Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 503
Alerts This Week
Warning Icon 1 503

SUSE OpenStack Cloud 7: 2020:3599-1 Moderate: Python-Pip Update

suse
Calendar Grey December 2, 2020
Dist Suse Esm H88
New version released for python-pip tackling a significant security vulnerability within SUSE OpenStack and the Public Cloud Module.
An update that fixes one vulnerability is now available

Summary

This update for python-pip fixes the following issues: - Add wheel subpackage with the generated wheel for this package (bsc#1176262, CVE-2019-20916). - Make wheel a separate build run to avoid the setuptools/wheel build cycle. Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud 7: zypper in -t patch SUSE-OpenStack-Cloud-7-2020-3599=1 - SUSE Linux Enterprise Module for Public Cloud 12: zypper in -t patch SUSE-SLE-Module-Public-Cloud-12-2020-3599=1 Package List: - SUSE OpenStack Cloud 7 (noarch): python-pip-10.0.1-13.3.1 - SUSE Linux Enterprise Module for Public Cloud 12 (noarch): python-pip-10.0.1-13.3.1

References

#1176262

Cross- CVE-2019-20916

Affected Products:

SUSE OpenStack Cloud 7

SUSE Linux Enterprise Module for Public Cloud 12

https://www.suse.com/security/cve/CVE-2019-20916.html

https://bugzilla.suse.com/1176262

Announcement ID: SUSE-SU-2020:3599-1
Rating: moderate

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.