Race condition in Microsoft products - CVE-2024-35255

Vulnerability identifier: #VU91723

CSH Severity: Low

CVSS v4 BT: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-35255

CWE-ID: CWE-362

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a race condition in Azure Identity Libraries and Microsoft Authentication Library. A local user can elevate privileges and read any file on the file system.

Microsoft Authentication Library (MSAL) for Python
Microsoft Authentication Library (MSAL) for Node.js
Microsoft Authentication Library (MSAL) for Java
Microsoft Authentication Library (MSAL) for .NET
Azure Identity Library for Python
Azure Identity Library for JavaScript
Azure Identity Library for Java
Azure Identity Library for Go
Azure Identity Library for C++
Azure Identity Library for .NET
IBM Netezza for Cloud Pak for Data
Robotic Process Automation for Cloud Pak
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Manager Proxy
Public Cloud Module
openSUSE Leap
openEuler
IBM Watson Knowledge Catalog in Cloud Pak for Data
IBM Process Mining
Traefik
IBM Workload Scheduler
IBM Cloud Pak for Business Automation
IBM Robotic Process Automation
IBM Observability with Instana
Splunk Enterprise
python311-pycomposefile
python311-azure-template
python311-py-deviceid
python311-azure-cognitiveservices-search-customimagesearch
python311-azure-cognitiveservices-search-autosuggest
python311-azure-cognitiveservices-language-textanalytics
python311-azure-cognitiveservices-knowledge-qnamaker
python311-azure-cognitiveservices-anomalydetector
python311-azure-cognitiveservices-search-customsearch
python311-azure-cognitiveservices-vision-face
python311-azure-cognitiveservices-language-luis
python311-azure-cognitiveservices-vision-computervision
python311-h11
restic-zsh-completion
restic-bash-completion
restic
python311-httpcore
python311-azure-servicemanagement-legacy
python311-azure-synapse-artifacts
python311-httpx
python311-trio
python311-opentelemetry-semantic-conventions
python311-opentelemetry-test-utils
python311-azure-graphrbac
python311-azure-onlineexperimentation
python311-azure-mgmt-kubernetesconfiguration-extensiontypes
python311-azure-mgmt-azurestackhcivm
python311-azure-mgmt-onlineexperimentation
python311-azure-mgmt-kubernetesconfiguration-fluxconfigurations
python311-azure-keyvault-securitydomain
python311-azure-mgmt-planetarycomputer
python311-azure-mgmt-containerorchestratorruntime
python311-azure-planetarycomputer
python311-azure-mgmt-impactreporting
python311-azure-mgmt-computerecommender
python311-azure-mgmt-astro
python311-azure-mgmt-cloudhealth
python311-azure-mgmt-migrationdiscoverysap
python311-azure-mgmt-connectedcache
python311-azure-mgmt-workloadorchestration
python311-azure-mgmt-kubernetesconfiguration-extensions
python311-azure-mgmt-containerservicesafeguards
python311-azure-maps-timezone
python311-azure-mgmt-hdinsightcontainers
python311-azure-mgmt-largeinstance
python311-azure-mgmt-migrationassessment
python311-azure-mgmt-dependencymap
python311-azure-mgmt-portalservicescopilot
python311-azure-mgmt-billingbenefits
python311-azure-mgmt-databasewatcher
python311-azure-mgmt-resource-bicep
python311-azure-mgmt-resource-deployments
python311-azure-mgmt-terraform
python311-azure-mgmt-resource-deploymentstacks
python311-azure-mgmt-resource-deploymentscripts
python311-azure-mgmt-weightsandbiases
python311-azure-mgmt-resource-templatespecs
python311-azure-mgmt-trustedsigning
python311-azure-mgmt-edgezones
python311-azure-mgmt-durabletask
python311-azure-mgmt-pineconevectordb
python311-azure-mgmt-hardwaresecuritymodules
python311-azure-maps-geolocation
python311-azure-maps-route
python311-azure-mgmt-quantum
python311-azure-mgmt-resourcehealth
