SUSE-SU-2025:0751-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2025/suse-su-20250751-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:0751-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2025:0751-1
Related
Published
2025-02-28T16:26:23Z
Modified
2025-05-02T04:37:02.315914Z
Upstream
Summary
Security update for azure-cli
Details

This update for azure-cli fixes the following issues:

  • CVE-2024-43591: improper neutralization of special elements could allow users to run Azure CLI commands that result in certain service management operations being performed with System level permissions in Azure Defender for Cloud (bsc#1231971).
References

Affected packages

SUSE:Linux Enterprise Module for Public Cloud 15 SP4 / azure-cli

Package

Name
azure-cli
Purl
pkg:rpm/suse/azure-cli&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.58.0-150400.14.12.1

Ecosystem specific 

{
    "binaries": [
        {
            "azure-cli": "2.58.0-150400.14.12.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Public Cloud 15 SP5 / azure-cli

Package

Name
azure-cli
Purl
pkg:rpm/suse/azure-cli&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.58.0-150400.14.12.1

Ecosystem specific 

{
    "binaries": [
        {
            "azure-cli": "2.58.0-150400.14.12.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Public Cloud 15 SP6 / azure-cli

Package

Name
azure-cli
Purl
pkg:rpm/suse/azure-cli&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.58.0-150400.14.12.1

Ecosystem specific 

{
    "binaries": [
        {
            "azure-cli-test": "2.58.0-150400.14.12.1",
            "azure-cli": "2.58.0-150400.14.12.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Public Cloud 15 SP6 / azure-cli-test

Package

Name
azure-cli-test
Purl
pkg:rpm/suse/azure-cli-test&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.58.0-150400.14.12.1

Ecosystem specific 

{
    "binaries": [
        {
            "azure-cli-test": "2.58.0-150400.14.12.1",
            "azure-cli": "2.58.0-150400.14.12.1"
        }
    ]
}

openSUSE:Leap 15.6 / azure-cli

Package

Name
azure-cli
Purl
pkg:rpm/opensuse/azure-cli&distro=openSUSE%20Leap%2015.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.58.0-150400.14.12.1

Ecosystem specific 

{
    "binaries": [
        {
            "azure-cli-test": "2.58.0-150400.14.12.1",
            "azure-cli": "2.58.0-150400.14.12.1"
        }
    ]
}

openSUSE:Leap 15.6 / azure-cli-test

Package

Name
azure-cli-test
Purl
pkg:rpm/opensuse/azure-cli-test&distro=openSUSE%20Leap%2015.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.58.0-150400.14.12.1

Ecosystem specific 

{
    "binaries": [
        {
            "azure-cli-test": "2.58.0-150400.14.12.1",
            "azure-cli": "2.58.0-150400.14.12.1"
        }
    ]
}