← Search the atlas
SUSE-SU-2021:2817-1
Not scored
Security update for aws-cli, python-boto3, python-botocore, python-service_identity, python-trustme, python-urllib3
This patch updates the Python AWS SDK stack in SLE 15:
General:
# aws-cli
- Version updated to upstream release v1.19.9
For a detailed list of all changes, please refer to the changelog file of this package.
# python-boto3
- Version updated to upstream release 1.17.9
For a detailed list of all changes, please refer to the changelog file of this package.
# python-botocore
- Version updated to upstream release 1.20.9
For a detailed list of all changes, please refer to the changelog file of this package.
# python-urllib3
- Version updated to upstream release 1.25.10
For a detailed list of all changes, please refer to the changelog file of this package.
# python-service_identity
- Added this new package to resolve runtime dependencies for other packages.
Version: 18.1.0
# python-trustme
- Added this new package to resolve runtime dependencies for other packages.
Version: 0.6.0
Security fixes:
# python-urllib3:
- CVE-2020-26137: urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated
by inserting CR and LF control characters in the first argument of putrequest() (bsc#1177120)
Exploit probability
Not scored
Published
August 23, 2021
Required by
Not available
Last source change
February 4, 2026
02 / AFFECTED SOFTWARE
Affected packages
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
python-boto3
SUSE:Enterprise Storage 6
python-botocore
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
python-botocore
SUSE:Linux Enterprise Server 15 SP1-BCL
python-asn1crypto
SUSE:Linux Enterprise Module for Python 2 15 SP3
python-asn1crypto
SUSE:Manager Server 4.0
python-urllib3
SUSE:Manager Proxy 4.0
python-pycparser
SUSE:Linux Enterprise Module for Package Hub 15 SP2
python-botocore
SUSE:Linux Enterprise Server 15 SP1-BCL
python-pyasn1
SUSE:Manager Server 4.0
python-boto3
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
python-pycparser
SUSE:Linux Enterprise Module for Basesystem 15 SP2
python-pycparser
SUSE:Linux Enterprise Module for Python 2 15 SP3
python-cryptography
SUSE:Linux Enterprise Module for Basesystem 15 SP2
python-pyOpenSSL
SUSE:Linux Enterprise Module for Basesystem 15 SP3
python-pyasn1
SUSE:Manager Server 4.0
python-pycparser
SUSE:Linux Enterprise Server 15 SP1-BCL
python-boto3
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
python-pyasn1
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
python-boto3
SUSE:Manager Retail Branch Server 4.0
python-pyasn1
SUSE:Linux Enterprise Module for Python 2 15 SP2
python-pycparser
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
python-urllib3
SUSE:Enterprise Storage 6
python-boto3
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
python-botocore
SUSE:Linux Enterprise Micro 5.0
python-pyasn1
SUSE:Linux Enterprise Module for Python 2 15 SP2
python-asn1crypto
SUSE:Manager Proxy 4.0
python-asn1crypto
SUSE:Linux Enterprise Module for Basesystem 15 SP2
python-cryptography
SUSE:Linux Enterprise Server 15 SP1-BCL
python-botocore
SUSE:Manager Proxy 4.0
python-botocore
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
python-pycparser
SUSE:Linux Enterprise Module for Python 2 15 SP2
python-pyOpenSSL
SUSE:Manager Retail Branch Server 4.0
python-pycparser
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
python-asn1crypto
SUSE:Enterprise Storage 6
python-pyasn1
SUSE:Linux Enterprise Module for Public Cloud 15 SP1
python-botocore
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
python-boto3
SUSE:Manager Proxy 4.0
python-pyasn1
SUSE:Linux Enterprise Module for Python 2 15 SP2
python-cffi
SUSE:Enterprise Storage 6
python-urllib3
SUSE:Linux Enterprise Module for Public Cloud 15 SP1
aws-cli
SUSE:Linux Enterprise Server 15 SP1-BCL
python-urllib3
SUSE:Manager Server 4.0
python-pyasn1
SUSE:Linux Enterprise Micro 5.0
python-pycparser
SUSE:Linux Enterprise Server 15 SP1-LTSS
python-botocore
SUSE:Enterprise Storage 6
python-asn1crypto
SUSE:Manager Retail Branch Server 4.0
python-botocore
SUSE:Linux Enterprise Module for Basesystem 15 SP3
python-cffi
SUSE:Linux Enterprise Micro 5.0
python-cryptography
SUSE:Linux Enterprise Module for Basesystem 15 SP3