python311-azure-core-tracing-opencensus
python311-azure-core-tracing-opentelemetry
python311-azure-mgmt-scvmm
python311-azure-mgmt-carbonoptimization
python311-azure-mgmt-arizeaiobservabilityeval
python311-azure-mgmt-purestorageblock
python311-azure-health-deidentification
python311-azure-mgmt-computefleet
python311-azure-mgmt-informaticadatamanagement
python311-azure-mgmt-healthdataaiservices
python311-azure-monitor-querymetrics
python311-azure-mgmt-dellstorage
python311-azure-mgmt-workloadssapvirtualinstance
python311-azure-mgmt-mongodbatlas
python311-azure-ai-projects
python311-azure-mgmt-playwright
python311-azure-mgmt-fabric
python311-azure-mgmt-neonpostgres
python311-azure-mgmt-devopsinfrastructure
python311-azure-mgmt-iotoperations
python311-azure-mgmt-lambdatesthyperexecute
python311-azure-mgmt-storageactions
python311-azure-mgmt-recoveryservicesdatareplication
python311-azure-mgmt-appcomplianceautomation
python311-azure-developer-devcenter
python311-azure-mgmt-sphere
python311-azure-mgmt-sitemanager
python311-azure-mgmt-storagediscovery
python311-azure-ai-translation-text
python311-azure-developer-loadtesting
python311-azure-mgmt-playwrighttesting
python311-azure-cognitiveservices-vision-contentmoderator
python311-azure-ai-metricsadvisor
python311-azure-datalake-store
python311-azure-mgmt-datalake-store
python311-azure-mgmt-mysqlflexibleservers
python311-azure-healthinsights-radiologyinsights
python311-azure-ai-agents
python311-azure-communication-messages
python311-azure-mgmt-mongocluster
python311-azure-mgmt-computeschedule
python311-azure-mgmt-deviceregistry
python311-azure-mgmt-elasticsan
python311-azure-mgmt-newrelicobservability
python311-azure-messaging-webpubsubclient
python311-azure-mgmt-dnsresolver
python311-azure-mgmt-devcenter
python311-azure-mgmt-paloaltonetworksngfw
python311-azure-monitor-ingestion
python311-azure-communication-email
python311-azure-ai-translation-document
azure-cli-telemetry
python311-azure-communication-sms
python311-azure-mgmt-logz
python311-opencensus-ext-azure
python311-outcome
python311-azure-communication-rooms
python311-azure-mgmt-frontdoor
python311-azure-mgmt-privatedns
python311-azure-eventhub-checkpointstoreblob
python311-azure-eventhub-checkpointstoreblob-aio
python311-sniffio
python311-azure-identity-broker
python311-azure-schemaregistry
python311-azure-digitaltwins-core
python311-azure-mgmt-recoveryservicessiterecovery
python311-azure-messaging-webpubsubservice
python311-azure-communication-chat
python311-azure-communication-phonenumbers
python311-azure-mgmt-imagebuilder
python311-azure-communication-callautomation
python311-azure-mgmt-core
python311-azure-multiapi-storage
python311-azure-appconfiguration
python311-websocket-client
python3-azure-identity
python311-azure-identity
python311-hatchling
python311-msal
python311-opentelemetry-sdk
python311-opentelemetry-api
python311-azure-core
python311-azure-mgmt-standbypool
python311-azure-mgmt-iotfirmwaredefense
python311-azure-mgmt-desktopvirtualization
python311-azure-mgmt-qumulo
python311-azure-mgmt-servicenetworking
python311-azure-mgmt-postgresqlflexibleservers
python311-azure-monitor-query
python311-azure-mgmt-extendedlocation
python311-azure-mgmt-chaos
python311-azure-mgmt-webpubsub
python311-azure-mgmt-edgeorder
python311-azure-mgmt-elastic
python311-azure-mgmt-databoxedge
python311-azure-mgmt-redhatopenshift
python311-azure-mgmt-dataprotection
python311-azure-cognitiveservices-language-spellcheck
python311-azure-cognitiveservices-search-websearch
python311-azure-cognitiveservices-search-entitysearch
python311-azure-cognitiveservices-search-imagesearch
python311-azure-cognitiveservices-search-videosearch
python311-azure-mgmt-servermanager
python311-azure-mgmt-servicefabricmanagedclusters
