SUSE-SU-2025:0750-1

MEDIUM5.5

Security update for python-azure-identity

Published Feb 28, 2025

Modified 1 months ago

Fix available

Details

Description of the patch:

This update for python-azure-identity fixes the following issues:

CVE-2024-35255: race condition leading to privilege escalation and unauthorized access to sensitive information in Azure Identity libraries (bsc#1230100).

Affected Packages

python3-azure-identity

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3SUSE Linux Enterprise High Performance Computing 15 SP4SUSE Linux Enterprise High Performance Computing 15 SP5SUSE Linux Enterprise Module for Public Cloud 15 SP3

Fixed in:

0:1.10.0.0-150200.6.7.1

References

ADVISORY

https://bugzilla.suse.com/1230100

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2025-February/020466.html

ADVISORY

https://www.suse.com/security/cve/CVE-2024-35255/

WEB

https://www.suse.com/support/security/rating/

ADVISORY