<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:cvrf="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf" xmlns:cvrf-common="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/common" xmlns:cvssv2="http://scap.nist.gov/schema/cvss-v2/1.0" xmlns:cvssv3="https://www.first.org/cvss/cvss-v3.0.xsd" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:ns0="http://purl.org/dc/elements/1.1/" xmlns:prod="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/1.0" xmlns:sch="http://purl.oclc.org/dsdl/schematron" xmlns:vuln="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf">
  <DocumentTitle xml:lang="en">Security update for python2-numpy</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2022:1064-2</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2022-09-12T11:09:13Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2022-09-12T11:09:13Z</InitialReleaseDate>
    <CurrentReleaseDate>2022-09-12T11:09:13Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for python2-numpy</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">This update for python2-numpy fixes the following issues:

- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).
- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).
- CVE-2021-41495: Fixed Null Pointer Dereference in numpy.sort due to missing return value validation (bsc#1193911).
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">SUSE-2022-1064,SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-1064,SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-1064,SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-1064,SUSE-SLE-Product-SLES_SAP-15-SP2-2022-1064,SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-1064,SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-1064,SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-1064,SUSE-Storage-7-2022-1064,openSUSE-SLE-15.4-2022-1064</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20221064-2/</URL>
      <Description>Link for SUSE-SU-2022:1064-2</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-security-updates/2022-September/012215.html</URL>
      <Description>E-Mail link for SUSE-SU-2022:1064-2</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1193907</URL>
      <Description>SUSE Bug 1193907</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1193911</URL>
      <Description>SUSE Bug 1193911</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1193913</URL>
      <Description>SUSE Bug 1193913</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-33430/</URL>
      <Description>SUSE CVE CVE-2021-33430 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-41495/</URL>
      <Description>SUSE CVE CVE-2021-41495 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-41496/</URL>
      <Description>SUSE CVE CVE-2021-41496 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod">
    <Branch Type="Product Family" Name="SUSE Enterprise Storage 7">
      <Branch Type="Product Name" Name="SUSE Enterprise Storage 7">
        <FullProductName ProductID="SUSE Enterprise Storage 7" CPE="cpe:/o:suse:ses:7">SUSE Enterprise Storage 7</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS">
        <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS" CPE="cpe:/o:suse:sle_hpc-espos:15:sp2">SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS" CPE="cpe:/o:suse:sle_hpc-ltss:15:sp2">SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 15 SP2-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 15 SP2-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP2-LTSS" CPE="cpe:/o:suse:sles-ltss:15:sp2">SUSE Linux Enterprise Server 15 SP2-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 15 SP2">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 15 SP2">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP2" CPE="cpe:/o:suse:sles_sap:15:sp2">SUSE Linux Enterprise Server for SAP Applications 15 SP2</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Manager Proxy 4.1">
      <Branch Type="Product Name" Name="SUSE Manager Proxy 4.1">
        <FullProductName ProductID="SUSE Manager Proxy 4.1" CPE="cpe:/o:suse:suse-manager-proxy:4.1">SUSE Manager Proxy 4.1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Manager Retail Branch Server 4.1">
      <Branch Type="Product Name" Name="SUSE Manager Retail Branch Server 4.1">
        <FullProductName ProductID="SUSE Manager Retail Branch Server 4.1" CPE="cpe:/o:suse:suse-manager-retail-branch-server:4.1">SUSE Manager Retail Branch Server 4.1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Manager Server 4.1">
      <Branch Type="Product Name" Name="SUSE Manager Server 4.1">
        <FullProductName ProductID="SUSE Manager Server 4.1" CPE="cpe:/o:suse:suse-manager-server:4.1">SUSE Manager Server 4.1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="openSUSE Leap 15.4">
      <Branch Type="Product Name" Name="openSUSE Leap 15.4">
        <FullProductName ProductID="openSUSE Leap 15.4" CPE="cpe:/o:opensuse:leap:15.4">openSUSE Leap 15.4</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="python2-numpy-1.16.5-150200.3.5.1">
      <FullProductName ProductID="python2-numpy-1.16.5-150200.3.5.1">python2-numpy-1.16.5-150200.3.5.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="python2-numpy-devel-1.16.5-150200.3.5.1">
      <FullProductName ProductID="python2-numpy-devel-1.16.5-150200.3.5.1">python2-numpy-devel-1.16.5-150200.3.5.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="python2-numpy-gnu-hpc-1.16.5-150200.3.5.1">