python311-azure-mgmt-confluent
python311-azure-mgmt-healthcareapis
python311-azure-mgmt-networkcloud
python311-azure-mgmt-communication
python311-azure-appconfiguration-provider
python311-dnspython
azure-cli-core
azure-cli
python311-azure-mgmt-oracledatabase
python311-azure-mgmt-storagemover
python311-azure-mgmt-powerbiembedded
python311-azure-mgmt-quota
python311-azure-mgmt-storagecache
python311-azure-mgmt-containerservicefleet
python311-azure-mgmt-redisenterprise
python311-azure-mgmt-databox
python311-azure-cognitiveservices-vision-customvision
python311-azure-mgmt-appcontainers
python311-azure-mgmt-mobilenetwork
python311-azure-ai-formrecognizer
python311-azure-mgmt-kusto
python311-argcomplete
python311-azure-mgmt-sql
python311-azure-sdk
python311-azure-mgmt
python311-azure-mgmt-recoveryservices
python311-anyio
python311-azure-mgmt-applicationinsights
python311-azure-keyvault-administration
python311-azure-keyvault-certificates
python311-azure-keyvault-secrets
python311-azure-keyvault-keys
python311-typing_extensions
python311-azure-cosmos
python311-azure-eventgrid
python311-azure-mgmt-authorization
python311-azure-mgmt-iothub
python311-azure-mgmt-appconfiguration
python311-azure-mgmt-apimanagement
python311-azure-eventhub
python311-azure-mgmt-batchai
python311-azure-mgmt-digitaltwins
python311-azure-mgmt-support
python311-azure-mgmt-security
python311-azure-mgmt-billing
python311-azure-mgmt-monitor
python311-azure-mgmt-scheduler
python311-azure-mgmt-msi
python311-azure-servicebus
python311-azure-mgmt-resourcegraph
python311-azure-mgmt-hybridcompute
python311-azure-mgmt-dns
python311-azure-mgmt-devtestlabs
python311-azure-mgmt-hdinsight
python311-azure-mgmt-avs
python311-azure-mgmt-datafactory
python311-azure-mgmt-search
python311-azure-mgmt-cosmosdb
python311-azure-mgmt-servicebus
python311-azure-mgmt-recoveryservicesbackup
python311-azure-mgmt-appplatform
python311-azure-mgmt-datamigration
python311-azure-mgmt-web
python311-azure-mgmt-containerinstance
python311-azure-mgmt-rdbms
python311-azure-mgmt-media
python311-azure-mgmt-eventgrid
python311-azure-search-documents
python311-azure-mgmt-eventhub
python311-azure-storage-blob-changefeed
python311-azure-data-tables
python311-azure-storage-queue
python311-azure-storage-file-datalake
python311-azure-storage-file-share
python311-azure-storage-blob
python311-azure-mgmt-keyvault
python311-azure-mgmt-loganalytics
python311-azure-mgmt-cdn
python311-azure-mgmt-netapp
python311-azure-mgmt-containerregistry
python311-azure-mgmt-cognitiveservices
python311-azure-batch
python311-azure-mgmt-batch
python311-azure-mgmt-resource
python311-azure-mgmt-storage
python311-azure-mgmt-network
python311-azure-mgmt-compute
python311-azure-mgmt-containerservice
python311-trove-classifiers
watsonx.data
Red Hat Camel for Spring Boot

Install updates from vendor's website.

IBM Watson Knowledge Catalog in Cloud Pak for Data - addressed in versions 4.8.9, 5.1.3
Splunk Enterprise - addressed in versions 9.1.9, 9.2.6, 9.3.4, 9.4.2
python311-pycomposefile - update to 0.0.34-150400.9.8.1
python311-azure-template - update to 0.1.0b4077576-150400.11.8.1
python311-py-deviceid - update to 0.1.1-150400.9.5.1
python311-azure-cognitiveservices-search-customimagesearch - update to 0.2.1-150400.11.10.2
python311-azure-cognitiveservices-search-autosuggest - update to 0.2.1-150400.11.10.2
python311-azure-cognitiveservices-language-textanalytics - update to 0.2.2-150400.11.10.1
python311-azure-cognitiveservices-knowledge-qnamaker - update to 0.3.1-150400.11.10.1
python311-azure-cognitiveservices-anomalydetector - update to 0.3.1-150400.11.10.2
python311-azure-cognitiveservices-search-customsearch - update to 0.3.1-150400.11.10.2
