Oval Definition:	oval:org.opensuse.security:def:2589
Revision Date: 2020-12-02 Version: 1 Title: Security update for python-setuptools (Important) Description: This update for python-setuptools fixes the following issues: - Fixed a directory traversal in _download_http_url() (bsc#1176262 CVE-2019-20916) Family: unix Class: patch Status: Reference(s): 1046299 1046303 1046305 1050244 1050536 1050545 1051510 1055186 1061840 1064802 1065600 1066129 1073513 1082635 1083647 1086323 1087092 1089644 1089811 1090631 1093205 1096254 1097583 1097584 1097585 1097586 1097587 1097588 1098291 1100331 1101674 1104841 1109158 1114279 1115375 1116451 1117507 1117508 1117665 1119069 1119461 1119465 1120374 1121874 1121967 1122983 1123034 1123080 1123131 1123455 1124062 1124869 1127760 1127857 1128845 1129528 1133140 1134303 1135189 1135228 1135642 1135854 1135873 1135966 1135967 1137040 1137799 1137990 1138190 1138920 1139073 1139649 1140090 1140709 1140729 1140845 1140868 1140883 1141600 1141619 1141780 1141782 1141783 1141784 1141785 1141786 1141787 1141789 1142160 1142413 1142635 1142667 1143409 1143706 1144338 1144375 1144449 1144903 1145099 1146569 1146571 1146572 1146612 1146702 1148410 1149119 1149429 1150011 1150452 1150457 1150465 1150875 1151186 1151508 1152624 1152685 1152788 1152791 1153095 1153112 1153158 1153236 1153245 1153263 1153423 1153476 1153509 1153646 1153713 1153717 1153718 1153719 1153811 1153869 1153969 1154108 1154189 1154354 1154372 1154578 1154607 1154608 1154610 1154611 1154651 1154737 1154738 1154747 1154848 1154858 1154905 1155178 1155179 1155184 1155186 1155671 1176262 CVE-2018-10892 CVE-2018-12207 CVE-2018-12404 CVE-2018-16858 CVE-2018-18500 CVE-2018-18501 CVE-2018-18505 CVE-2018-19540 CVE-2018-19541 CVE-2019-0154 CVE-2019-0155 CVE-2019-1010006 CVE-2019-10220 CVE-2019-11135 CVE-2019-11709 CVE-2019-11711 CVE-2019-11712 CVE-2019-11713 CVE-2019-11715 CVE-2019-11717 CVE-2019-11719 CVE-2019-11729 CVE-2019-11730 CVE-2019-11757 CVE-2019-11758 CVE-2019-11759 CVE-2019-11760 CVE-2019-11761 CVE-2019-11762 CVE-2019-11763 CVE-2019-11764 CVE-2019-12838 CVE-2019-13509 CVE-2019-14271 CVE-2019-14822 CVE-2019-15142 CVE-2019-15143 CVE-2019-15144 CVE-2019-15145 CVE-2019-15903 CVE-2019-16232 CVE-2019-16233 CVE-2019-16234 CVE-2019-16995 CVE-2019-17056 CVE-2019-17133 CVE-2019-17666 CVE-2019-20916 CVE-2019-2745 CVE-2019-2762 CVE-2019-2766 CVE-2019-2769 CVE-2019-2786 CVE-2019-2816 CVE-2019-2842 CVE-2019-5736 CVE-2019-7317 CVE-2019-9811 SUSE-SU-2019:0273-1 SUSE-SU-2019:1869-1 SUSE-SU-2019:1894-1 SUSE-SU-2019:2021-1 SUSE-SU-2019:2052-1 SUSE-SU-2019:2117-1 SUSE-SU-2019:2387-1 SUSE-SU-2019:2452-1 SUSE-SU-2019:2512-1 SUSE-SU-2019:2871-1 SUSE-SU-2019:2989-1 SUSE-SU-2020:3566-1 Platform(s): SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise High Availability 12 SP2 SUSE Linux Enterprise High Availability 12 SP3 SUSE Linux Enterprise High Availability 12 SP4 SUSE Linux Enterprise High Availability 15 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Containers 15 SUSE Linux Enterprise Module for High Performance Computing 12 SUSE Linux Enterprise Module for High Performance Computing 15 SUSE Linux Enterprise Module for High Performance Computing 15 SP1 SUSE Linux Enterprise Module for Legacy Software 15 SUSE Linux Enterprise Module for Legacy Software 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Web Scripting 12 SUSE Linux Enterprise Module for Web Scripting 15 SUSE Linux Enterprise Module for Web Scripting 15 SP1 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 11-SECURITY SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for Rasperry Pi 12 SP2 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Package Hub for SUSE Linux Enterprise 12 Product(s): Definition Synopsis SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed AND Package Information python-keystoneclient-1.0.0-14 is installed OR python-keystoneclient-doc-1.0.0-14 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information bzip2-1.0.6-27 is