An update that solves one vulnerability can now be installed.. # Security update for azure-cli Announcement ID: SUSE-SU-2025:0751-1 Release Date: 2025-02-28T16:26:27Z Rating: important References: * bsc#1231971 Cross-References: * CVE-2024-43591 CVSS scores: * CVE-2024-43591 ( SUSE ): 8.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H * CVE-2024-43591 ( NVD ): 8.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H * CVE-2024-43591 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.6 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for azure-cli fixes the following issues: * CVE-2024-43591: improper neutralization of special elements could allow users to run Azure CLI commands that result in certain service management operations being performed with System level permissions in Azure Defender for Cloud (bsc#1231971). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-751=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-751=1 * Public Cloud Module 15-SP4 zypper in -t patchSUSE-SLE-Module-Public-Cloud-15-SP4-2025-751=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2025-751=1 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2025-751=1 ## Package List: * openSUSE Leap 15.4 (noarch) * azure-cli-2.58.0-150400.14.12.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * azure-cli-test-2.58.0-150400.14.12.1 * openSUSE Leap 15.6 (noarch) * azure-cli-2.58.0-150400.14.12.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * azure-cli-test-2.58.0-150400.14.12.1 * Public Cloud Module 15-SP4 (noarch) * azure-cli-2.58.0-150400.14.12.1 * Public Cloud Module 15-SP5 (noarch) * azure-cli-2.58.0-150400.14.12.1 * Public Cloud Module 15-SP6 (noarch) * azure-cli-2.58.0-150400.14.12.1 * Public Cloud Module 15-SP6 (aarch64 ppc64le s390x x86_64) * azure-cli-test-2.58.0-150400.14.12.1 ## References: * https://www.suse.com/security/cve/CVE-2024-43591.html * https://bugzilla.suse.com/show_bug.cgi?id=1231971 . Discover the vital security patch for azure-cli which tackles a significant vulnerability found within openSUSE environments and related cloud services.. azure-cli advisory, openSUSE important update, service management permissions. . Severity: Important. LinuxSecurity.com Team
python-twisted: Improper neutralization of CRLF characters in URIs and HTTP methods SL7 x86_64 python-twisted-web-12.1.0-6.el7.x86_64.rpm - Scientific Linux Development Team. Synopsis: Moderate: python-twisted-web security update Advisory ID: SLSA-2020:1091-1 Issue Date: 2020-04-07 CVE Numbers: CVE-2019-12387 -- * python-twisted: Improper neutralization of CRLF characters in URIs and HTTP methods -- SL7 x86_64 python-twisted-web-12.1.0-6.el7.x86_64.rpm - Scientific Linux Development Team . Discover best practices for managing CRLF in URIs and HTTP methods on Python-Twisted-Web to enhance web application security and functionality. python-twisted, CRLF, security update, SL7,x86_64. . Severity: Important. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.