python311-azure-cognitiveservices-vision-face - update to 0.6.1-150400.11.10.1
python311-azure-cognitiveservices-language-luis - update to 0.7.1-150400.11.10.1
python311-azure-cognitiveservices-vision-computervision - update to 0.9.1-150400.11.10.2
python311-h11 - update to 0.14.0-150400.9.8.1
restic-zsh-completion - update to 0.16.2-3
restic-bash-completion - update to 0.16.2-3
restic - update to 0.16.2-3
python311-httpcore - update to 0.17.0-150400.9.5.1
python311-azure-servicemanagement-legacy - update to 0.20.8-150400.15.10.1
python311-azure-synapse-artifacts - update to 0.21.0-150400.11.11.1
python311-httpx - update to 0.24.0-150400.9.7.1
python311-trio - update to 0.30.0-150400.9.8.1
python311-opentelemetry-semantic-conventions - update to 0.58b0-150400.9.8.1
python311-opentelemetry-test-utils - update to 0.58b0-150400.9.8.1
python311-azure-graphrbac - update to 0.61.2-150400.14.10.2
python311-azure-onlineexperimentation - update to 1.0.0~b1-150400.9.5.1
python311-azure-mgmt-kubernetesconfiguration-extensiontypes - update to 1.0.0~b1-150400.9.5.1
python311-azure-mgmt-azurestackhcivm - update to 1.0.0~b1-150400.9.5.1
python311-azure-mgmt-onlineexperimentation - update to 1.0.0~b1-150400.9.5.1
python311-azure-mgmt-kubernetesconfiguration-fluxconfigurations - update to 1.0.0~b1-150400.9.5.1
python311-azure-keyvault-securitydomain - update to 1.0.0~b1-150400.9.5.1
python311-azure-mgmt-planetarycomputer - update to 1.0.0~b1-150400.9.5.1
python311-azure-mgmt-containerorchestratorruntime - update to 1.0.0~b1-150400.9.5.1
python311-azure-planetarycomputer - update to 1.0.0~b1-150400.9.5.1
python311-azure-mgmt-impactreporting - update to 1.0.0~b1-150400.9.5.1
python311-azure-mgmt-computerecommender - update to 1.0.0~b1-150400.9.5.1
python311-azure-mgmt-astro - update to 1.0.0~b1-150400.9.5.1
python311-azure-mgmt-cloudhealth - update to 1.0.0~b1-150400.9.5.1
python311-azure-mgmt-migrationdiscoverysap - update to 1.0.0~b1-150400.9.5.1
python311-azure-mgmt-connectedcache - update to 1.0.0~b1-150400.9.5.1
python311-azure-mgmt-workloadorchestration - update to 1.0.0~b1-150400.9.5.1
python311-azure-mgmt-kubernetesconfiguration-extensions - update to 1.0.0~b1-150400.9.5.1
python311-azure-mgmt-containerservicesafeguards - update to 1.0.0~b1-150400.9.5.1
python311-azure-maps-timezone - update to 1.0.0~b1-150400.9.5.1
python311-azure-mgmt-hdinsightcontainers - update to 1.0.0~b1-150400.9.5.1
python311-azure-mgmt-largeinstance - update to 1.0.0~b1-150400.9.5.1
python311-azure-mgmt-migrationassessment - update to 1.0.0~b1-150400.9.5.1
python311-azure-mgmt-dependencymap - update to 1.0.0~b1-150400.9.5.1
python311-azure-mgmt-portalservicescopilot - update to 1.0.0~b1-150400.9.5.1
python311-azure-mgmt-billingbenefits - update to 1.0.0~b1-150400.9.5.1
python311-azure-mgmt-databasewatcher - update to 1.0.0~b1-150400.9.5.1
python311-azure-mgmt-resource-bicep - update to 1.0.0~b1-150400.9.6.1
python311-azure-mgmt-resource-deployments - update to 1.0.0~b1-150400.9.6.1
python311-azure-mgmt-terraform - update to 1.0.0~b1-150400.9.6.1
python311-azure-mgmt-resource-deploymentstacks - update to 1.0.0~b1-150400.9.6.1
python311-azure-mgmt-resource-deploymentscripts - update to 1.0.0~b1-150400.9.6.1
python311-azure-mgmt-weightsandbiases - update to 1.0.0~b1-150400.9.6.1
python311-azure-mgmt-resource-templatespecs - update to 1.0.0~b1-150400.9.6.1
python311-azure-mgmt-trustedsigning - update to 1.0.0~b1-150400.9.6.1
python311-azure-mgmt-edgezones - update to 1.0.0~b2-150400.9.5.1
python311-azure-mgmt-durabletask - update to 1.0.0~b2-150400.9.5.1
python311-azure-mgmt-pineconevectordb - update to 1.0.0~b2-150400.9.5.1
python311-azure-mgmt-hardwaresecuritymodules - update to 1.0.0~b2-150400.9.8.1
