Oval Definition:	oval:org.opensuse.security:def:51024
Revision Date: 2020-12-01 Version: 1 Title: Security update for python-pip (Important) Description: This update for python-pip fixes the following issues: - Fixed a directory traversal in _download_http_url() (bsc#1176262 CVE-2019-20916) Family: unix Class: patch Status: Reference(s): 1055186 1058115 1065600 1065729 1094244 1107343 1112178 1113956 1124593 1136666 1140683 1140709 1145575 1145738 1145739 1145740 1145741 1145742 1149841 1151021 1152148 1152472 1152489 1153095 1153259 1153274 1154353 1154366 1155518 1155784 1156395 1158696 1159692 1163524 1164692 1164825 1164860 1165629 1166751 1166965 1167527 1169972 1170232 1170774 1171068 1171558 1171688 1171742 1172073 1172402 1172538 1172757 1172873 1173017 1173060 1173115 1173274 1173674 1173746 1173902 1173994 1174154 1174358 1174748 1174899 1175228 1175520 1175568 1175667 1175691 1175749 1175882 1176011 1176019 1176022 1176038 1176069 1176137 1176235 1176236 1176237 1176242 1176262 1176278 1176316 1176317 1176318 1176319 1176320 1176321 1176357 1176358 1176359 1176360 1176361 1176362 1176363 1176364 1176365 1176366 1176367 1176381 1176395 1176400 1176410 1176423 1176449 1176482 1176486 1176507 1176536 1176537 1176538 1176539 1176540 1176541 1176542 1176544 1176545 1176546 1176548 1176558 1176559 1176587 1176659 1176698 1176699 1176700 1176721 1176722 1176725 1176732 1176763 1176775 1176788 1176789 1176833 1176869 1176877 1176925 1176935 1176946 1176950 1176962 1176966 1176980 1176990 1177021 1177027 1177030 1177041 1177042 1177043 1177044 1177121 1177206 1177258 1177291 1177293 1177294 1177295 1177296 1177340 1177511 1177613 CVE-2017-16541 CVE-2018-12376 CVE-2018-12377 CVE-2018-12378 CVE-2018-12379 CVE-2018-12381 CVE-2019-10081 CVE-2019-10082 CVE-2019-10092 CVE-2019-10097 CVE-2019-10098 CVE-2019-12838 CVE-2019-14835 CVE-2019-17569 CVE-2019-19727 CVE-2019-19728 CVE-2019-20916 CVE-2019-7164 CVE-2019-7548 CVE-2019-9517 CVE-2020-0404 CVE-2020-0404 CVE-2020-0427 CVE-2020-0427 CVE-2020-0431 CVE-2020-0431 CVE-2020-0432 CVE-2020-0432 CVE-2020-0556 CVE-2020-12398 CVE-2020-12405 CVE-2020-12406 CVE-2020-12410 CVE-2020-14318 CVE-2020-14323 CVE-2020-14381 CVE-2020-14383 CVE-2020-14385 CVE-2020-14386 CVE-2020-14390 CVE-2020-14390 CVE-2020-14422 CVE-2020-15503 CVE-2020-15719 CVE-2020-1749 CVE-2020-1935 CVE-2020-1938 CVE-2020-25212 CVE-2020-25212 CVE-2020-25284 CVE-2020-25284 CVE-2020-25641 CVE-2020-25643 CVE-2020-25645 CVE-2020-26088 CVE-2020-26088 CVE-2020-8027 SUSE-SU-2018:2890-1 SUSE-SU-2019:2237-1 SUSE-SU-2019:2253-2 SUSE-SU-2020:0110-1 SUSE-SU-2020:0631-1 SUSE-SU-2020:0918-1 SUSE-SU-2020:1591-2 SUSE-SU-2020:2029-1 SUSE-SU-2020:2712-1 SUSE-SU-2020:3014-1 SUSE-SU-2020:3087-1 SUSE-SU-2020:3565-1 Platform(s): SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for High Performance Computing 15 SP1 SUSE Linux Enterprise Module for Legacy Software 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 SUSE Linux Enterprise Module for Realtime packages 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Web Scripting 15 SP1 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information freetype2-2.3.7-25.32 is installed OR freetype2-32bit-2.3.7-25.32 is installed OR freetype2-devel-2.3.7-25.32 is installed OR ft2demos-2.3.7-25.32 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information strongswan-4.4.0-6.32 is installed OR strongswan-doc-4.4.0-6.32 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information libpng16-16-1.6.8-2 is installed OR libpng16-16-32bit-1.6.8-2 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information dbus-1-glib-0.100.2-3 is installed OR dbus-1-glib-32bit-0.100.2-3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND argyllcms-1.6.3-3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information audiofile-0.3.6-10 is installed OR libaudiofile1-0.3.6-10 is installed OR libaudiofile1-32bit-0.3.6-10 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information evince-3.20.2-6.22 is installed OR evince-browser-plugin-3.20.2-6.22 is installed OR evince-lang-3.20.2-6.22 is installed OR evince-plugin-djvudocument-3.20.2-6.22 is installed OR evince-plugin-dvidocument-3.20.2-6.22 is installed