installed OR libbz2-1-1.0.6-27 is installed OR libbz2-1-32bit-1.0.6-27 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information libquicktime-1.2.4-10 is installed OR libquicktime0-1.2.4-10 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information libblkid1-2.28-42 is installed OR libblkid1-32bit-2.28-42 is installed OR libfdisk1-2.28-42 is installed OR libmount1-2.28-42 is installed OR libmount1-32bit-2.28-42 is installed OR libsmartcols1-2.28-42 is installed OR libuuid-devel-2.28-42 is installed OR libuuid1-2.28-42 is installed OR libuuid1-32bit-2.28-42 is installed OR python-libmount-2.28-42 is installed OR util-linux-2.28-42 is installed OR util-linux-lang-2.28-42 is installed OR util-linux-systemd-2.28-42 is installed OR uuidd-2.28-42 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information libblkid1-2.29.2-7 is installed OR libblkid1-32bit-2.29.2-7 is installed OR libfdisk1-2.29.2-7 is installed OR libmount1-2.29.2-7 is installed OR libmount1-32bit-2.29.2-7 is installed OR libsmartcols1-2.29.2-7 is installed OR libuuid-devel-2.29.2-7 is installed OR libuuid1-2.29.2-7 is installed OR libuuid1-32bit-2.29.2-7 is installed OR python-libmount-2.29.2-7 is installed OR util-linux-2.29.2-7 is installed OR util-linux-lang-2.29.2-7 is installed OR util-linux-systemd-2.29.2-7 is installed OR uuidd-2.29.2-7 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP2 is installed AND ctdb-4.4.2-29 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP3 is installed AND ctdb-4.6.5+git.27.6afd48b1083-2 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP4 is installed AND fence-agents-4.2.1+git.1537269352.7b1fd536-1 is installed Definition Synopsis SUSE Linux Enterprise High Availability 15 is installed AND Package Information ctdb-4.7.8+git.86.94b6d10f7dd-4.15 is installed OR samba-4.7.8+git.86.94b6d10f7dd-4.15 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed AND Package Information python-setuptools-40.5.0-6.3 is installed OR python3-setuptools-40.5.0-6.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Containers 15 is installed AND Package Information containerd-1.2.6-5.16 is installed OR docker-19.03.1_ce-6.26 is installed OR docker-bash-completion-19.03.1_ce-6.26 is installed OR docker-libnetwork-0.7.0.1+gitr2800_fc5a7d91d54c-4.15 is installed OR docker-runc-1.0.0rc8+gitr3826_425e105d5a03-6.21 is installed OR golang-github-docker-libnetwork-0.7.0.1+gitr2800_fc5a7d91d54c-4.15 is installed Definition Synopsis SUSE Linux Enterprise Module for High Performance Computing 12 is installed AND Package Information libslurm29-16.05.8.1-5 is installed OR perl-slurm-16.05.8.1-5 is installed OR slurm-16.05.8.1-5 is installed OR slurm-auth-none-16.05.8.1-5 is installed OR slurm-devel-16.05.8.1-5 is installed OR slurm-doc-16.05.8.1-5 is installed OR slurm-lua-16.05.8.1-5 is installed OR slurm-munge-16.05.8.1-5 is installed OR slurm-pam_slurm-16.05.8.1-5 is installed OR slurm-plugins-16.05.8.1-5 is installed OR slurm-sched-wiki-16.05.8.1-5 is installed OR slurm-slurmdbd-16.05.8.1-5 is installed Definition Synopsis SUSE Linux Enterprise Module for High Performance Computing 15 is installed AND Package Information libpmi0_18_08-18.08.9-1.5 is installed OR libslurm33-18.08.9-1.5 is installed OR pdsh-2.33-7.6 is installed OR pdsh-dshgroup-2.33-7.6 is installed OR pdsh-genders-2.33-7.6 is installed OR pdsh-machines-2.33-7.6 is installed OR pdsh-netgroup-2.33-7.6 is installed OR pdsh-slurm-2.33-7.6 is installed OR pdsh-slurm_18_08-2.33-7.6 is installed OR perl-slurm_18_08-18.08.9-1.5 is installed OR slurm_18_08-18.08.9-1.5 is installed OR slurm_18_08-auth-none-18.08.9-1.5 is installed OR slurm_18_08-config-18.08.9-1.5 is installed OR slurm_18_08-devel-18.08.9-1.5 is installed OR slurm_18_08-doc-18.08.9-1.5 is installed OR slurm_18_08-lua-18.08.9-1.5 is installed OR slurm_18_08-munge-18.08.9-1.5 is installed OR slurm_18_08-node-18.08.9-1.5 is installed OR slurm_18_08-pam_slurm-18.08.9-1.5 is installed OR slurm_18_08-plugins-18.08.9-1.5 is installed OR slurm_18_08-slurmdbd-18.08.9-1.5 is installed OR slurm_18_08-sql-18.08.9-1.5 is installed OR slurm_18_08-torque-18.08.9-1.5 is installed Definition Synopsis SUSE Linux Enterprise Module for High Performance Computing 15 SP1 is installed AND Package Information libmunge2-0.5.13-4.3 is installed OR munge-0.5.13-4.3 is installed OR munge-devel-0.5.13-4.