python311-azure-maps-geolocation - update to 1.0.0~b3-150400.9.5.1
python311-azure-maps-route - update to 1.0.0~b3-150400.9.8.1
python311-azure-mgmt-quantum - update to 1.0.0b5-150400.10.8.1
python311-azure-mgmt-resourcehealth - update to 1.0.0b6-150400.10.9.2
python311-azure-core-tracing-opencensus - update to 1.0.0b10-150400.10.8.1
python311-azure-core-tracing-opentelemetry - update to 1.0.0b12-150400.10.8.2
python311-azure-mgmt-scvmm - update to 1.0.0.0-150400.9.9.1
python311-azure-mgmt-carbonoptimization - update to 1.0.0-150400.9.5.1
python311-azure-mgmt-arizeaiobservabilityeval - update to 1.0.0-150400.9.5.1
python311-azure-mgmt-purestorageblock - update to 1.0.0-150400.9.5.1
python311-azure-health-deidentification - update to 1.0.0-150400.9.5.1
python311-azure-mgmt-computefleet - update to 1.0.0-150400.9.5.1
python311-azure-mgmt-informaticadatamanagement - update to 1.0.0-150400.9.5.1
python311-azure-mgmt-healthdataaiservices - update to 1.0.0-150400.9.5.1
python311-azure-monitor-querymetrics - update to 1.0.0-150400.9.5.1
python311-azure-mgmt-dellstorage - update to 1.0.0-150400.9.5.1
python311-azure-mgmt-workloadssapvirtualinstance - update to 1.0.0-150400.9.5.1
python311-azure-mgmt-mongodbatlas - update to 1.0.0-150400.9.5.1
python311-azure-ai-projects - update to 1.0.0-150400.9.5.1
python311-azure-mgmt-playwright - update to 1.0.0-150400.9.5.1
python311-azure-mgmt-fabric - update to 1.0.0-150400.9.5.1
python311-azure-mgmt-neonpostgres - update to 1.0.0-150400.9.5.1
python311-azure-mgmt-devopsinfrastructure - update to 1.0.0-150400.9.5.1
python311-azure-mgmt-iotoperations - update to 1.0.0-150400.9.5.1
python311-azure-mgmt-lambdatesthyperexecute - update to 1.0.0-150400.9.5.1
python311-azure-mgmt-storageactions - update to 1.0.0-150400.9.6.1
python311-azure-mgmt-recoveryservicesdatareplication - update to 1.0.0-150400.9.8.1
python311-azure-mgmt-appcomplianceautomation - update to 1.0.0-150400.9.8.1
python311-azure-developer-devcenter - update to 1.0.0-150400.9.8.1
python311-azure-mgmt-sphere - update to 1.0.0-150400.9.9.1
python311-azure-mgmt-sitemanager - update to 1.0.1-150400.9.5.1
python311-azure-mgmt-storagediscovery - update to 1.0.1-150400.9.6.1
python311-azure-ai-translation-text - update to 1.0.1-150400.9.8.1
python311-azure-developer-loadtesting - update to 1.0.1-150400.9.8.1
python311-azure-mgmt-playwrighttesting - update to 1.0.1-150400.9.8.1
python311-azure-cognitiveservices-vision-contentmoderator - update to 1.0.1-150400.11.10.1
python311-azure-ai-metricsadvisor - update to 1.0.1-150400.11.10.2
python311-azure-datalake-store - update to 1.0.1-150400.14.8.1
python311-azure-mgmt-datalake-store - update to 1.1.0~b1-150400.14.10.2
python311-azure-mgmt-mysqlflexibleservers - update to 1.1.0~b2-150400.9.8.1
python311-azure-healthinsights-radiologyinsights - update to 1.1.0-150400.9.5.1
python311-azure-ai-agents - update to 1.1.0-150400.9.5.1
python311-azure-communication-messages - update to 1.1.0-150400.9.5.1
python311-azure-mgmt-mongocluster - update to 1.1.0-150400.9.5.1
python311-azure-mgmt-computeschedule - update to 1.1.0-150400.9.5.1
python311-azure-mgmt-deviceregistry - update to 1.1.0-150400.9.5.1
python311-azure-mgmt-elasticsan - update to 1.1.0-150400.9.8.1
python311-azure-mgmt-newrelicobservability - update to 1.1.0-150400.9.8.1
python311-azure-messaging-webpubsubclient - update to 1.1.0-150400.9.8.1
python311-azure-mgmt-dnsresolver - update to 1.1.0-150400.9.8.1
python311-azure-mgmt-devcenter - update to 1.1.0-150400.9.8.1
python311-azure-mgmt-paloaltonetworksngfw - update to 1.1.0-150400.9.8.1
python311-azure-monitor-ingestion - update to 1.1.0-150400.9.8.1
python311-azure-communication-email - update to 1.1.0-150400.9.8.2