OR evince-plugin-pdfdocument-3.20.2-6.22 is installed OR evince-plugin-psdocument-3.20.2-6.22 is installed OR evince-plugin-tiffdocument-3.20.2-6.22 is installed OR evince-plugin-xpsdocument-3.20.2-6.22 is installed OR libevdocument3-4-3.20.2-6.22 is installed OR libevview3-3-3.20.2-6.22 is installed OR nautilus-evince-3.20.2-6.22 is installed OR typelib-1_0-EvinceDocument-3_0-3.20.2-6.22 is installed OR typelib-1_0-EvinceView-3_0-3.20.2-6.22 is installed Definition Synopsis SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1 is installed AND Package Information python-SQLAlchemy-1.2.14-6.3 is installed OR python2-SQLAlchemy-1.2.14-6.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed AND Package Information python-pip-10.0.1-3.6 is installed OR python3-pip-10.0.1-3.6 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 is installed AND Package Information MozillaFirefox-60.2.0-3.10 is installed OR MozillaFirefox-branding-SLE-60-4.3 is installed OR MozillaFirefox-devel-60.2.0-3.10 is installed OR MozillaFirefox-translations-common-60.2.0-3.10 is installed OR MozillaFirefox-translations-other-60.2.0-3.10 is installed Definition Synopsis SUSE Linux Enterprise Module for High Performance Computing 15 SP1 is installed AND Package Information libpmi0-18.08.9-3.10 is installed OR libslurm33-18.08.9-3.10 is installed OR perl-slurm-18.08.9-3.10 is installed OR slurm-18.08.9-3.10 is installed OR slurm-auth-none-18.08.9-3.10 is installed OR slurm-config-18.08.9-3.10 is installed OR slurm-config-man-18.08.9-3.10 is installed OR slurm-devel-18.08.9-3.10 is installed OR slurm-doc-18.08.9-3.10 is installed OR slurm-lua-18.08.9-3.10 is installed OR slurm-munge-18.08.9-3.10 is installed OR slurm-node-18.08.9-3.10 is installed OR slurm-pam_slurm-18.08.9-3.10 is installed OR slurm-plugins-18.08.9-3.10 is installed OR slurm-slurmdbd-18.08.9-3.10 is installed OR slurm-sql-18.08.9-3.10 is installed OR slurm-sview-18.08.9-3.10 is installed OR slurm-torque-18.08.9-3.10 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 SP1 is installed AND Package Information openldap2-2.4.46-9.37 is installed OR openldap2-back-meta-2.4.46-9.37 is installed OR openldap2-back-perl-2.4.46-9.37 is installed OR openldap2-ppolicy-check-password-1.2-9.37 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND Package Information kernel-livepatch-4_12_14-150_27-default-2-2 is installed OR kernel-livepatch-SLE15_Update_12-2-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 is installed AND Package Information libpython3_6m1_0-32bit-3.6.10-3.56 is installed OR python3-3.6.10-3.56 is installed OR python3-32bit-3.6.10-3.56 is installed OR python3-base-3.6.10-3.56 is installed OR python3-base-32bit-3.6.10-3.56 is installed OR python3-doc-3.6.10-3.56 is installed OR python3-testsuite-3.6.10-3.56 is installed Definition Synopsis SUSE Linux Enterprise Module for Realtime packages 15 SP1 is installed AND Package Information cluster-md-kmp-rt-4.12.14-14.36 is installed OR dlm-kmp-rt-4.12.14-14.36 is installed OR gfs2-kmp-rt-4.12.14-14.36 is installed OR kernel-devel-rt-4.12.14-14.36 is installed OR kernel-rt-4.12.14-14.36 is installed OR kernel-rt-base-4.12.14-14.36 is installed OR kernel-rt-devel-4.12.14-14.36 is installed OR kernel-rt_debug-4.12.14-14.36 is installed OR kernel-rt_debug-devel-4.12.14-14.36 is installed OR kernel-source-rt-4.12.14-14.36 is installed OR kernel-syms-rt-4.12.14-14.36 is installed OR ocfs2-kmp-rt-4.12.14-14.36 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND Package Information apache2-2.4.33-3.21 is installed OR apache2-devel-2.4.33-3.21 is installed OR apache2-doc-2.4.33-3.21 is installed OR apache2-prefork-2.4.33-3.21 is installed OR apache2-utils-2.4.33-3.21 is installed OR apache2-worker-2.4.33-3.21 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 SP1 is installed AND Package Information tomcat-9.0.31-4.22 is installed OR tomcat-admin-webapps-9.0.31-4.22 is installed OR tomcat-el-3_0-api-9.0.31-4.22 is installed OR tomcat-jsp-2_3-api-9.0.31-4.22 is installed OR tomcat-lib-9.0.31-4.22 is installed OR tomcat-servlet-4_0-api-9.0.31-4.22 is installed OR tomcat-webapps-9.0.31-4.22 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND