OPENSUSE-SU-2021:1206-1 Security update for aws-cli, python-boto3, python-botocore, python-service_identity, python-trustme, python-urllib3

This patch updates the Python AWS SDK stack in SLE 15: General: aws-cli - Version updated to upstream release v1.19.9 For a detailed list of all changes, please refer to the changelog file of this package. python-boto3 - Version updated to upstream release 1.17.9 For a detailed list of all change...

SUSE: Security Advisory (SUSE-SU-2021:2817-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2021:2817-1 Security update for aws-cli, python-boto3, python-botocore, python-service_identity, python-trustme, python-urllib3

This patch updates the Python AWS SDK stack in SLE 15: General: aws-cli - Version updated to upstream release v1.19.9 For a detailed list of all changes, please refer to the changelog file of this package. python-boto3 - Version updated to upstream release 1.17.9 For a detailed list of all change...

CVE-2019-11236 affecting package python-urllib3 1.24.2-2

CVE-2019-11236 affecting package python-urllib3 1.24.2-2. An upgraded version of the package is available that resolves this issue...

CVE-2021-33503 affecting package python-urllib3 1.25.9-2

CVE-2021-33503 affecting package python-urllib3 1.25.9-2. A patched version of the package is available...

CVE-2020-26137 affecting package python-urllib3 1.24.2-2

CVE-2020-26137 affecting package python-urllib3 1.24.2-2. An upgraded version of the package is available that resolves this issue...

openSUSE 15 Security Update : python-urllib3 (openSUSE-SU-2021:2012-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2021:2012-1 advisory. - An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in the authority component, the authority...

Amazon Linux 2 : python-urllib3 (ALAS-2021-1688)

The version of python-urllib3 installed on the remote host is prior to 1.25.9-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1688 advisory. A flaw was found in python-urllib3. When provided with a URL containing many @ characters in the authority component, the...

Medium: python-urllib3

Issue Overview: A flaw was found in python-urllib3. When provided with a URL containing many @ characters in the authority component, the authority's regular expression exhibits catastrophic backtracking. This flaw causes a denial of service if a URL is passed as a parameter or redirected via an...

openSUSE: Security Advisory for python-urllib3 (openSUSE-SU-2021:2012-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Important Photon OS Security Update - PHSA-2021-3.0-0266

Updates of 'python-urllib3' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2021-0266

Updates of 'python-urllib3' packages of Photon OS have been released...

Fedora: Security Advisory for python-urllib3 (FEDORA-2021-9c5f3b8aae)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2021:2012-1 Security update for python-urllib3

This update for python-urllib3 fixes the following issues: - CVE-2021-33503: Fixed a denial of service when the URL contained many @ characters in the authority component bsc1187045...

Security update for python-urllib3 (important)

openSUSE Security Update: Security update for python-urllib3 Announcement ID: openSUSE-SU-2021:2012-1 Rating: important References: 1187045 Cross-References: CVE-2021-33503 CVSS scores: CVE-2021-33503 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-33503 SUSE: 7.5...

Fedora: Security Advisory for python-urllib3 (FEDORA-2021-a6bde7ab18)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE-SU-2021:2195-1 Security update for python-urllib3, python-requests

This update for python-urllib3 and python-requests fixes the following issues: Security fix: - Improve performance of sub-authority splitting in URL. bsc1187045, CVE-2021-33503 Non-security changes: - Update python-urllib3 to version 1.25.10 to stay compatible with changes needed in the Server an...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Python urllib3

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of Python urllib3. Vulnerability Details CVEID: CVE-2021-28363 DESCRIPTION: urllib3 for python is vulnerable to a man-in-the-middle attack, caused by improper certificate validation in some cases involving HTTPS...

Medium: python-urllib3

Issue Overview: A flaw was found in python-urllib3. The HTTPConnection.request does not properly validate CRLF sequences in the HTTP request method, potentially allowing manipulation of the request by injecting additional HTTP headers. The highest threat from this vulnerability is to...

SUSE SLED15 / SLES15 Security Update : python-urllib3 (SUSE-SU-2021:2012-1)

The remote SUSE Linux SLED15 / SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2021:2012-1 advisory. - An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in the authority component, the...