Oval Definition:	oval:org.opensuse.security:def:53160
Revision Date: 2020-12-01 Version: 1 Title: Security update for python-setuptools (Important) Description: This update for python-setuptools fixes the following issues: - Fixed a directory traversal in _download_http_url() (bsc#1176262 CVE-2019-20916) Family: unix Class: patch Status: Reference(s): 1000201 1016259 1022610 1023990 1026978 1026979 1026980 1026981 1026982 1026983 1026984 1026985 1026986 1026987 1026988 1029696 1031529 1141063 1153451 1153459 1176262 905097 907805 908380 937787 949399 957174 958789 958861 CVE-2011-1898 CVE-2012-0029 CVE-2012-0217 CVE-2012-1152 CVE-2012-2625 CVE-2012-3432 CVE-2012-3433 CVE-2012-4411 CVE-2012-4504 CVE-2012-4535 CVE-2012-4536 CVE-2012-4537 CVE-2012-4538 CVE-2012-4539 CVE-2012-4544 CVE-2012-5510 CVE-2012-5511 CVE-2012-5513 CVE-2012-5514 CVE-2012-5515 CVE-2012-5525 CVE-2012-5634 CVE-2012-6075 CVE-2013-0151 CVE-2013-0152 CVE-2013-0153 CVE-2013-1442 CVE-2013-1917 CVE-2013-1918 CVE-2013-1919 CVE-2013-1922 CVE-2013-1952 CVE-2013-1990 CVE-2013-1999 CVE-2013-2007 CVE-2013-3495 CVE-2013-4355 CVE-2013-4356 CVE-2013-4361 CVE-2013-4375 CVE-2013-4416 CVE-2013-4494 CVE-2013-4533 CVE-2013-4534 CVE-2013-4537 CVE-2013-4538 CVE-2013-4539 CVE-2013-4540 CVE-2013-4551 CVE-2013-4553 CVE-2013-4554 CVE-2013-6393 CVE-2014-0222 CVE-2014-2525 CVE-2014-3124 CVE-2014-3640 CVE-2014-3672 CVE-2014-5146 CVE-2014-5149 CVE-2014-6268 CVE-2014-7154 CVE-2014-7155 CVE-2014-7156 CVE-2014-7188 CVE-2014-7202 CVE-2014-7203 CVE-2014-7815 CVE-2014-7840 CVE-2014-8106 CVE-2014-8962 CVE-2014-9028 CVE-2014-9130 CVE-2014-9721 CVE-2015-0797 CVE-2015-1779 CVE-2015-3259 CVE-2015-3340 CVE-2015-3456 CVE-2015-4037 CVE-2015-4103 CVE-2015-4104 CVE-2015-4105 CVE-2015-4106 CVE-2015-4792 CVE-2015-4802 CVE-2015-4807 CVE-2015-4815 CVE-2015-4826 CVE-2015-4830 CVE-2015-4836 CVE-2015-4858 CVE-2015-4861 CVE-2015-4870 CVE-2015-4913 CVE-2015-5154 CVE-2015-5239 CVE-2015-5278 CVE-2015-5307 CVE-2015-5969 CVE-2015-6815 CVE-2015-6855 CVE-2015-7311 CVE-2015-7504 CVE-2015-7512 CVE-2015-7549 CVE-2015-7747 CVE-2015-7835 CVE-2015-7969 CVE-2015-7970 CVE-2015-7971 CVE-2015-7972 CVE-2015-8000 CVE-2015-8104 CVE-2015-8339 CVE-2015-8340 CVE-2015-8341 CVE-2015-8345 CVE-2015-8504 CVE-2015-8550 CVE-2015-8554 CVE-2015-8555 CVE-2015-8558 CVE-2015-8567 CVE-2015-8568 CVE-2015-8613 CVE-2015-8615 CVE-2015-8619 CVE-2015-8743 CVE-2015-8744 CVE-2015-8745 CVE-2016-10324 CVE-2016-10325 CVE-2016-10326 CVE-2016-1568 CVE-2016-1570 CVE-2016-1571 CVE-2016-1714 CVE-2016-1922 CVE-2016-1981 CVE-2016-2198 CVE-2016-2270 CVE-2016-2271 CVE-2016-2391 CVE-2016-2392 CVE-2016-2538 CVE-2016-2841 CVE-2016-4439 CVE-2016-4441 CVE-2016-5238 CVE-2016-5338 CVE-2016-6258 CVE-2016-6259 CVE-2016-6351 CVE-2016-7092 CVE-2016-7093 CVE-2016-7094 CVE-2016-7953 CVE-2016-9445 CVE-2016-9446 CVE-2016-9447 CVE-2016-9809 CVE-2017-6369 CVE-2017-6507 CVE-2017-6827 CVE-2017-6828 CVE-2017-6829 CVE-2017-6830 CVE-2017-6831 CVE-2017-6832 CVE-2017-6833 CVE-2017-6834 CVE-2017-6835 CVE-2017-6836 CVE-2017-6837 CVE-2017-6838 CVE-2017-6839 CVE-2017-7853 CVE-2019-17041 CVE-2019-17042 CVE-2019-20916 SUSE-SU-2015:0349-1 SUSE-SU-2015:2341-1 SUSE-SU-2016:0296-1 SUSE-SU-2017:0940-1 SUSE-SU-2017:1151-1 SUSE-SU-2017:1156-1 SUSE-SU-2019:2937-1 SUSE-SU-2020:3566-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 15.1 