Oval Definition:	oval:org.opensuse.security:def:51027
Revision Date: 2020-12-01 Version: 1 Title: Security update for python-pip (Important) Description: This update for python-pip fixes the following issues: - Fixed a directory traversal in _download_http_url() (bsc#1176262 CVE-2019-20916) Family: unix Class: patch Status: Reference(s): 1055014 1061843 1065600 1065729 1066382 1077428 1084671 1092920 1106171 1106172 1106173 1106195 1106383 1107410 1107411 1107412 1107413 1107420 1107421 1107422 1107423 1107426 1107581 1108027 1109105 1112178 1131277 1133495 1134760 1144065 1144348 1144352 1144903 1149742 1151377 1153108 1153158 1153161 1154091 1154256 1155207 1155574 1155798 1156015 1156213 1156402 1156482 1158485 1159814 1161436 1162108 1168468 1170415 1171558 1171675 1172004 1173432 1173477 1174117 1174121 1174538 1174748 1175599 1175718 1176019 1176262 1176354 1176381 1176485 1176560 1176588 1176713 1176723 1176979 1177027 1177086 1177101 1177121 1177193 1177194 1177206 1177258 1177271 1177281 1177283 1177284 1177285 1177286 1177297 1177351 1177352 1177384 1177410 1177411 1177470 1177511 1177687 1177719 1177740 1177749 1177750 1177753 1177754 1177755 1177766 1177855 1177856 1177861 1178003 1178027 1178166 1178185 1178187 1178188 1178202 1178234 1178330 954532 CVE-2017-18922 CVE-2018-15908 CVE-2018-15909 CVE-2018-15910 CVE-2018-15911 CVE-2018-16509 CVE-2018-16510 CVE-2018-16511 CVE-2018-16513 CVE-2018-16539 CVE-2018-16540 CVE-2018-16541 CVE-2018-16542 CVE-2018-16543 CVE-2018-16585 CVE-2018-16802 CVE-2018-17183 CVE-2019-10214 CVE-2019-10220 CVE-2019-14491 CVE-2019-14492 CVE-2019-15939 CVE-2019-17133 CVE-2019-20386 CVE-2019-20916 CVE-2019-2201 CVE-2019-5068 CVE-2020-0430 CVE-2020-12693 CVE-2020-13934 CVE-2020-13935 CVE-2020-14351 CVE-2020-15652 CVE-2020-15659 CVE-2020-16120 CVE-2020-1712 CVE-2020-25212 CVE-2020-25285 CVE-2020-25641 CVE-2020-25643 CVE-2020-25645 CVE-2020-25656 CVE-2020-27673 CVE-2020-27675 CVE-2020-6463 CVE-2020-6514 CVE-2020-7069 CVE-2020-7070 CVE-2020-8694 SUSE-SU-2018:2976-1 SUSE-SU-2019:2340-1 SUSE-SU-2019:3192-2 SUSE-SU-2020:0111-2 SUSE-SU-2020:0335-1 SUSE-SU-2020:1873-1 SUSE-SU-2020:2047-1 SUSE-SU-2020:2179-1 SUSE-SU-2020:2598-1 SUSE-SU-2020:3230-1 SUSE-SU-2020:3272-1 SUSE-SU-2020:3565-1 Platform(s): SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for High Performance Computing 15 SP1 SUSE Linux Enterprise Module for Legacy Software 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 SUSE Linux Enterprise Module for Realtime packages 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Web Scripting 15 SP2 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information gnutls-2.4.1-24.39.47 is installed OR libgnutls26-2.4.1-24.39.47 is installed OR libgnutls26-32bit-2.4.1-24.39.47 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND telepathy-idle-0.1.5-1.5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information libproxy1-0.4.11-11 is installed OR libproxy1-32bit-0.4.11-11 is installed OR libproxy1-config-gnome3-0.4.11-11 is installed OR libproxy1-config-gnome3-32bit-0.4.11-11 is installed OR libproxy1-networkmanager-0.4.11-11 is installed OR libproxy1-networkmanager-32bit-0.4.11-11 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND dnsmasq-2.71-8 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND autofs-5.0.9-21 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information avahi-0.6.32-30 is installed OR avahi-lang-0.6.32-30 is installed OR libavahi-client3-0.6.32-30 is installed OR libavahi-client3-32bit-0.6.32-30 is installed OR libavahi-common3-0.6.32-30 is installed OR libavahi-common3-32bit-0.6.32-30 is installed OR libavahi-core7-0.6.32-30 is installed OR libdns_sd-0.6.32-30 is installed OR libdns_sd-32bit-0.6.32-30 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND fetchmail-6.3.26-12 is installed Definition Synopsis SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1 is installed AND Package Information Mesa-18.3.2-34.9 is installed OR libOSMesa8-32bit-18.3.2-34.9 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP3 is installed AND Package Information python-pip-10.0.1-3.6 is installed OR python3-pip-10.0.1-3.6 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 is installed AND Package Information libspectre-0.2.8-3.2 is installed OR libspectre-devel-0.2.8-3.2 is installed OR libspectre1-0.2.8-3.2 is installed Definition Synopsis SUSE Linux Enterprise Module for High Performance Computing 15 SP1 is installed AND Package Information libpmi0-18.08.9-3.13 is installed OR libslurm33-18.08.9-3.13 is installed OR perl-slurm-18.08.9-3.13 is installed OR slurm-18.08.9-3.13 is installed OR slurm-auth-none-18.08.9-3.13 is installed OR slurm-config-18.08.9-3.13 is installed OR slurm-config-man-18.08.9-3.13 is installed OR slurm-devel-18.08.9-3.13 is installed OR slurm-doc-18.08.9-3.13 is installed OR slurm-lua-18.08.9-3.13 is installed OR slurm-munge-18.08.9-3.13 is installed OR slurm-node-18.08.9-3.13 is installed OR slurm-pam_slurm-18.08.9-3.13 is installed OR slurm-plugins-18.08.9-3.13 is installed OR slurm-slurmdbd-18.08.9-3.13 is installed OR slurm-sql-18.08.9-3.13 is installed OR slurm-sview-18.08.9-3.13 is installed OR slurm-torque-18.08.9-3.13 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 SP1 is installed AND Package Information kernel-default-4.12.14-197.67 is installed OR reiserfs-kmp-default-4.12.14-197.67 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND Package Information kernel-livepatch-4_12_14-25_28-default-6-2 is installed OR kernel-livepatch-SLE15_Update_8-6-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 is installed AND Package Information libjpeg-turbo-1.5.3-5.12 is installed OR libjpeg62-32bit-62.2.0-5.12 is installed OR libjpeg62-devel-32bit-62.2.0-5.12 is installed OR libjpeg62-turbo-1.5.3-5.12 is installed OR libjpeg8-devel-32bit-8.1.2-5.12 is installed OR libturbojpeg0-32bit-8.1.2-5.12 is installed Definition Synopsis SUSE Linux Enterprise Module for Realtime packages 15 SP2 is installed AND Package Information cluster-md-kmp-rt-5.3.18-13 is installed OR dlm-kmp-rt-5.3.18-13 is installed OR gfs2-kmp-rt-5.3.18-13 is installed OR kernel-devel-rt-5.3.18-13 is installed OR kernel-rt-5.3.18-13 is installed OR kernel-rt-devel-5.3.18-13 is installed OR kernel-rt_debug-5.3.18-13 is installed OR kernel-rt_debug-devel-5.3.18-13 is installed OR kernel-source-rt-5.3.18-13 is installed OR kernel-syms-rt-5.3.18-13 is installed OR ocfs2-kmp-rt-5.3.18-13 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND skopeo-0.1.32-4.8 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 SP2 is installed AND Package Information tomcat-9.0.36-3.6 is installed OR tomcat-admin-webapps-9.0.36-3.6 is installed OR tomcat-el-3_0-api-9.0.36-3.6 is installed OR tomcat-jsp-2_3-api-9.0.36-3.6 is installed OR tomcat-lib-9.0.36-3.6 is installed OR tomcat-servlet-4_0-api-9.0.36-3.6 is installed OR tomcat-webapps-9.0.36-3.6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND stunnel-5.00-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_74-60_64_51-default-4-2 is installed OR kgraft-patch-3_12_74-60_64_51-xen-4-2 is installed OR kgraft-patch-SLE12-SP1_Update_18-4-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information bind-9.9.9P1-46 is installed OR bind-chrootenv-9.9.9P1-46 is installed OR bind-doc-9.9.9P1-46 is installed OR bind-libs-9.9.9P1-46 is installed OR bind-libs-32bit-9.9.9P1-46 is installed OR bind-utils-9.9.9P1-46 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information libgcrypt-1.6.1-16.68 is installed OR libgcrypt20-1.6.1-16.68 