      <FullProductName ProductID="python2-numpy-gnu-hpc-1.16.5-150200.3.5.1">python2-numpy-gnu-hpc-1.16.5-150200.3.5.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="python2-numpy-gnu-hpc-devel-1.16.5-150200.3.5.1">
      <FullProductName ProductID="python2-numpy-gnu-hpc-devel-1.16.5-150200.3.5.1">python2-numpy-gnu-hpc-devel-1.16.5-150200.3.5.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="python2-numpy_1_16_5-gnu-hpc-1.16.5-150200.3.5.1">
      <FullProductName ProductID="python2-numpy_1_16_5-gnu-hpc-1.16.5-150200.3.5.1">python2-numpy_1_16_5-gnu-hpc-1.16.5-150200.3.5.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="python2-numpy_1_16_5-gnu-hpc-devel-1.16.5-150200.3.5.1">
      <FullProductName ProductID="python2-numpy_1_16_5-gnu-hpc-devel-1.16.5-150200.3.5.1">python2-numpy_1_16_5-gnu-hpc-devel-1.16.5-150200.3.5.1</FullProductName>
    </Branch>
    <Relationship ProductReference="python2-numpy-1.16.5-150200.3.5.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7">
      <FullProductName ProductID="SUSE Enterprise Storage 7:python2-numpy-1.16.5-150200.3.5.1">python2-numpy-1.16.5-150200.3.5.1 as a component of SUSE Enterprise Storage 7</FullProductName>
    </Relationship>
    <Relationship ProductReference="python2-numpy-devel-1.16.5-150200.3.5.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7">
      <FullProductName ProductID="SUSE Enterprise Storage 7:python2-numpy-devel-1.16.5-150200.3.5.1">python2-numpy-devel-1.16.5-150200.3.5.1 as a component of SUSE Enterprise Storage 7</FullProductName>
    </Relationship>
    <Relationship ProductReference="python2-numpy-1.16.5-150200.3.5.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python2-numpy-1.16.5-150200.3.5.1">python2-numpy-1.16.5-150200.3.5.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="python2-numpy-devel-1.16.5-150200.3.5.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python2-numpy-devel-1.16.5-150200.3.5.1">python2-numpy-devel-1.16.5-150200.3.5.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="python2-numpy-gnu-hpc-1.16.5-150200.3.5.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python2-numpy-gnu-hpc-1.16.5-150200.3.5.1">python2-numpy-gnu-hpc-1.16.5-150200.3.5.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="python2-numpy-gnu-hpc-devel-1.16.5-150200.3.5.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python2-numpy-gnu-hpc-devel-1.16.5-150200.3.5.1">python2-numpy-gnu-hpc-devel-1.16.5-150200.3.5.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="python2-numpy_1_16_5-gnu-hpc-1.16.5-150200.3.5.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python2-numpy_1_16_5-gnu-hpc-1.16.5-150200.3.5.1">python2-numpy_1_16_5-gnu-hpc-1.16.5-150200.3.5.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="python2-numpy_1_16_5-gnu-hpc-devel-1.16.5-150200.3.5.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python2-numpy_1_16_5-gnu-hpc-devel-1.16.5-150200.3.5.1">python2-numpy_1_16_5-gnu-hpc-devel-1.16.5-150200.3.5.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="python2-numpy-1.16.5-150200.3.5.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python2-numpy-1.16.5-150200.3.5.1">python2-numpy-1.16.5-150200.3.5.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="python2-numpy-devel-1.16.5-150200.3.5.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python2-numpy-devel-1.16.5-150200.3.5.1">python2-numpy-devel-1.16.5-150200.3.5.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="python2-numpy-gnu-hpc-1.16.5-150200.3.5.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python2-numpy-gnu-hpc-1.16.5-150200.3.5.1">python2-numpy-gnu-hpc-1.16.5-150200.3.5.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="python2-numpy-gnu-hpc-devel-1.16.5-150200.3.5.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python2-numpy-gnu-hpc-devel-1.16.5-150200.3.5.1">python2-numpy-gnu-hpc-devel-1.16.5-150200.3.5.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="python2-numpy_1_16_5-gnu-hpc-1.16.5-150200.3.5.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python2-numpy_1_16_5-gnu-hpc-1.16.5-150200.3.5.1">python2-numpy_1_16_5-gnu-hpc-1.16.5-150200.3.5.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="python2-numpy_1_16_5-gnu-hpc-devel-1.16.5-150200.3.5.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python2-numpy_1_16_5-gnu-hpc-devel-1.16.5-150200.3.5.1">python2-numpy_1_16_5-gnu-hpc-devel-1.16.5-150200.3.5.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="python2-numpy-1.16.5-150200.3.5.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP2-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP2-LTSS:python2-numpy-1.16.5-150200.3.5.1">python2-numpy-1.16.5-150200.3.5.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="python2-numpy-devel-1.16.5-150200.3.5.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP2-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP2-LTSS:python2-numpy-devel-1.16.5-150200.3.5.1">python2-numpy-devel-1.16.5-150200.3.5.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="python2-numpy-1.16.5-150200.3.5.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP2:python2-numpy-1.16.5-150200.3.5.1">python2-numpy-1.16.5-150200.3.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="python2-numpy-devel-1.16.5-150200.3.5.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP2:python2-numpy-devel-1.16.5-150200.3.5.1">python2-numpy-devel-1.16.5-150200.3.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="python2-numpy-1.16.5-150200.3.5.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Proxy 4.1">