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for Python2 packages 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND iputils-s20161105-lp150.5 is installed Definition Synopsis openSUSE Leap 15.1 is installed AND Package Information kernel-debug-4.12.14-lp151.28.20 is installed OR kernel-debug-base-4.12.14-lp151.28.20 is installed OR kernel-debug-devel-4.12.14-lp151.28.20 is installed OR kernel-default-4.12.14-lp151.28.20 is installed OR kernel-default-base-4.12.14-lp151.28.20 is installed OR kernel-default-devel-4.12.14-lp151.28.20 is installed OR kernel-devel-4.12.14-lp151.28.20 is installed OR kernel-docs-4.12.14-lp151.28.20 is installed OR kernel-docs-html-4.12.14-lp151.28.20 is installed OR kernel-kvmsmall-4.12.14-lp151.28.20 is installed OR kernel-kvmsmall-base-4.12.14-lp151.28.20 is installed OR kernel-kvmsmall-devel-4.12.14-lp151.28.20 is installed OR kernel-macros-4.12.14-lp151.28.20 is installed OR kernel-obs-build-4.12.14-lp151.28.20 is installed OR kernel-obs-qa-4.12.14-lp151.28.20 is installed OR kernel-source-4.12.14-lp151.28.20 is installed OR kernel-source-vanilla-4.12.14-lp151.28.20 is installed OR kernel-syms-4.12.14-lp151.28.20 is installed OR kernel-vanilla-4.12.14-lp151.28.20 is installed OR kernel-vanilla-base-4.12.14-lp151.28.20 is installed OR kernel-vanilla-devel-4.12.14-lp151.28.20 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information libopenssl0_9_8-0.9.8j-0.50 is installed OR libopenssl0_9_8-32bit-0.9.8j-0.50 is installed OR openssl-0.9.8j-0.50 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information bind-9.9.6P1-0.19 is installed OR bind-libs-9.9.6P1-0.19 is installed OR bind-libs-32bit-9.9.6P1-0.19 is installed OR bind-utils-9.9.6P1-0.19 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information compat-openssl097g-0.9.7g-146.22.41 is installed OR compat-openssl097g-32bit-0.9.7g-146.22.41 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information bind-9.9.6P1-28.6 is installed OR bind-libs-9.9.6P1-28.6 is installed OR bind-libs-32bit-9.9.6P1-28.6 is installed OR bind-utils-9.9.6P1-28.6 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information libmysqlclient18-10.0.22-3 is installed OR libmysqlclient18-32bit-10.0.22-3 is installed OR libmysqlclient_r18-10.0.22-3 is installed OR libmysqlclient_r18-32bit-10.0.22-3 is installed OR mariadb-10.0.22-3 is installed OR mariadb-client-10.0.22-3 is installed OR mariadb-errormessages-10.0.22-3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information libFLAC++6-1.3.0-11 is installed OR libFLAC++6-32bit-1.3.0-11 is installed OR libFLAC8-1.3.0-11 is installed OR libFLAC8-32bit-1.3.0-11 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information gstreamer-0_10-plugins-bad-0.10.23-25 is installed OR gstreamer-0_10-plugins-bad-lang-0.10.23-25 is installed OR libgstbasecamerabinsrc-0_10-23-0.10.23-25 is installed OR libgstbasecamerabinsrc-0_10-23-32bit-0.10.23-25 is installed OR libgstbasevideo-0_10-23-0.10.23-25 is installed OR libgstbasevideo-0_10-23-32bit-0.10.23-25 is installed OR libgstcodecparsers-0_10-23-0.10.23-25 is installed OR libgstphotography-0_10-23-0.10.23-25 is installed OR libgstphotography-0_10-23-32bit-0.10.23-25 is installed OR libgstsignalprocessor-0_10-23-0.10.23-25 is installed OR libgstsignalprocessor-0_10-23-32bit-0.10.23-25 is installed OR libgstvdp-0_10-23-0.10.23-25 is installed OR libgstvdp-0_10-23-32bit-0.10.23-25 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND libXvMC1-1.0.8-7 is installed Definition Synopsis SUSE Linux Enterprise Module for Python2 packages 15 SP2 is installed AND Package Information python-setuptools-40.5.0-6.3 is installed OR python2-setuptools-40.5.0-6.