.11.8 openSUSE Leap 15.4:antlr3-java-3.5.3-150200.3.11.8 openSUSE Leap 15.4:antlr3-java-javadoc-3.5.3-150200.3.11.8 openSUSE Leap 15.4:antlr3-javadoc-3.5.3-150200.3.11.8 openSUSE Leap 15.4:antlr3-tool-3.5.3-150200.3.11.8 openSUSE Leap 15.4:maven-3.8.6-150200.4.9.8 openSUSE Leap 15.4:maven-javadoc-3.8.6-150200.4.9.8 openSUSE Leap 15.4:maven-lib-3.8.6-150200.4.9.8 openSUSE Leap 15.4:minlog-1.3.1-150200.3.7.8 openSUSE Leap 15.4:minlog-javadoc-1.3.1-150200.3.7.8 openSUSE Leap 15.4:sbt-0.13.18-150200.4.7.8 openSUSE Leap 15.4:sbt-bootstrap-0.13.18-150200.4.7.8 openSUSE Leap 15.4:xmvn-4.0.0-150200.3.7.1 openSUSE Leap 15.4:xmvn-api-4.0.0-150200.3.7.1 openSUSE Leap 15.4:xmvn-connector-4.0.0-150200.3.7.3 openSUSE Leap 15.4:xmvn-connector-javadoc-4.0.0-150200.3.7.3 openSUSE Leap 15.4:xmvn-core-4.0.0-150200.3.7.1 openSUSE Leap 15.4:xmvn-install-4.0.0-150200.3.7.1 openSUSE Leap 15.4:xmvn-minimal-4.0.0-150200.3.7.1 openSUSE Leap 15.4:xmvn-mojo-4.0.0-150200.3.7.8 openSUSE Leap 15.4:xmvn-mojo-javadoc-4.0.0-150200.3.7.8 openSUSE Leap 15.4:xmvn-parent-4.0.0-150200.3.7.1 openSUSE Leap 15.4:xmvn-resolve-4.0.0-150200.3.7.1 openSUSE Leap 15.4:xmvn-subst-4.0.0-150200.3.7.1 openSUSE Leap 15.4:xmvn-tools-javadoc-4.0.0-150200.3.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20232097-1/ https://www.suse.com/security/cve/CVE-2021-42550.html CVE-2021-42550 https://bugzilla.suse.com/1193795 SUSE Bug 1193795