python311-azure-ai-translation-document - update to 1.1.0-150400.10.8.1
azure-cli-telemetry - update to 1.1.0-150400.10.8.2
python311-azure-communication-sms - update to 1.1.0-150400.11.10.2
python311-azure-mgmt-logz - update to 1.1.1-150400.10.10.2
python311-opencensus-ext-azure - update to 1.1.14-150400.10.10.2
python311-outcome - update to 1.2.0-150400.9.5.1
python311-azure-communication-rooms - update to 1.2.0-150400.9.8.1
python311-azure-mgmt-frontdoor - update to 1.2.0-150400.11.8.1
python311-azure-mgmt-privatedns - update to 1.2.0-150400.11.8.1
python311-azure-eventhub-checkpointstoreblob - update to 1.2.0-150400.11.10.1
python311-azure-eventhub-checkpointstoreblob-aio - update to 1.2.0-150400.11.10.1
python311-sniffio - update to 1.3.0-150400.9.5.1
python311-azure-identity-broker - update to 1.3.0-150400.9.8.1
python311-azure-schemaregistry - update to 1.3.0-150400.10.8.1
python311-azure-digitaltwins-core - update to 1.3.0-150400.10.8.1
python311-azure-mgmt-recoveryservicessiterecovery - update to 1.3.0-150400.10.9.1
python311-azure-messaging-webpubsubservice - update to 1.3.0-150400.10.10.1
python311-azure-communication-chat - update to 1.3.0-150400.11.8.2
python311-azure-communication-phonenumbers - update to 1.4.0-150400.10.8.2
python311-azure-mgmt-imagebuilder - update to 1.4.0-150400.11.8.2
python311-azure-communication-callautomation - update to 1.5.0-150400.9.8.1
python311-azure-mgmt-core - update to 1.6.0-150400.11.8.2
python311-azure-multiapi-storage - update to 1.6.0-150400.14.16.1
python311-azure-appconfiguration - update to 1.8.0-150400.11.11.1
python311-websocket-client - update to 1.9.0-150400.13.10.1
python3-azure-identity - update to 1.10.0.0-150200.6.7.1
IBM Process Mining - update to 1.15.0 IF001
python311-azure-identity - addressed in versions 1.15.0-150400.11.6.1, 1.25.1-150400.11.11.1
python311-hatchling - update to 1.25.0-150400.9.8.1
python311-msal - update to 1.35.0~b1-150400.11.11.2
python311-opentelemetry-sdk - update to 1.37.0-150400.9.8.1
python311-opentelemetry-api - update to 1.37.0-150400.10.12.2
python311-azure-core - update to 1.38.1-150400.11.11.1
python311-azure-mgmt-standbypool - update to 2.0.0-150400.9.6.1
python311-azure-mgmt-iotfirmwaredefense - update to 2.0.0-150400.9.8.1
python311-azure-mgmt-desktopvirtualization - update to 2.0.0-150400.9.8.1
python311-azure-mgmt-qumulo - update to 2.0.0-150400.9.8.1
python311-azure-mgmt-servicenetworking - update to 2.0.0-150400.9.8.2
python311-azure-mgmt-postgresqlflexibleservers - update to 2.0.0-150400.9.8.2
python311-azure-monitor-query - update to 2.0.0-150400.10.8.1
python311-azure-mgmt-extendedlocation - update to 2.0.0-150400.10.8.1
python311-azure-mgmt-chaos - update to 2.0.0-150400.10.8.1
python311-azure-mgmt-webpubsub - update to 2.0.0-150400.10.9.1
python311-azure-mgmt-edgeorder - update to 2.0.0-150400.10.10.1
python311-azure-mgmt-elastic - update to 2.0.0-150400.10.10.1
python311-azure-mgmt-databoxedge - update to 2.0.0-150400.11.10.1
python311-azure-mgmt-redhatopenshift - update to 2.0.0-150400.11.12.2
python311-azure-mgmt-dataprotection - update to 2.0.1-150400.10.8.1
python311-azure-cognitiveservices-language-spellcheck - update to 2.0.1-150400.11.10.1
python311-azure-cognitiveservices-search-websearch - update to 2.0.1-150400.11.10.2
python311-azure-cognitiveservices-search-entitysearch - update to 2.0.1-150400.11.10.2
python311-azure-cognitiveservices-search-imagesearch - update to 2.0.1-150400.11.10.2
python311-azure-cognitiveservices-search-videosearch - update to 2.0.1-150400.11.10.2
python311-azure-mgmt-servermanager - update to 2.0.1-150400.14.11.2
python311-azure-mgmt-servicefabricmanagedclusters - update to 2.1.0~b1-150400.10.13.2
watsonx.data - update to 2.1