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 is installed AND Package Information rsyslog-8.33.1-3.22 is installed OR rsyslog-module-gssapi-8.33.1-3.22 is installed OR rsyslog-module-gtls-8.33.1-3.22 is installed OR rsyslog-module-mmnormalize-8.33.1-3.22 is installed OR rsyslog-module-mysql-8.33.1-3.22 is installed OR rsyslog-module-pgsql-8.33.1-3.22 is installed OR rsyslog-module-relp-8.33.1-3.22 is installed OR rsyslog-module-snmp-8.33.1-3.22 is installed OR rsyslog-module-udpspoof-8.33.1-3.22 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information alsa-1.0.27.2-11 is installed OR alsa-docs-1.0.27.2-11 is installed OR libasound2-1.0.27.2-11 is installed OR libasound2-32bit-1.0.27.2-11 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND mailman-2.1.17-3.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information cups-1.7.5-12 is installed OR cups-client-1.7.5-12 is installed OR cups-libs-1.7.5-12 is installed OR cups-libs-32bit-1.7.5-12 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information apache2-2.4.23-29.24 is installed OR apache2-doc-2.4.23-29.24 is installed OR apache2-example-pages-2.4.23-29.24 is installed OR apache2-prefork-2.4.23-29.24 is installed OR apache2-utils-2.4.23-29.24 is installed OR apache2-worker-2.4.23-29.24 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information res-signingkeys-3.0.38-52.26 is installed OR smt-3.0.38-52.26 is installed OR smt-support-3.0.38-52.26 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information kgraft-patch-4_4_114-92_64-default-6-2 is installed OR kgraft-patch-SLE12-SP2_Update_18-6-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND busybox-1.21.1-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND Package Information libjavascriptcoregtk-4_0-18-2.24.4-2.47 is installed OR libwebkit2gtk-4_0-37-2.24.4-2.47 is installed OR typelib-1_0-JavaScriptCore-4_0-2.24.4-2.47 is installed OR typelib-1_0-WebKit2-4_0-2.24.4-2.47 is installed OR webkit2gtk-4_0-injected-bundles-2.24.4-2.47 is installed OR webkit2gtk3-2.24.4-2.47 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND binutils-2.32-9.33 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information kgraft-patch-4_4_176-94_88-default-3-2 is installed OR kgraft-patch-SLE12-SP3_Update_24-3-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information glib2-2.48.2-12.12 is installed OR glib2-lang-2.48.2-12.12 is installed OR glib2-tools-2.48.2-12.12 is installed OR libgio-2_0-0-2.48.2-12.12 is installed OR libgio-2_0-0-32bit-2.48.2-12.12 is installed OR libglib-2_0-0-2.48.2-12.12 is installed OR libglib-2_0-0-32bit-2.48.2-12.12 is installed OR libgmodule-2_0-0-2.48.2-12.12 is installed OR libgmodule-2_0-0-32bit-2.48.2-12.12 is installed OR libgobject-2_0-0-2.48.2-12.12 is installed OR libgobject-2_0-0-32bit-2.48.2-12.12 is installed OR libgthread-2_0-0-2.48.2-12.12 is installed OR libgthread-2_0-0-32bit-2.48.2-12.12 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information