squid-3.3.13-4 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_74-60_64_60-default-3-2 is installed OR kgraft-patch-3_12_74-60_64_60-xen-3-2 is installed OR kgraft-patch-SLE12-SP1_Update_21-3-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information automake-1.13.4-6 is installed OR m4-1.4.16-15 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information dovecot22-2.2.31-19.17 is installed OR dovecot22-backend-mysql-2.2.31-19.17 is installed OR dovecot22-backend-pgsql-2.2.31-19.17 is installed OR dovecot22-backend-sqlite-2.2.31-19.17 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information libopenssl-devel-1.0.2j-60.39 is installed OR libopenssl1_0_0-1.0.2j-60.39 is installed OR libopenssl1_0_0-32bit-1.0.2j-60.39 is installed OR libopenssl1_0_0-hmac-1.0.2j-60.39 is installed OR libopenssl1_0_0-hmac-32bit-1.0.2j-60.39 is installed OR openssl-1.0.2j-60.39 is installed OR openssl-doc-1.0.2j-60.39 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information kgraft-patch-4_4_103-92_53-default-9-2 is installed OR kgraft-patch-SLE12-SP2_Update_16-9-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information elfutils-0.158-6 is installed OR libasm1-0.158-6 is installed OR libasm1-32bit-0.158-6 is installed OR libdw1-0.158-6 is installed OR libdw1-32bit-0.158-6 is installed OR libebl1-0.158-6 is installed OR libebl1-32bit-0.158-6 is installed OR libelf1-0.158-6 is installed OR libelf1-32bit-0.158-6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND Package Information dovecot22-2.2.31-19.17 is installed OR dovecot22-backend-mysql-2.2.31-19.17 is installed OR dovecot22-backend-pgsql-2.2.31-19.17 is installed OR dovecot22-backend-sqlite-2.2.31-19.17 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information kgraft-patch-4_4_162-94_69-default-7-2 is installed OR kgraft-patch-SLE12-SP3_Update_21-7-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information java-1_7_1-ibm-1.7.1_sr4.50-38.41 is installed OR java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41 is installed OR java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41 is installed OR java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information ImageMagick-6.8.8.1-71.126 is installed OR ImageMagick-config-6-SUSE-6.8.8.1-71.126 is installed OR ImageMagick-config-6-upstream-6.8.8.1-71.126 is installed OR libMagickCore-6_Q16-1-6.8.8.1-71.126 is installed OR libMagickWand-6_Q16-1-6.8.8.1-71.126 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND hardlink-1.0-6 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information libdcerpc-binding0-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libdcerpc-binding0-32bit-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libdcerpc-devel-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libdcerpc-samr-devel-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libdcerpc-samr0-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libdcerpc0-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libdcerpc0-32bit-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libndr-devel-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libndr-krb5pac-devel-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libndr-krb5pac0-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libndr-krb5pac0-32bit-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libndr-nbt-devel-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libndr-nbt0-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libndr-nbt0-32bit-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libndr-standard-devel-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libndr-standard0-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libndr-standard0-32bit-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libndr0-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libndr0-32bit-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libnetapi-devel-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libnetapi0-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libnetapi0-32bit-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libsamba-credentials-devel-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