      <FullProductName ProductID="SUSE Manager Proxy 4.1:python2-numpy-1.16.5-150200.3.5.1">python2-numpy-1.16.5-150200.3.5.1 as a component of SUSE Manager Proxy 4.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="python2-numpy-devel-1.16.5-150200.3.5.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Proxy 4.1">
      <FullProductName ProductID="SUSE Manager Proxy 4.1:python2-numpy-devel-1.16.5-150200.3.5.1">python2-numpy-devel-1.16.5-150200.3.5.1 as a component of SUSE Manager Proxy 4.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="python2-numpy-1.16.5-150200.3.5.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Retail Branch Server 4.1">
      <FullProductName ProductID="SUSE Manager Retail Branch Server 4.1:python2-numpy-1.16.5-150200.3.5.1">python2-numpy-1.16.5-150200.3.5.1 as a component of SUSE Manager Retail Branch Server 4.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="python2-numpy-devel-1.16.5-150200.3.5.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Retail Branch Server 4.1">
      <FullProductName ProductID="SUSE Manager Retail Branch Server 4.1:python2-numpy-devel-1.16.5-150200.3.5.1">python2-numpy-devel-1.16.5-150200.3.5.1 as a component of SUSE Manager Retail Branch Server 4.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="python2-numpy-1.16.5-150200.3.5.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 4.1">
      <FullProductName ProductID="SUSE Manager Server 4.1:python2-numpy-1.16.5-150200.3.5.1">python2-numpy-1.16.5-150200.3.5.1 as a component of SUSE Manager Server 4.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="python2-numpy-devel-1.16.5-150200.3.5.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 4.1">
      <FullProductName ProductID="SUSE Manager Server 4.1:python2-numpy-devel-1.16.5-150200.3.5.1">python2-numpy-devel-1.16.5-150200.3.5.1 as a component of SUSE Manager Server 4.1</FullProductName>
    </Relationship>
  </ProductTree>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">** DISPUTED ** A Buffer Overflow vulnerability exists in NumPy 1.9.x in the PyArray_NewFromDescr_int function of ctors.c when specifying arrays of large dimensions (over 32) from Python code, which could let a malicious user cause a Denial of Service. NOTE: The vendor does not agree this is a vulneraility; In (very limited) circumstances a user may be able provoke the buffer overflow, the user is most likely already privileged to at least provoke denial of service by exhausting memory. Triggering this further requires the use of uncommon API (complicated structured dtypes), which is very unlikely to be available to an unprivileged user.</Note>
    </Notes>
    <CVE>CVE-2021-33430</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Enterprise Storage 7:python2-numpy-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:python2-numpy-devel-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python2-numpy-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python2-numpy-devel-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python2-numpy-gnu-hpc-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python2-numpy-gnu-hpc-devel-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python2-numpy_1_16_5-gnu-hpc-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python2-numpy_1_16_5-gnu-hpc-devel-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python2-numpy-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python2-numpy-devel-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python2-numpy-gnu-hpc-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python2-numpy-gnu-hpc-devel-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python2-numpy_1_16_5-gnu-hpc-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python2-numpy_1_16_5-gnu-hpc-devel-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-LTSS:python2-numpy-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-LTSS:python2-numpy-devel-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP2:python2-numpy-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP2:python2-numpy-devel-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Manager Proxy 4.1:python2-numpy-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Manager Proxy 4.1:python2-numpy-devel-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Manager Retail Branch Server 4.1:python2-numpy-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Manager Retail Branch Server 4.1:python2-numpy-devel-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Manager Server 4.1:python2-numpy-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Manager Server 4.1:python2-numpy-devel-1.16.5-150200.3.5.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>3.5</BaseScoreV2>
        <VectorV2>AV:N/AC:M/Au:S/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>7.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20221064-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-33430.html</URL>
        <Description>CVE-2021-33430</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1193913</URL>
        <Description>SUSE Bug 1193913</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1201968</URL>