python-pycparser
SUSE:Linux Enterprise Module for Python 2 15 SP2
python-urllib3
SUSE:Linux Enterprise Server 15 SP1-LTSS
python-pycparser
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
python-pyasn1
SUSE:Linux Enterprise Module for Public Cloud 15 SP3
aws-cli
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
python-asn1crypto
SUSE:Linux Enterprise Micro 5.0
python-pyOpenSSL
SUSE:Linux Enterprise Module for Basesystem 15 SP2
python-pyasn1
SUSE:Linux Enterprise Module for Python 2 15 SP3
python-cffi
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
python-asn1crypto
SUSE:Linux Enterprise Micro 5.0
python-asn1crypto
SUSE:Linux Enterprise Module for Python 2 15 SP2
python-cryptography
SUSE:Linux Enterprise Server 15 SP1-LTSS
python-boto3
SUSE:Linux Enterprise Server 15 SP1-BCL
python-pycparser
SUSE:Linux Enterprise Module for Package Hub 15 SP2
python-boto3
SUSE:Linux Enterprise Module for Public Cloud 15 SP2
aws-cli
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
python-botocore
SUSE:Linux Enterprise Module for Python 2 15 SP2
python-pyasn1
SUSE:Linux Enterprise Micro 5.0
python-urllib3
SUSE:Linux Enterprise Micro 5.0
python-cffi
SUSE:Linux Enterprise Module for Package Hub 15 SP3
python-boto3
SUSE:Linux Enterprise Module for Public Cloud 15 SP1
python-trustme
SUSE:Manager Proxy 4.0
python-urllib3
SUSE:Linux Enterprise Module for Basesystem 15 SP3
python-asn1crypto
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
python-pycparser
SUSE:Enterprise Storage 6
python-pycparser
SUSE:Manager Retail Branch Server 4.0
python-asn1crypto
SUSE:Linux Enterprise Module for Basesystem 15 SP2
python-botocore
SUSE:Linux Enterprise Module for Package Hub 15 SP3
python-botocore
SUSE:Manager Server 4.0
python-botocore
SUSE:Linux Enterprise Server 15 SP1-LTSS
python-asn1crypto
SUSE:Manager Retail Branch Server 4.0
python-boto3
SUSE:Linux Enterprise Server 15 SP1-LTSS
python-urllib3
SUSE:Linux Enterprise Module for Basesystem 15 SP2
python-asn1crypto
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
python-urllib3
SUSE:Linux Enterprise Module for Basesystem 15 SP3
python-boto3
SUSE:Manager Server 4.0
python-asn1crypto
SUSE:Linux Enterprise Module for Public Cloud 15 SP1
python-service_identity
SUSE:Linux Enterprise Server 15 SP1-LTSS
python-pyasn1
SUSE:Linux Enterprise Module for Python 2 15 SP3
python-pyasn1
SUSE:Linux Enterprise Module for Basesystem 15 SP3
python-cryptography
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
python-pyasn1
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
python-urllib3
SUSE:Linux Enterprise Module for Basesystem 15 SP2
python-urllib3
SUSE:Manager Proxy 4.0
python-boto3
SUSE:Linux Enterprise Module for Basesystem 15 SP2
python-cffi
SUSE:Linux Enterprise Module for Python 2 15 SP3
python-urllib3
SUSE:Linux Enterprise Module for Basesystem 15 SP2
python-boto3
SUSE:Manager Retail Branch Server 4.0
python-urllib3
SUSE:Linux Enterprise Module for Python 2 15 SP3
python-pycparser
SUSE:Linux Enterprise Module for Basesystem 15 SP3
python-botocore
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
SUSE-SU-2021:2817-1
This patch updates the Python AWS SDK stack in SLE 15:
General:
# aws-cli
- Version updated to upstream release v1.19.9
For a detailed list of all changes, please refer to the changelog file of this package.
# python-boto3
- Version updated to upstream release 1.17.9
For a detailed list of all changes, please refer to the changelog file of this package.
# python-botocore
- Version updated to upstream release 1.20.9
For a detailed list of all changes, please refer to the changelog file of this package.
# python-urllib3
- Version updated to upstream release 1.25.10
For a detailed list of all changes, please refer to the changelog file of this package.
# python-service_identity
- Added this new package to resolve runtime dependencies for other packages.
Version: 18.1.0
# python-trustme
- Added this new package to resolve runtime dependencies for other packages.
Version: 0.6.0
Security fixes:
# python-urllib3:
- CVE-2020-26137: urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated
by inserting CR and LF control characters in the first argument of putrequest() (bsc#1177120)
View original source ↗
05 / REFERENCES
Further evidence