libsamba-credentials0-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libsamba-credentials0-32bit-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libsamba-errors-devel-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libsamba-errors0-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libsamba-errors0-32bit-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libsamba-hostconfig-devel-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libsamba-hostconfig0-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libsamba-hostconfig0-32bit-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libsamba-passdb-devel-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libsamba-passdb0-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libsamba-passdb0-32bit-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libsamba-policy-devel-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libsamba-policy0-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libsamba-util-devel-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libsamba-util0-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libsamba-util0-32bit-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libsamdb-devel-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libsamdb0-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libsamdb0-32bit-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libsmbclient-devel-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libsmbclient0-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libsmbclient0-32bit-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libsmbconf-devel-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libsmbconf0-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libsmbconf0-32bit-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libsmbldap-devel-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libsmbldap2-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libsmbldap2-32bit-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libtevent-util-devel-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libtevent-util0-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libtevent-util0-32bit-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libwbclient-devel-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libwbclient0-4.7.11+git.280.25dfd9a947d-4.51 is installed OR libwbclient0-32bit-4.7.11+git.280.25dfd9a947d-4.51 is installed OR samba-4.7.11+git.280.25dfd9a947d-4.51 is installed OR samba-client-4.7.11+git.280.25dfd9a947d-4.51 is installed OR samba-client-32bit-4.7.11+git.280.25dfd9a947d-4.51 is installed OR samba-core-devel-4.7.11+git.280.25dfd9a947d-4.51 is installed OR samba-libs-4.7.11+git.280.25dfd9a947d-4.51 is installed OR samba-libs-32bit-4.7.11+git.280.25dfd9a947d-4.51 is installed OR samba-winbind-4.7.11+git.280.25dfd9a947d-4.51 is installed OR samba-winbind-32bit-4.7.11+git.280.25dfd9a947d-4.51 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information libraw-0.18.9-3.11 is installed OR libraw-devel-0.18.9-3.11 is installed OR libraw16-0.18.9-3.11 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP2 is installed AND Package Information MozillaThunderbird-68.9.0-3.85 is installed OR MozillaThunderbird-translations-common-68.9.0-3.85 is installed OR MozillaThunderbird-translations-other-68.9.0-3.85 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND Package Information git-2.12.3-27.5 is installed OR git-core-2.12.3-27.5 is installed OR git-doc-2.12.3-27.5 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND python-tablib-0.9.11-3 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND Package Information ardana-monasca-8.0+git.1535031421.9262a47-3.12 is installed OR ardana-spark-8.0+git.1534267176.a5f3a22-3.6 is installed OR kafka-0.10.2.2-5.6 is installed OR openstack-monasca-api-2.2.1~dev24-3.6 is installed OR python-monasca-api-2.2.1~dev24-3.6 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information java-1_7_1-ibm-1.7.1_sr4.50-38.41 is installed OR java-1_7_1-ibm-alsa-1.7.1_sr4.50-38.41 is installed OR java-1_7_1-ibm-jdbc-1.7.1_sr4.50-38.41 is installed OR java-1_7_1-ibm-plugin-1.7.1_sr4.50-38.41 is installed
BACK