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 is installed AND Package Information libopenssl-1_0_0-devel-1.0.2n-3.3 is installed OR libopenssl1_0_0-1.0.2n-3.3 is installed OR openssl-1_0_0-1.0.2n-3.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 SP1 is installed AND Package Information java-1_8_0-ibm-1.8.0_sr5.35-3.20 is installed OR java-1_8_0-ibm-alsa-1.8.0_sr5.35-3.20 is installed OR java-1_8_0-ibm-devel-1.8.0_sr5.35-3.20 is installed OR java-1_8_0-ibm-plugin-1.8.0_sr5.35-3.20 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND kernel-livepatch-tools-1.1-5.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND Package Information kernel-livepatch-4_12_14-197_7-default-2-2 is installed OR kernel-livepatch-SLE15-SP1_Update_2-2-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed AND Package Information MozillaFirefox-60.8.0-3.51 is installed OR MozillaFirefox-branding-upstream-60.8.0-3.51 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed AND Package Information bzip2-1.0.6-5.3 is installed OR bzip2-doc-1.0.6-5.3 is installed OR libbz2-devel-32bit-1.0.6-5.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 is installed AND Package Information ovmf-2017+git1510945757.b2662641d5-5.11 is installed OR ovmf-tools-2017+git1510945757.b2662641d5-5.11 is installed OR qemu-ovmf-x86_64-2017+git1510945757.b2662641d5-5.11 is installed OR qemu-uefi-aarch64-2017+git1510945757.b2662641d5-5.11 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND Package Information libvirt-5.1.0-8.3 is installed OR libvirt-admin-5.1.0-8.3 is installed OR libvirt-bash-completion-5.1.0-8.3 is installed OR libvirt-client-5.1.0-8.3 is installed OR libvirt-daemon-5.1.0-8.3 is installed OR libvirt-daemon-config-network-5.1.0-8.3 is installed OR libvirt-daemon-config-nwfilter-5.1.0-8.3 is installed OR libvirt-daemon-driver-interface-5.1.0-8.3 is installed OR libvirt-daemon-driver-libxl-5.1.0-8.3 is installed OR libvirt-daemon-driver-lxc-5.1.0-8.3 is installed OR libvirt-daemon-driver-network-5.1.0-8.3 is installed OR libvirt-daemon-driver-nodedev-5.1.0-8.3 is installed OR libvirt-daemon-driver-nwfilter-5.1.0-8.3 is installed OR libvirt-daemon-driver-qemu-5.1.0-8.3 is installed OR libvirt-daemon-driver-secret-5.1.0-8.3 is installed OR libvirt-daemon-driver-storage-5.1.0-8.3 is installed OR libvirt-daemon-driver-storage-core-5.1.0-8.3 is installed OR libvirt-daemon-driver-storage-disk-5.1.0-8.3 is installed OR libvirt-daemon-driver-storage-iscsi-5.1.0-8.3 is installed OR libvirt-daemon-driver-storage-logical-5.1.0-8.3 is installed OR libvirt-daemon-driver-storage-mpath-5.1.0-8.3 is installed OR libvirt-daemon-driver-storage-rbd-5.1.0-8.3 is installed OR libvirt-daemon-driver-storage-scsi-5.1.0-8.3 is installed OR libvirt-daemon-hooks-5.1.0-8.3 is installed OR libvirt-daemon-lxc-5.1.0-8.3 is installed OR libvirt-daemon-qemu-5.1.0-8.3 is installed OR libvirt-daemon-xen-5.1.0-8.3 is installed OR libvirt-devel-5.1.0-8.3 is installed OR libvirt-doc-5.1.0-8.3 is installed OR libvirt-lock-sanlock-5.1.0-8.3 is installed OR libvirt-nss-5.1.0-8.