MozillaFirefox-52.9.0esr-109.38 is installed OR MozillaFirefox-translations-52.9.0esr-109.38 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND memcached-1.4.15-1 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND Package Information qemu-2.6.2-41.43 is installed OR qemu-block-curl-2.6.2-41.43 is installed OR qemu-block-rbd-2.6.2-41.43 is installed OR qemu-block-ssh-2.6.2-41.43 is installed OR qemu-guest-agent-2.6.2-41.43 is installed OR qemu-ipxe-1.0.0-41.43 is installed OR qemu-kvm-2.6.2-41.43 is installed OR qemu-lang-2.6.2-41.43 is installed OR qemu-s390-2.6.2-41.43 is installed OR qemu-seabios-1.9.1-41.43 is installed OR qemu-sgabios-8-41.43 is installed OR qemu-tools-2.6.2-41.43 is installed OR qemu-vgabios-1.9.1-41.43 is installed OR qemu-x86-2.6.2-41.43 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND Package Information ardana-ansible-8.0+git.1583432621.24fa60e-3.70 is installed OR ardana-barbican-8.0+git.1585152761.8ef3d61-4.33 is installed OR ardana-db-8.0+git.1583944923.03cca6c-3.31 is installed OR ardana-monasca-8.0+git.1583944894.38f023a-3.24 is installed OR ardana-mq-8.0+git.1583944811.dc14403-3.19 is installed OR ardana-neutron-8.0+git.1584715262.e4ea620-3.39 is installed OR ardana-octavia-8.0+git.1585171918.418f5cf-3.26 is installed OR ardana-tempest-8.0+git.1585311051.6ab5488-3.33 is installed OR documentation-suse-openstack-cloud-installation-8.20200319-1.23 is installed OR documentation-suse-openstack-cloud-operations-8.20200319-1.23 is installed OR documentation-suse-openstack-cloud-opsconsole-8.20200319-1.23 is installed OR documentation-suse-openstack-cloud-planning-8.20200319-1.23 is installed OR documentation-suse-openstack-cloud-security-8.20200319-1.23 is installed OR documentation-suse-openstack-cloud-supplement-8.20200319-1.23 is installed OR documentation-suse-openstack-cloud-upstream-admin-8.20200319-1.23 is installed OR documentation-suse-openstack-cloud-upstream-user-8.20200319-1.23 is installed OR documentation-suse-openstack-cloud-user-8.20200319-1.23 is installed OR memcached-1.5.17-3.3 is installed OR openstack-manila-5.1.1~dev5-3.26 is installed OR openstack-manila-api-5.1.1~dev5-3.26 is installed OR openstack-manila-data-5.1.1~dev5-3.26 is installed OR openstack-manila-doc-5.1.1~dev5-3.26 is installed OR openstack-manila-scheduler-5.1.1~dev5-3.26 is installed OR openstack-manila-share-5.1.1~dev5-3.26 is installed OR openstack-neutron-11.0.9~dev63-3.30 is installed OR openstack-neutron-dhcp-agent-11.0.9~dev63-3.30 is installed OR openstack-neutron-doc-11.0.9~dev63-3.30 is installed OR openstack-neutron-ha-tool-11.0.9~dev63-3.30 is installed OR openstack-neutron-l3-agent-11.0.9~dev63-3.30 is installed OR openstack-neutron-linuxbridge-agent-11.0.9~dev63-3.30 is installed OR openstack-neutron-macvtap-agent-11.0.9~dev63-3.30 is installed OR openstack-neutron-metadata-agent-11.0.9~dev63-3.30 is installed OR openstack-neutron-metering-agent-11.0.9~dev63-3.30 is installed OR openstack-neutron-openvswitch-agent-11.0.9~dev63-3.30 is installed OR openstack-neutron-server-11.0.9~dev63-3.30 is installed OR openstack-nova-16.1.9~dev61-3.35 is installed OR openstack-nova-api-16.1.9~dev61-3.35 is installed OR openstack-nova-cells-16.1.9~dev61-3.35 is installed OR openstack-nova-compute-16.1.9~dev61-3.35 is installed OR openstack-nova-conductor-16.1.9~dev61-3.35 