Summary
This update for python-boto3, python-botocore and python-futures fixes the following issues:
python-botocore was updated to 1.13.33:
- Fix for python3-botocore versioning issues between SLES12 SP3 Teradata and Public Cloud Module. (bsc#1129696)
- Remove the broken attempt to avoid using the bundled requests module provided by the source. (boo#1088310)
- Update to the latest SDK components. (bsc#1146853, bsc#1146854)
- Add support for urllib 1.25 for CVE-2019-9947. (boo#1136184)
- Fix implementing MD5 header injection into new operations if they are necessary and create default session configuration. (bsc#1118021, bsc#1118024, bsc#1118027)
- Add attribute 'ssl_context' to 'AWSHTTPSConnection'. (bsc#1095041)
python-boto3 was updated to 1.10.33.
python-futures also provides python2-futures in the python2 build.
Fixed packages 17
| Release | Package | Fixed in |
|---|---|---|
| SUSE · Enterprise Storage 5 | python-futures | 3.0.2-15.3.1 |
| SUSE · HPE Helion OpenStack 8 | python-botocore | 1.13.33-28.20.1 |
| SUSE · HPE Helion OpenStack 8 | python-futures | 3.0.2-15.3.1 |
| SUSE · SLES 12 Linux Enterprise Module for Advanced Systems Management 12 | python-futures | 3.0.2-15.3.1 |
| SUSE · SLES 12 Linux Enterprise Module for Public Cloud 12 | python-boto3 | 1.10.33-14.14.1 |
| SUSE · SLES 12 Linux Enterprise Module for Public Cloud 12 | python-botocore | 1.13.33-28.20.1 |
| SUSE · SLES 12 Linux Enterprise Module for Public Cloud 12 | python-futures | 3.0.2-15.3.1 |
| SUSE · SLES 12 Linux Enterprise Module for Public Cloud 12 | python-s3transfer | 0.2.1-8.7.1 |
| SUSE · Linux Enterprise Point of Sale 12 SP2 | python-futures | 3.0.2-15.3.1 |
| SUSE · Manager Client Tools 12 | python-futures | 3.0.2-15.3.1 |
| SUSE · Manager Proxy 3.2 | python-futures | 3.0.2-15.3.1 |
| SUSE · Manager Server 3.2 | python-futures | 3.0.2-15.3.1 |
| SUSE · OpenStack Cloud 7 | python-futures | 3.0.2-15.3.1 |
| SUSE · OpenStack Cloud 8 | python-botocore | 1.13.33-28.20.1 |
| SUSE · OpenStack Cloud 8 | python-futures | 3.0.2-15.3.1 |
| SUSE · OpenStack Cloud Crowbar 8 | python-botocore | 1.13.33-28.20.1 |
| SUSE · OpenStack Cloud Crowbar 8 | python-futures | 3.0.2-15.3.1 |
Vulnerabilities 1
-
Medium 5.4
An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection …
References
-
report
https://bugzilla.suse.com/1069697
-
report
https://bugzilla.suse.com/1075263
-
report
https://bugzilla.suse.com/1088310
-
report
https://bugzilla.suse.com/1095041
-
report
https://bugzilla.suse.com/1118021
-
report
https://bugzilla.suse.com/1118024
-
report
https://bugzilla.suse.com/1118027
-
report
https://bugzilla.suse.com/1129696
-
report
https://bugzilla.suse.com/1136184
-
report
https://bugzilla.suse.com/1146853
-
report
https://bugzilla.suse.com/1146854
-
web
https://www.suse.com/security/cve/CVE-2019-9947