        <Description>SUSE Bug 1201968</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">** DISPUTED ** Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &amp;lt and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays. NOTE: While correct that validation is missing, an error can only occur due to an exhaustion of memory. If the user can exhaust memory, they are already privileged. Further, it should be practically impossible to construct an attack which can target the memory exhaustion to occur at exactly this place.</Note>
    </Notes>
    <CVE>CVE-2021-41495</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Enterprise Storage 7:python2-numpy-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:python2-numpy-devel-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python2-numpy-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python2-numpy-devel-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python2-numpy-gnu-hpc-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python2-numpy-gnu-hpc-devel-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python2-numpy_1_16_5-gnu-hpc-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python2-numpy_1_16_5-gnu-hpc-devel-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python2-numpy-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python2-numpy-devel-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python2-numpy-gnu-hpc-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python2-numpy-gnu-hpc-devel-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python2-numpy_1_16_5-gnu-hpc-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python2-numpy_1_16_5-gnu-hpc-devel-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-LTSS:python2-numpy-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-LTSS:python2-numpy-devel-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP2:python2-numpy-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP2:python2-numpy-devel-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Manager Proxy 4.1:python2-numpy-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Manager Proxy 4.1:python2-numpy-devel-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Manager Retail Branch Server 4.1:python2-numpy-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Manager Retail Branch Server 4.1:python2-numpy-devel-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Manager Server 4.1:python2-numpy-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Manager Server 4.1:python2-numpy-devel-1.16.5-150200.3.5.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>3.5</BaseScoreV2>
        <VectorV2>AV:N/AC:M/Au:S/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>5.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20221064-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-41495.html</URL>
        <Description>CVE-2021-41495</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1193911</URL>
        <Description>SUSE Bug 1193911</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">** DISPUTED ** Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy &lt; 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be created by an already privileged user (or internally).</Note>
    </Notes>
    <CVE>CVE-2021-41496</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Enterprise Storage 7:python2-numpy-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:python2-numpy-devel-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python2-numpy-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python2-numpy-devel-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python2-numpy-gnu-hpc-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python2-numpy-gnu-hpc-devel-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python2-numpy_1_16_5-gnu-hpc-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python2-numpy_1_16_5-gnu-hpc-devel-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python2-numpy-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python2-numpy-devel-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python2-numpy-gnu-hpc-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python2-numpy-gnu-hpc-devel-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python2-numpy_1_16_5-gnu-hpc-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python2-numpy_1_16_5-gnu-hpc-devel-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-LTSS:python2-numpy-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-LTSS:python2-numpy-devel-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP2:python2-numpy-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP2:python2-numpy-devel-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Manager Proxy 4.1:python2-numpy-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Manager Proxy 4.1:python2-numpy-devel-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Manager Retail Branch Server 4.1:python2-numpy-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Manager Retail Branch Server 4.1:python2-numpy-devel-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Manager Server 4.1:python2-numpy-1.16.5-150200.3.5.1</ProductID>
        <ProductID>SUSE Manager Server 4.1:python2-numpy-devel-1.16.5-150200.3.5.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>2.1</BaseScoreV2>
        <VectorV2>AV:L/AC:L/Au:N/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>5.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20221064-2/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-41496.html</URL>
        <Description>CVE-2021-41496</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1193907</URL>
        <Description>SUSE Bug 1193907</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
</cvrfdoc>
