SUSE-RU-2024:0174-1: Recommended update for suseconnect-ng

Q: Which systems are covered by this update?

The update applies to SUSE Linux Enterprise High Performance Computing 12 SP5, SUSE Linux Enterprise Server 12 SP5, and SUSE Linux Enterprise Server for SAP Applications 12 SP5 on the listed architectures. Affected packages include suseconnect-ng, libsuseconnect, and suseconnect-ruby-bindings, along with their debuginfo packages.

Q: What functional changes are included in the updated suseconnect-ng?

The update brings suseconnect-ng to version 1.6.0 and includes prior 1.5.0 changes. These include disabling EULA display for addons, Docker credential configuration for registry authentication, support for registration from Agama and Cockpit on ALP Micro, and a --json output option.

Q: Does the advisory provide exploit conditions, indicators of compromise, or temporary mitigations?

No. The provided advisory data describes a recommended package update and its functional fixes, but does not specify an exploitation method, affected default configuration, indicators of compromise, or a workaround if updating cannot be performed immediately.

Published Jan 23, 2024

Updated

This update for suseconnect-ng contains the following fixes: Update to version 1.6.0:

Disable EULA display for addons. (bsc#1218649 and bsc#1217961)

Update to version 1.5.0:

Configure docker credentials for registry authentication Feature: Support usage from Agama + Cockpit for ALP Micro system registration. (bsc#1218364) Add --json output option

Affected Software

18 affected componentsFixes available

All of the following

SUSE SUSE Linux Enterprise High Performance Computing 12 SP5 (aarch64 x86_64)

Any of the following

suse/suseconnect-ruby-bindings<1.6.0

1.6.0

suse/suseconnect-ng<1.6.0

1.6.0

suse/libsuseconnect<1.6.0

1.6.0

suse/libsuseconnect-debuginfo<1.6.0

1.6.0

suse/suseconnect-ng-debuginfo<1.6.0

1.6.0

All of the following

SUSE SUSE Linux Enterprise Server 12 SP5 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/suseconnect-ruby-bindings<1.6.0

1.6.0

suse/suseconnect-ng<1.6.0

1.6.0

suse/libsuseconnect<1.6.0

1.6.0

suse/libsuseconnect-debuginfo<1.6.0

1.6.0

suse/suseconnect-ng-debuginfo<1.6.0

1.6.0

All of the following

SUSE SUSE Linux Enterprise Server for SAP Applications 12 SP5 (ppc64le x86_64)

Any of the following

suse/suseconnect-ruby-bindings<1.6.0

1.6.0

suse/suseconnect-ng<1.6.0

1.6.0

suse/libsuseconnect<1.6.0

1.6.0

suse/libsuseconnect-debuginfo<1.6.0

1.6.0

suse/suseconnect-ng-debuginfo<1.6.0

1.6.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade suse/suseconnect-ruby-bindings to a version that resolves this vulnerability.
Fixed in 1.6.0
Upgrade
Upgrade suse/suseconnect-ng to a version that resolves this vulnerability.
Fixed in 1.6.0
Upgrade
Upgrade suse/libsuseconnect to a version that resolves this vulnerability.
Fixed in 1.6.0
Upgrade
Upgrade suse/libsuseconnect-debuginfo to a version that resolves this vulnerability.
Fixed in 1.6.0
Upgrade
Upgrade suse/suseconnect-ng-debuginfo to a version that resolves this vulnerability.
Fixed in 1.6.0
Upgrade
Upgrade suseconnect-ng to a version that resolves this vulnerability.
Fixed in 1.5.0
Upgrade
Upgrade suseconnect-ng to a version that resolves this vulnerability.
Fixed in 1.6.0
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-SERVER-12-SP5-2024-174=1
Configuration
Configure Docker credentials for registry authentication
Docker registry credentials = configured
Configuration
Disable EULA display for addons
addons EULA display = disabled

Event History

Jan 23, 2024

Advisory Published

via SUSE·08:30 AM

Frequently Asked Questions

Which systems are covered by this update?

The update applies to SUSE Linux Enterprise High Performance Computing 12 SP5, SUSE Linux Enterprise Server 12 SP5, and SUSE Linux Enterprise Server for SAP Applications 12 SP5 on the listed architectures. Affected packages include suseconnect-ng, libsuseconnect, and suseconnect-ruby-bindings, along with their debuginfo packages.

What functional changes are included in the updated suseconnect-ng?

The update brings suseconnect-ng to version 1.6.0 and includes prior 1.5.0 changes. These include disabling EULA display for addons, Docker credential configuration for registry authentication, support for registration from Agama and Cockpit on ALP Micro, and a --json output option.

Does the advisory provide exploit conditions, indicators of compromise, or temporary mitigations?

No. The provided advisory data describes a recommended package update and its functional fixes, but does not specify an exploitation method, affected default configuration, indicators of compromise, or a workaround if updating cannot be performed immediately.

SUSE-RU-2024:0174-1: Recommended update for suseconnect-ng

Affected Software

Remediation

Event History

Frequently Asked Questions

Which systems are covered by this update?

What functional changes are included in the updated suseconnect-ng?

Does the advisory provide exploit conditions, indicators of compromise, or temporary mitigations?

Company

Resources

Contact

Frequently Asked Questions

Which systems are covered by this update?

What functional changes are included in the updated suseconnect-ng?

Does the advisory provide exploit conditions, indicators of compromise, or temporary mitigations?