Oval Definition:	oval:org.opensuse.security:def:53728
Revision Date: 2020-12-01 Version: 1 Title: Security update for python-pip (Important) Description: This update for python-pip fixes the following issues: - Fixed a directory traversal in _download_http_url() (bsc#1176262 CVE-2019-20916) Family: unix Class: patch Status: Reference(s): 1043176 1043808 1046636 1047674 1048278 1048339 1048352 1048387 1048790 1048902 1049381 1052577 1054017 1054724 1056334 1057378 1057585 1057966 1059369 1062069 1062942 1063122 1089039 1094301 1100365 1101246 1101470 1101776 1101777 1101786 1101788 1101791 1101794 1101800 1101802 1101804 1101810 1104789 1106197 1106514 1144348 1144352 1149742 1154091 1176262 888564 916953 930361 930362 954204 957160 974657 997043 997358 CVE-2008-4225 CVE-2008-4226 CVE-2008-4409 CVE-2010-0624 CVE-2011-1526 CVE-2011-4862 CVE-2012-4504 CVE-2012-5134 CVE-2014-8161 CVE-2014-9112 CVE-2014-9720 CVE-2015-0241 CVE-2015-0243 CVE-2015-0244 CVE-2015-0860 CVE-2015-2698 CVE-2016-1762 CVE-2016-1833 CVE-2016-1834 CVE-2016-1835 CVE-2016-1836 CVE-2016-1837 CVE-2016-1838 CVE-2016-1839 CVE-2016-1840 CVE-2016-2037 CVE-2016-3627 CVE-2016-3705 CVE-2016-4483 CVE-2016-5180 CVE-2017-1000381 CVE-2017-10664 CVE-2017-10806 CVE-2017-10911 CVE-2017-11103 CVE-2017-11334 CVE-2017-11434 CVE-2017-12809 CVE-2017-13672 CVE-2017-14167 CVE-2017-15038 CVE-2017-15268 CVE-2017-15289 CVE-2017-9524 CVE-2018-0737 CVE-2018-11354 CVE-2018-11355 CVE-2018-11356 CVE-2018-11357 CVE-2018-11358 CVE-2018-11359 CVE-2018-11360 CVE-2018-11361 CVE-2018-11362 CVE-2018-14339 CVE-2018-14340 CVE-2018-14341 CVE-2018-14342 CVE-2018-14343 CVE-2018-14344 CVE-2018-14348 CVE-2018-14367 CVE-2018-14368 CVE-2018-14369 CVE-2018-14370 CVE-2018-16056 CVE-2018-16057 CVE-2018-16058 CVE-2019-14491 CVE-2019-14492 CVE-2019-15939 CVE-2019-20916 SUSE-SU-2015:0478-1 SUSE-SU-2015:2302-1 SUSE-SU-2016:1195-1 SUSE-SU-2017:1096-1 SUSE-SU-2017:2237-1 SUSE-SU-2017:2936-1 SUSE-SU-2018:2468-1 SUSE-SU-2018:2891-1 SUSE-SU-2018:2928-1 SUSE-SU-2019:3192-1 SUSE-SU-2020:3565-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 15.1 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Workstation Extension 15 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 6-LTSS SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information MozillaThunderbird-52.7-lp150.2 is installed OR MozillaThunderbird-translations-common-52.7-lp150.2 is installed OR MozillaThunderbird-translations-other-52.7-lp150.2 is installed Definition Synopsis openSUSE Leap 15.1 is installed AND Package Information irssi-1.1.3-33 is installed OR irssi-devel-1.1.3-33 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information MozillaFirefox-24.5.0esr-0.8 is installed OR MozillaFirefox-branding-SLED-24-0.7 is installed OR MozillaFirefox-translations-24.5.0esr-0.8 is installed OR libfreebl3-3.16-0.8 is installed OR libfreebl3-32bit-3.16-0.8 is installed OR libsoftokn3-3.16-0.8 is installed OR libsoftokn3-32bit-3.16-0.8 is installed OR mozilla-nspr-4.10.4-0.3 is installed OR mozilla-nspr-32bit-4.10.4-0.3 is installed OR mozilla-nss-3.16-0.8 is installed OR mozilla-nss-32bit-3.16-0.8 is installed OR mozilla-nss-tools-3.16-0.8 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information giflib-4.1.6-13 is installed OR giflib-32bit-4.1.6-13 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information libecpg6-9.3.6-5 is installed OR libpq5-9.3.6-5 is installed OR libpq5-32bit-9.3.6-5 is installed OR postgresql93-9.3.6-5 is installed OR postgresql93-libs-9.3.6-5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information krb5-1.12.1-22 is installed OR krb5-32bit-1.12.1-22 is installed OR krb5-client-1.12.1-22 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information qemu-2.6.2-41.22 is installed OR qemu-block-curl-2.6.2-41.22 is installed OR qemu-ipxe-1.0.0-41.22 is installed OR qemu-kvm-2.6.2-41.22 is installed OR qemu-seabios-1.9.1-41.22 is installed OR qemu-sgabios-8-41.22 is installed OR qemu-tools-2.6.2-41.22 is installed OR qemu-vgabios-1.9.1-41.22 is installed OR qemu-x86-2.6.2-41.22 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information libdcerpc-binding0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libdcerpc-binding0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libdcerpc0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libdcerpc0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libndr-krb5pac0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libndr-krb5pac0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libndr-nbt0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libndr-nbt0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libndr-standard0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libndr-standard0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libndr0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libndr0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libnetapi0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libnetapi0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsamba-credentials0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsamba-credentials0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsamba-errors0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsamba-errors0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsamba-hostconfig0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsamba-hostconfig0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsamba-passdb0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsamba-passdb0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsamba-util0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsamba-util0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsamdb0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsamdb0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsmbclient0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsmbclient0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsmbconf0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsmbconf0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsmbldap0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsmbldap0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libtevent-util0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libtevent-util0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libwbclient0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libwbclient0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR samba-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR samba-client-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR samba-client-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR samba-doc-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR samba-libs-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR samba-libs-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR samba-winbind-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR samba-winbind-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information cpio-2.11-36.3 is installed OR cpio-lang-2.11-36.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information cups-filters-1.0.58-8 is installed OR cups-filters-cups-browsed-1.0.58-8 is installed OR cups-filters-foomatic-rip-1.0.58-8 is installed OR cups-filters-ghostscript-1.0.58-8 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information qemu-2.3.1-33.3 is installed OR qemu-block-curl-2.3.1-33.3 is installed OR qemu-block-rbd-2.3.1-33.3 is installed OR qemu-guest-agent-2.3.1-33.3 is installed OR qemu-ipxe-1.0.0-33.3 is installed OR qemu-kvm-2.3.1-33.3 is installed OR qemu-lang-2.3.1-33.3 is installed OR qemu-ppc-2.3.1-33.3 is installed OR qemu-s390-2.3.1-33.3 is installed OR qemu-seabios-1.8.1-33.3 is installed OR qemu-sgabios-8-33.3 is installed OR qemu-tools-2.3.1-33.3 is installed OR qemu-vgabios-1.8.1-33.3 is installed OR qemu-x86-2.3.1-33.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information elfutils-0.158-6 is installed OR libasm1-0.158-6 is installed OR libasm1-32bit-0.158-6 is installed OR libdw1-0.158-6 is installed OR libdw1-32bit-0.158-6 is installed OR libebl1-0.158-6 is installed OR libebl1-32bit-0.158-6 is installed OR libelf1-0.158-6 is installed OR libelf1-32bit-0.158-6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information libopenssl-devel-1.0.2j-60.46 is installed OR libopenssl1_0_0-1.0.2j-60.46 is installed OR libopenssl1_0_0-32bit-1.0.2j-60.46 is installed OR libopenssl1_0_0-hmac-1.0.2j-60.46 is installed OR libopenssl1_0_0-hmac-32bit-1.0.2j-60.46 is installed OR openssl-1.0.2j-60.46 is installed OR openssl-doc-1.0.2j-60.46 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND shadow-4.2.1-27.9 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information augeas-1.2.0-15 is installed OR augeas-lenses-1.2.0-15 is installed OR libaugeas0-1.2.0-15 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND Package Information bzip2-1.0.6-30.8 is installed OR bzip2-doc-1.0.6-30.8 is installed OR libbz2-1-1.0.6-30.8 is installed OR libbz2-1-32bit-1.0.6-30.8 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information bzip2-1.0.6-30.8 is installed OR bzip2-doc-1.0.6-30.8 is installed OR libbz2-1-1.0.6-30.8 is installed OR libbz2-1-32bit-1.0.6-30.8 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information libsolv-0.6.36-2.27.19 is installed OR libsolv-tools-0.6.36-2.27.19 is installed OR libzypp-16.20.2-27.60 is installed OR perl-solv-0.6.36-2.27.19 is installed OR python-solv-0.6.36-2.27.19 is installed OR zypper-1.13.54-18.40 is installed OR zypper-log-1.13.54-18.40 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information java-1_8_0-openjdk-1.8.0.181-27.26 is installed OR java-1_8_0-openjdk-demo-1.8.0.181-27.26 is installed OR java-1_8_0-openjdk-devel-1.8.0.181-27.26 is installed OR java-1_8_0-openjdk-headless-1.8.0.181-27.26 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND apache2-mod_perl-2.0.8-11 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information python-pip-10.0.1-3.6 is installed OR python2-pip-10.0.1-3.6 is installed OR python3-pip-10.0.1-3.6 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information libopencv3_3-3.3.1-6.6 is installed OR opencv-3.3.1-6.6 is installed OR opencv-devel-3.3.1-6.6 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND Package Information openstack-horizon-plugin-manila-ui-1.2.1~a0~dev2-3 is installed OR python-horizon-plugin-manila-ui-1.2.1~a0~dev2-3 is installed Definition Synopsis SUSE OpenStack Cloud 6-LTSS is installed AND python-PyYAML-5.1.2-26.12 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND Package Information libshibsp-lite6-2.5.5-6.6 is installed OR libshibsp6-2.5.5-6.6 is installed OR shibboleth-sp-2.5.5-6.6 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND slf4j-1.7.12-3.3 is installed Definition Synopsis SUSE OpenStack Cloud 9 is installed AND python-requests-2.20.1-4.3 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND ansible-2.4.6.0-3.3 is installed
BACK