CVE ID:	CVE-2019-6446
Description:	** DISPUTED ** An issue was discovered in NumPy 1.16.0 and earlier. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, as demonstrated by a numpy.load call. NOTE: third parties dispute this issue because it is a behavior that might have legitimate applications in (for example) loading serialized Python object arrays from trusted and authenticated sources.
Test IDs:	1.3.6.1.4.1.25623.1.1.4.2019.0418.1   1.3.6.1.4.1.25623.1.1.2.2020.1315   1.3.6.1.4.1.25623.1.1.2.2020.2375   1.3.6.1.4.1.25623.1.1.2.2020.1545   1.3.6.1.4.1.25623.1.0.852315   1.3.6.1.4.1.25623.1.1.4.2019.2462.1   1.3.6.1.4.1.25623.1.1.4.2019.2462.2   1.3.6.1.4.1.25623.1.1.4.2019.13951.1   1.3.6.1.4.1.25623.1.0.852720   1.3.6.1.4.1.25623.1.1.2.2020.1730   1.3.6.1.4.1.25623.1.1.2.2020.2083   1.3.6.1.4.1.25623.1.1.4.2019.0419.1   1.3.6.1.4.1.25623.1.0.852925   1.3.6.1.4.1.25623.1.1.10.2019.0322
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2019-6446 BugTraq ID: 106670 http://www.securityfocus.com/bid/106670 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ZZAYIQNUUYXGMKHSPEEXS4TRYFOUYE4/ https://bugzilla.suse.com/show_bug.cgi?id=1122208 https://github.com/numpy/numpy/issues/12759 RedHat Security Advisories: RHSA-2019:3335 https://access.redhat.com/errata/RHSA-2019:3335 RedHat Security Advisories: RHSA-2019:3704 https://access.redhat.com/errata/RHSA-2019:3704 SuSE Security Announcement: openSUSE-SU-2019:2225 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00092.html SuSE Security Announcement: openSUSE-SU-2019:2227 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00091.html SuSE Security Announcement: openSUSE-SU-2019:2259 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00015.html