python311-azure-mgmt-confluent - update to 2.1.0-150400.10.8.1
python311-azure-mgmt-healthcareapis - update to 2.1.0-150400.11.8.2
python311-azure-mgmt-networkcloud - update to 2.2.0-150400.9.8.1
python311-azure-mgmt-communication - update to 2.2.0-150400.11.8.2
python311-azure-appconfiguration-provider - update to 2.3.1-150400.9.8.1
python311-dnspython - update to 2.6.1-150400.12.9.1
Traefik - addressed in versions 2.11.5, 3.0.3
azure-cli-core - update to 2.82.0-150400.14.14.1
azure-cli - update to 2.82.0-150400.14.23.1
python311-azure-mgmt-oracledatabase - update to 3.0.0-150400.9.5.1
python311-azure-mgmt-storagemover - update to 3.0.0-150400.9.9.1
python311-azure-mgmt-powerbiembedded - update to 3.0.0-150400.15.10.2
python311-azure-mgmt-quota - update to 3.0.1-150400.10.8.1
python311-azure-mgmt-storagecache - update to 3.0.1-150400.11.9.1
python311-azure-mgmt-containerservicefleet - update to 3.1.0-150400.9.8.2
python311-azure-mgmt-redisenterprise - update to 3.1.0-150400.9.9.1
python311-azure-mgmt-databox - update to 3.1.0-150400.10.8.1
python311-azure-cognitiveservices-vision-customvision - update to 3.1.1-150400.11.10.1
python311-azure-mgmt-appcontainers - update to 3.2.0-150400.9.8.1
python311-azure-mgmt-mobilenetwork - update to 3.3.1-150400.10.8.2
python311-azure-ai-formrecognizer - update to 3.3.3-150400.11.8.2
python311-azure-mgmt-kusto - update to 3.4.0-150400.11.8.2
python311-argcomplete - update to 3.6.3-150400.12.17.2
python311-azure-mgmt-sql - update to 4.0.0b24-150400.14.12.1
python311-azure-sdk - update to 4.0.0-150400.11.12.1
python311-azure-mgmt - update to 4.0.0-150400.14.10.2
python311-azure-mgmt-recoveryservices - update to 4.0.0-150400.14.11.1
python311-anyio - update to 4.1.0-150400.9.6.1
python311-azure-mgmt-applicationinsights - update to 4.1.0-150400.11.8.2
Red Hat Camel for Spring Boot - update to 4.4.0
python311-azure-keyvault-administration - update to 4.6.0-150400.11.8.1
python311-azure-keyvault-certificates - update to 4.10.0-150400.11.8.1
python311-azure-keyvault-secrets - update to 4.10.0-150400.11.8.2
python311-azure-keyvault-keys - update to 4.11.0-150400.11.8.2
python311-typing_extensions - update to 4.12.2-150400.3.17.1
python311-azure-cosmos - update to 4.14.5-150400.11.12.2
python311-azure-eventgrid - update to 4.22.0-150400.11.8.2
python311-azure-mgmt-authorization - update to 5.0.0~b1-150400.14.8.1
python311-azure-mgmt-iothub - update to 5.0.0~b2-150400.14.8.1
python311-azure-mgmt-appconfiguration - update to 5.0.0-150400.11.8.1
python311-azure-mgmt-apimanagement - update to 5.0.0-150400.11.8.1
python311-azure-eventhub - update to 5.15.1-150400.11.8.2
python311-azure-mgmt-batchai - update to 7.0.0.0-150400.11.10.2
python311-azure-mgmt-digitaltwins - update to 7.0.0-150400.10.8.1
python311-azure-mgmt-support - update to 7.0.0-150400.10.11.1
python311-azure-mgmt-security - update to 7.0.0-150400.11.9.1
python311-azure-mgmt-billing - update to 7.0.0-150400.14.8.2
python311-azure-mgmt-monitor - update to 7.0.0-150400.14.10.1
python311-azure-mgmt-scheduler - update to 7.0.0-150400.15.11.1
python311-azure-mgmt-msi - update to 7.1.0-150400.11.8.1
python311-azure-servicebus - update to 7.14.3-150400.15.8.1
python311-azure-mgmt-resourcegraph - update to 8.0.1-150400.11.11.2
python311-azure-mgmt-hybridcompute - update to 9.0.0-150400.11.8.1
python311-azure-mgmt-dns - update to 9.0.0-150400.14.8.1
python311-azure-mgmt-devtestlabs - update to 9.0.0-150400.14.10.2
python311-azure-mgmt-hdinsight - update to 9.1.0~b2-150400.11.10.2
python311-azure-mgmt-avs - update to 9.1.0-150400.10.8.1
python311-azure-mgmt-datafactory - update to 9.2.0-150400.11.8.2
python311-azure-mgmt-search - update to 9.2.0-150400.14.9.1