is installed OR openstack-nova-console-16.1.9~dev61-3.35 is installed OR openstack-nova-consoleauth-16.1.9~dev61-3.35 is installed OR openstack-nova-doc-16.1.9~dev61-3.35 is installed OR openstack-nova-novncproxy-16.1.9~dev61-3.35 is installed OR openstack-nova-placement-api-16.1.9~dev61-3.35 is installed OR openstack-nova-scheduler-16.1.9~dev61-3.35 is installed OR openstack-nova-serialproxy-16.1.9~dev61-3.35 is installed OR openstack-nova-vncproxy-16.1.9~dev61-3.35 is installed OR pdns-4.1.2-3.6 is installed OR pdns-backend-mysql-4.1.2-3.6 is installed OR python-amqp-2.4.2-3.9 is installed OR python-manila-5.1.1~dev5-3.26 is installed OR python-neutron-11.0.9~dev63-3.30 is installed OR python-nova-16.1.9~dev61-3.35 is installed OR venv-openstack-aodh-5.1.1~dev7-12.24 is installed OR venv-openstack-aodh-x86_64-5.1.1~dev7-12.24 is installed OR venv-openstack-barbican-5.0.2~dev3-12.25 is installed OR venv-openstack-barbican-x86_64-5.0.2~dev3-12.25 is installed OR venv-openstack-ceilometer-9.0.8~dev7-12.22 is installed OR venv-openstack-ceilometer-x86_64-9.0.8~dev7-12.22 is installed OR venv-openstack-cinder-11.2.3~dev23-14.25 is installed OR venv-openstack-cinder-x86_64-11.2.3~dev23-14.25 is installed OR venv-openstack-designate-5.0.3~dev7-12.23 is installed OR venv-openstack-designate-x86_64-5.0.3~dev7-12.23 is installed OR venv-openstack-freezer-5.0.0.0~xrc2~dev2-10.20 is installed OR venv-openstack-freezer-x86_64-5.0.0.0~xrc2~dev2-10.20 is installed OR venv-openstack-glance-15.0.3~dev3-12.23 is installed OR venv-openstack-glance-x86_64-15.0.3~dev3-12.23 is installed OR venv-openstack-heat-9.0.8~dev22-12.25 is installed OR venv-openstack-heat-x86_64-9.0.8~dev22-12.25 is installed OR venv-openstack-ironic-9.1.8~dev8-12.25 is installed OR venv-openstack-ironic-x86_64-9.1.8~dev8-12.25 is installed OR venv-openstack-keystone-12.0.4~dev5-11.26 is installed OR venv-openstack-keystone-x86_64-12.0.4~dev5-11.26 is installed OR venv-openstack-magnum-5.0.2_5.0.2_5.0.2~dev31-11.24 is installed OR venv-openstack-magnum-x86_64-5.0.2_5.0.2_5.0.2~dev31-11.24 is installed OR venv-openstack-manila-5.1.1~dev5-12.29 is installed OR venv-openstack-manila-x86_64-5.1.1~dev5-12.29 is installed OR venv-openstack-monasca-ceilometer-1.5.1_1.5.1_1.5.1~dev3-8.20 is installed OR venv-openstack-monasca-ceilometer-x86_64-1.5.1_1.5.1_1.5.1~dev3-8.20 is installed OR venv-openstack-murano-4.0.2~dev2-12.20 is installed OR venv-openstack-murano-x86_64-4.0.2~dev2-12.20 is installed OR venv-openstack-neutron-11.0.9~dev63-13.28 is installed OR venv-openstack-neutron-x86_64-11.0.9~dev63-13.28 is installed OR venv-openstack-nova-16.1.9~dev61-11.26 is installed OR venv-openstack-nova-x86_64-16.1.9~dev61-11.26 is installed OR venv-openstack-octavia-1.0.6~dev3-12.25 is installed OR venv-openstack-octavia-x86_64-1.0.6~dev3-12.25 is installed OR venv-openstack-sahara-7.0.5~dev4-11.24 is installed OR venv-openstack-sahara-x86_64-7.0.5~dev4-11.24 is installed OR venv-openstack-trove-8.0.2~dev2-11.24 is installed OR venv-openstack-trove-x86_64-8.0.2~dev2-11.24 is installed OR zookeeper-3.4.10-3.6 is installed OR zookeeper-server-3.4.10-3.6 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND python-Twisted-15.2.1-9.5 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 9 is installed AND nodejs6-6.17.0-11.27 is installed
BACK