is installed OR libgcrypt20-32bit-1.6.1-16.68 is installed OR libgcrypt20-hmac-1.6.1-16.68 is installed OR libgcrypt20-hmac-32bit-1.6.1-16.68 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information kernel-firmware-20170530-21.22 is installed OR ucode-amd-20170530-21.22 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND clamav-0.100.1-33.15 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information evince-3.20.1-5 is installed OR evince-browser-plugin-3.20.1-5 is installed OR evince-lang-3.20.1-5 is installed OR evince-plugin-djvudocument-3.20.1-5 is installed OR evince-plugin-dvidocument-3.20.1-5 is installed OR evince-plugin-pdfdocument-3.20.1-5 is installed OR evince-plugin-psdocument-3.20.1-5 is installed OR evince-plugin-tiffdocument-3.20.1-5 is installed OR evince-plugin-xpsdocument-3.20.1-5 is installed OR libevdocument3-4-3.20.1-5 is installed OR libevview3-3-3.20.1-5 is installed OR nautilus-evince-3.20.1-5 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND Package Information MozillaFirefox-68.1.0-109.89 is installed OR MozillaFirefox-branding-SLE-68-32.8 is installed OR MozillaFirefox-translations-common-68.1.0-109.89 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information kgraft-patch-4_4_176-94_88-default-5-2 is installed OR kgraft-patch-SLE12-SP3_Update_24-5-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information java-1_8_0-ibm-1.8.0_sr5.40-30.54 is installed OR java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54 is installed OR java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information java-1_7_0-openjdk-1.7.0.231-43.27 is installed OR java-1_7_0-openjdk-demo-1.7.0.231-43.27 is installed OR java-1_7_0-openjdk-devel-1.7.0.231-43.27 is installed OR java-1_7_0-openjdk-headless-1.7.0.231-43.27 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information ibus-chewing-1.4.14-4 is installed OR ibus-pinyin-1.5.0-11 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information libsystemd0-234-24.39 is installed OR libsystemd0-32bit-234-24.39 is installed OR libudev-devel-234-24.39 is installed OR libudev1-234-24.39 is installed OR libudev1-32bit-234-24.39 is installed OR systemd-234-24.39 is installed OR systemd-32bit-234-24.39 is installed OR systemd-bash-completion-234-24.39 is installed OR systemd-container-234-24.39 is installed OR systemd-coredump-234-24.39 is installed OR systemd-devel-234-24.39 is installed OR systemd-sysvinit-234-24.39 is installed OR udev-234-24.39 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information MozillaThunderbird-68.11.0-3.91 is installed OR MozillaThunderbird-translations-common-68.11.0-3.91 is installed OR MozillaThunderbird-translations-other-68.11.0-3.91 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP2 is installed AND Package Information LibVNCServer-0.9.10-4.19 is installed OR libvncclient0-0.9.10-4.19 is installed OR libvncserver0-0.9.10-4.19 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND Package Information libecpg6-9.6.4-3.6 is installed OR libpq5-9.6.4-3.6 is installed OR libpq5-32bit-9.6.4-3.6 is installed OR postgresql96-9.6.4-3.6 is installed OR postgresql96-contrib-9.6.4-3.6 is installed OR postgresql96-docs-9.6.4-3.6 is installed OR postgresql96-libs-9.6.4-3.6 is installed OR postgresql96-server-9.6.4-3.6 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND python-XStatic-jquery-ui-1.11.0.1-2.3 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND Package Information mariadb-10.2.22-4.11 is installed OR mariadb-client-10.2.22-4.11 is installed OR mariadb-errormessages-10.2.22-4.11 is installed OR mariadb-galera-10.2.22-4.11 is installed OR mariadb-tools-10.2.22-4.11 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND python-Werkzeug-0.12.2-3.3 is installed
BACK