IBM Workload Scheduler - addressed in versions 9.5.0.7, 10.1.0.5, 10.2.2
python311-azure-mgmt-cosmosdb - update to 9.9.0-150400.14.13.1
python311-azure-mgmt-servicebus - update to 10.0.0~b1-150400.14.8.2
python311-azure-mgmt-recoveryservicesbackup - update to 10.0.0-150400.15.11.1
python311-azure-mgmt-appplatform - update to 10.0.1-150400.11.8.1
python311-azure-mgmt-datamigration - update to 10.1.0-150400.11.10.1
python311-azure-mgmt-web - update to 10.1.0-150400.14.9.2
python311-azure-mgmt-containerinstance - update to 10.2.0~b1-150400.14.8.1
python311-azure-mgmt-rdbms - update to 10.2.0b17-150400.14.11.1
python311-azure-mgmt-media - update to 10.2.1-150400.15.8.1
python311-azure-mgmt-eventgrid - update to 10.4.0-150400.14.8.1
IBM Netezza for Cloud Pak for Data - update to 11.2.3.3
python311-azure-search-documents - update to 11.6.0-150400.11.8.1
python311-azure-mgmt-eventhub - update to 12.0.0~b1-150400.14.8.1
python311-azure-storage-blob-changefeed - update to 12.0.0~b5-150400.9.5.1
python311-azure-data-tables - update to 12.7.0-150400.11.8.1
python311-azure-storage-queue - update to 12.15.0-150400.11.8.1
python311-azure-storage-file-datalake - update to 12.23.0-150400.11.8.1
python311-azure-storage-file-share - update to 12.24.0-150400.11.8.2
python311-azure-storage-blob - update to 12.28.0-150400.11.8.1
python311-azure-mgmt-keyvault - update to 13.0.0-150400.15.8.2
python311-azure-mgmt-loganalytics - update to 13.1.1-150400.11.8.2
python311-azure-mgmt-cdn - update to 13.1.1-150400.14.8.2
python311-azure-mgmt-netapp - update to 14.0.1-150400.11.8.2
python311-azure-mgmt-containerregistry - update to 14.1.0~b1-150400.14.8.1
python311-azure-mgmt-cognitiveservices - update to 14.1.0-150400.14.8.1
python311-azure-batch - update to 15.0.0~b2-150400.15.11.2
python311-azure-mgmt-batch - update to 18.0.0-150400.14.11.2
IBM Cloud Pak for Business Automation - addressed in versions 21.0.3-IF039, 24.0.0-IF004, 24.0.1
IBM Robotic Process Automation - update to 23.0.18
Robotic Process Automation for Cloud Pak - update to 23.0.18
python311-azure-mgmt-resource - update to 24.0.0-150400.14.12.1
python311-azure-mgmt-storage - update to 24.0.0-150400.14.12.1
python311-azure-mgmt-network - update to 30.1.0-150400.14.8.1
python311-azure-mgmt-compute - update to 35.0.0-150400.14.11.2
python311-azure-mgmt-containerservice - update to 40.2.0-150400.14.11.1
IBM Observability with Instana - update to 283
python311-trove-classifiers - update to 2025.9.11.17-150400.9.8.1

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35255

• Race condition in Microsoft Azure Identity Libraries and Microsoft Authentication Library
• Multiple vulnerabilities in IBM Process Mining
• SUSE update for python-azure-identity
• Multiple vulnerabilities in Red Hat Camel for Spring Boot 4
• IBM Robotic Process Automation Microsoft.BotBuilder
• Multiple vulnerabilities in IBM Observability with Instana
• IBM Workload Scheduler update for Microsoft Azure Identity
• Multiple vulnerabilities in IBM Netezza for Cloud Pak for Data (on Cloud)
• IBM watsonx.data update for Microsoft Azure Identity Libraries and Microsoft Authentication Library
• Multiple vulnerabilities in IBM Cloud Pak for Business Automation
• SUSE update for python-azure-identity
• Splunk Enterprise update for third-party components
• Multiple vulnerabilities in IBM Watson Knowledge Catalog
• openEuler 24.03 LTS SP1 update for restic
• openEuler 24.03 LTS update for restic
• openEuler 24.03 LTS SP2 update for restic
• Traefik update for Azure Identity Libraries
• SUSE update for Recommended update for aazure-cli, azure-cli-core, azure-cli-telemetry, python-argcomplete, python-azure-ai-agents, python-azure-ai-formrecognizer, python-azure-ai-metricsadvisor, python-azure-ai-proj