This is a duplicate of CVE-2021-28421, which has been already fixed in Leap 15.2 package. Reassigned back to security team.