FlawAtlas
Search the atlas
SUSE-SU-2021:2817-1 Not scored

Security update for aws-cli, python-boto3, python-botocore, python-service_identity, python-trustme, python-urllib3

This patch updates the Python AWS SDK stack in SLE 15: General: # aws-cli - Version updated to upstream release v1.19.9 For a detailed list of all changes, please refer to the changelog file of this package. # python-boto3 - Version updated to upstream release 1.17.9 For a detailed list of all changes, please refer to the changelog file of this package. # python-botocore - Version updated to upstream release 1.20.9 For a detailed list of all changes, please refer to the changelog file of this package. # python-urllib3 - Version updated to upstream release 1.25.10 For a detailed list of all changes, please refer to the changelog file of this package. # python-service_identity - Added this new package to resolve runtime dependencies for other packages. Version: 18.1.0 # python-trustme - Added this new package to resolve runtime dependencies for other packages. Version: 0.6.0 Security fixes: # python-urllib3: - CVE-2020-26137: urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest() (bsc#1177120)

Exploit probability Not scored
Published August 23, 2021
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise Server for SAP Applications 15 SP1 python-boto3
SUSE:Enterprise Storage 6 python-botocore
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS python-botocore
SUSE:Linux Enterprise Server 15 SP1-BCL python-asn1crypto
SUSE:Linux Enterprise Module for Python 2 15 SP3 python-asn1crypto
SUSE:Manager Server 4.0 python-urllib3
SUSE:Manager Proxy 4.0 python-pycparser
SUSE:Linux Enterprise Module for Package Hub 15 SP2 python-botocore
SUSE:Linux Enterprise Server 15 SP1-BCL python-pyasn1
SUSE:Manager Server 4.0 python-boto3
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS python-pycparser
SUSE:Linux Enterprise Module for Basesystem 15 SP2 python-pycparser
SUSE:Linux Enterprise Module for Python 2 15 SP3 python-cryptography
SUSE:Linux Enterprise Module for Basesystem 15 SP2 python-pyOpenSSL
SUSE:Linux Enterprise Module for Basesystem 15 SP3 python-pyasn1
SUSE:Manager Server 4.0 python-pycparser
SUSE:Linux Enterprise Server 15 SP1-BCL python-boto3
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS python-pyasn1
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS python-boto3
SUSE:Manager Retail Branch Server 4.0 python-pyasn1
SUSE:Linux Enterprise Module for Python 2 15 SP2 python-pycparser
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS python-urllib3
SUSE:Enterprise Storage 6 python-boto3
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS python-botocore
SUSE:Linux Enterprise Micro 5.0 python-pyasn1
SUSE:Linux Enterprise Module for Python 2 15 SP2 python-asn1crypto
SUSE:Manager Proxy 4.0 python-asn1crypto
SUSE:Linux Enterprise Module for Basesystem 15 SP2 python-cryptography
SUSE:Linux Enterprise Server 15 SP1-BCL python-botocore
SUSE:Manager Proxy 4.0 python-botocore
SUSE:Linux Enterprise Server for SAP Applications 15 SP1 python-pycparser
SUSE:Linux Enterprise Module for Python 2 15 SP2 python-pyOpenSSL
SUSE:Manager Retail Branch Server 4.0 python-pycparser
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS python-asn1crypto
SUSE:Enterprise Storage 6 python-pyasn1
SUSE:Linux Enterprise Module for Public Cloud 15 SP1 python-botocore
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS python-boto3
SUSE:Manager Proxy 4.0 python-pyasn1
SUSE:Linux Enterprise Module for Python 2 15 SP2 python-cffi
SUSE:Enterprise Storage 6 python-urllib3
SUSE:Linux Enterprise Module for Public Cloud 15 SP1 aws-cli
SUSE:Linux Enterprise Server 15 SP1-BCL python-urllib3
SUSE:Manager Server 4.0 python-pyasn1
SUSE:Linux Enterprise Micro 5.0 python-pycparser
SUSE:Linux Enterprise Server 15 SP1-LTSS python-botocore
SUSE:Enterprise Storage 6 python-asn1crypto
SUSE:Manager Retail Branch Server 4.0 python-botocore
SUSE:Linux Enterprise Module for Basesystem 15 SP3 python-cffi
SUSE:Linux Enterprise Micro 5.0 python-cryptography
SUSE:Linux Enterprise Module for Basesystem 15 SP3 python-pycparser