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 12 is installed AND Package Information libpython3_4m1_0-3.4.1-2 is installed OR python3-base-3.4.1-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 is installed AND Package Information apache2-mod_php7-7.2.5-4.32 is installed OR php7-7.2.5-4.32 is installed OR php7-bcmath-7.2.5-4.32 is installed OR php7-bz2-7.2.5-4.32 is installed OR php7-calendar-7.2.5-4.32 is installed OR php7-ctype-7.2.5-4.32 is installed OR php7-curl-7.2.5-4.32 is installed OR php7-dba-7.2.5-4.32 is installed OR php7-devel-7.2.5-4.32 is installed OR php7-dom-7.2.5-4.32 is installed OR php7-enchant-7.2.5-4.32 is installed OR php7-exif-7.2.5-4.32 is installed OR php7-fastcgi-7.2.5-4.32 is installed OR php7-fileinfo-7.2.5-4.32 is installed OR php7-fpm-7.2.5-4.32 is installed OR php7-ftp-7.2.5-4.32 is installed OR php7-gd-7.2.5-4.32 is installed OR php7-gettext-7.2.5-4.32 is installed OR php7-gmp-7.2.5-4.32 is installed OR php7-iconv-7.2.5-4.32 is installed OR php7-intl-7.2.5-4.32 is installed OR php7-json-7.2.5-4.32 is installed OR php7-ldap-7.2.5-4.32 is installed OR php7-mbstring-7.2.5-4.32 is installed OR php7-mysql-7.2.5-4.32 is installed OR php7-odbc-7.2.5-4.32 is installed OR php7-opcache-7.2.5-4.32 is installed OR php7-openssl-7.2.5-4.32 is installed OR php7-pcntl-7.2.5-4.32 is installed OR php7-pdo-7.2.5-4.32 is installed OR php7-pear-7.2.5-4.32 is installed OR php7-pear-Archive_Tar-7.2.5-4.32 is installed OR php7-pgsql-7.2.5-4.32 is installed OR php7-phar-7.2.5-4.32 is installed OR php7-posix-7.2.5-4.32 is installed OR php7-shmop-7.2.5-4.32 is installed OR php7-snmp-7.2.5-4.32 is installed OR php7-soap-7.2.5-4.32 is installed OR php7-sockets-7.2.5-4.32 is installed OR php7-sodium-7.2.5-4.32 is installed OR php7-sqlite-7.2.5-4.32 is installed OR php7-sysvmsg-7.2.5-4.32 is installed OR php7-sysvsem-7.2.5-4.32 is installed OR php7-sysvshm-7.2.5-4.32 is installed OR php7-tokenizer-7.2.5-4.32 is installed OR php7-wddx-7.2.5-4.32 is installed OR php7-xmlreader-7.2.5-4.32 is installed OR php7-xmlrpc-7.2.5-4.32 is installed OR php7-xmlwriter-7.2.5-4.32 is installed OR php7-xsl-7.2.5-4.32 is installed OR php7-zip-7.2.5-4.32 is installed OR php7-zlib-7.2.5-4.32 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 SP1 is installed AND Package Information nodejs8-8.15.1-3.17 is installed OR nodejs8-devel-8.15.1-3.17 is installed OR nodejs8-docs-8.15.1-3.17 is installed OR npm8-8.15.1-3.17 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information apache2-2.4.10-6 is installed OR apache2-doc-2.4.10-6 is installed OR apache2-example-pages-2.4.10-6 is installed OR apache2-prefork-2.4.10-6 is installed OR apache2-utils-2.4.10-6 is installed OR apache2-worker-2.4.10-6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information gpgme-1.5.1-1 is installed OR libgpgme11-1.5.1-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information DirectFB-1.7.1-6 is installed OR lib++dfb-1_7-1-1.7.1-6 is installed OR libdirectfb-1_7-1-1.7.1-6 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND perl-Tk-804.031-3 is installed Definition Synopsis SUSE Linux Enterprise Server for Rasperry Pi 12 SP2 is installed AND Package Information gvim-7.4.326-7.1 is installed OR vim-7.4.326-7.1 is installed OR vim-data-7.4.326-7.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND Package Information libmysqlclient-devel-10.0.16-15.1 is installed OR libmysqlclient_r18-10.0.16-15.1 is installed OR libmysqld-devel-10.0.16-15.1 is installed OR libmysqld18-10.0.16-15.1 is installed OR mariadb-10.0.16-15.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND libsmi-devel-0.4.8-18.63 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information java-1_7_0-openjdk-plugin-1.6.1-2.3.1 is installed OR java-1_8_0-openjdk-plugin-1.6.1-2.4.21 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information ffmpeg-3.4.2-4.5 is installed OR libavcodec-devel-3.4.2-4.5 is installed OR libavformat-devel-3.4.2-4.5 is installed OR libavformat57-3.4.2-4.5 is installed OR libavresample-devel-3.4.2-4.5 is installed OR libavresample3-3.4.2-4.5 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information MozillaThunderbird-60.7.0-3.33 is installed OR MozillaThunderbird-translations-common-60.7.0-3.33 is installed OR MozillaThunderbird-translations-other-60.7.0-3.33 is installed Definition Synopsis SUSE Package Hub for SUSE Linux Enterprise 12 is installed AND Package Information irssi-0.8.20-9 is installed OR irssi-devel-0.8.20-9 is installed
BACK