SUSE:Linux Enterprise Module for Python 2 15 SP2 python-urllib3
SUSE:Linux Enterprise Server 15 SP1-LTSS python-pycparser
SUSE:Linux Enterprise Server for SAP Applications 15 SP1 python-pyasn1
SUSE:Linux Enterprise Module for Public Cloud 15 SP3 aws-cli
SUSE:Linux Enterprise Server for SAP Applications 15 SP1 python-asn1crypto
SUSE:Linux Enterprise Micro 5.0 python-pyOpenSSL
SUSE:Linux Enterprise Module for Basesystem 15 SP2 python-pyasn1
SUSE:Linux Enterprise Module for Python 2 15 SP3 python-cffi
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS python-asn1crypto
SUSE:Linux Enterprise Micro 5.0 python-asn1crypto
SUSE:Linux Enterprise Module for Python 2 15 SP2 python-cryptography
SUSE:Linux Enterprise Server 15 SP1-LTSS python-boto3
SUSE:Linux Enterprise Server 15 SP1-BCL python-pycparser
SUSE:Linux Enterprise Module for Package Hub 15 SP2 python-boto3
SUSE:Linux Enterprise Module for Public Cloud 15 SP2 aws-cli
SUSE:Linux Enterprise Server for SAP Applications 15 SP1 python-botocore
SUSE:Linux Enterprise Module for Python 2 15 SP2 python-pyasn1
SUSE:Linux Enterprise Micro 5.0 python-urllib3
SUSE:Linux Enterprise Micro 5.0 python-cffi
SUSE:Linux Enterprise Module for Package Hub 15 SP3 python-boto3
SUSE:Linux Enterprise Module for Public Cloud 15 SP1 python-trustme
SUSE:Manager Proxy 4.0 python-urllib3
SUSE:Linux Enterprise Module for Basesystem 15 SP3 python-asn1crypto
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS python-pycparser
SUSE:Enterprise Storage 6 python-pycparser
SUSE:Manager Retail Branch Server 4.0 python-asn1crypto
SUSE:Linux Enterprise Module for Basesystem 15 SP2 python-botocore
SUSE:Linux Enterprise Module for Package Hub 15 SP3 python-botocore
SUSE:Manager Server 4.0 python-botocore
SUSE:Linux Enterprise Server 15 SP1-LTSS python-asn1crypto
SUSE:Manager Retail Branch Server 4.0 python-boto3
SUSE:Linux Enterprise Server 15 SP1-LTSS python-urllib3
SUSE:Linux Enterprise Module for Basesystem 15 SP2 python-asn1crypto
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS python-urllib3
SUSE:Linux Enterprise Module for Basesystem 15 SP3 python-boto3
SUSE:Manager Server 4.0 python-asn1crypto
SUSE:Linux Enterprise Module for Public Cloud 15 SP1 python-service_identity
SUSE:Linux Enterprise Server 15 SP1-LTSS python-pyasn1
SUSE:Linux Enterprise Module for Python 2 15 SP3 python-pyasn1
SUSE:Linux Enterprise Module for Basesystem 15 SP3 python-cryptography
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS python-pyasn1
SUSE:Linux Enterprise Server for SAP Applications 15 SP1 python-urllib3
SUSE:Linux Enterprise Module for Basesystem 15 SP2 python-urllib3
SUSE:Manager Proxy 4.0 python-boto3
SUSE:Linux Enterprise Module for Basesystem 15 SP2 python-cffi
SUSE:Linux Enterprise Module for Python 2 15 SP3 python-urllib3
SUSE:Linux Enterprise Module for Basesystem 15 SP2 python-boto3
SUSE:Manager Retail Branch Server 4.0 python-urllib3
SUSE:Linux Enterprise Module for Python 2 15 SP3 python-pycparser
SUSE:Linux Enterprise Module for Basesystem 15 SP3 python-botocore

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2021:2817-1

This patch updates the Python AWS SDK stack in SLE 15: General: # aws-cli - Version updated to upstream release v1.19.9 For a detailed list of all changes, please refer to the changelog file of this package. # python-boto3 - Version updated to upstream release 1.17.9 For a detailed list of all changes, please refer to the changelog file of this package. # python-botocore - Version updated to upstream release 1.20.9 For a detailed list of all changes, please refer to the changelog file of this package. # python-urllib3 - Version updated to upstream release 1.25.10 For a detailed list of all changes, please refer to the changelog file of this package. # python-service_identity - Added this new package to resolve runtime dependencies for other packages. Version: 18.1.0 # python-trustme - Added this new package to resolve runtime dependencies for other packages. Version: 0.6.0 Security fixes: # python-urllib3: - CVE-2020-26137: urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest() (bsc#1177120)

View original source

05 / REFERENCES

Further evidence