Every CVESearch/Get API key

SUSE-SU-2025:20123-1

Security update for cloud-regionsrv-client

No scoreFix available

SUSE-SU-2025:20123-1 is a vulnerability with no CVSS score yet in cloud-regionsrv-client, published February 10, 2025. No source lists public exploit code. Fixed in cloud-regionsrv-client 10.3.11-3.1.

Severity
UnratedNo CVSS score yet
Exploit chance
UnscoredNo EPSS score yet
Exploitation
None knownNot on CISA’s or ENISA’s lists

Description

This update for cloud-regionsrv-client contains the following fixes:

  • Update to 10.3.11 (bsc#1234050)

    • Send registration code for the extensions, not only base product
  • Update to 10.3.9: (bsc#1234050)

    • Send registration code for the extensions, not only base product
  • Update to 10.3.8: (bsc#1233333)

    • Fix the package requirements for cloud-regionsrv-client
    • Follow changes to suseconnect error reporting from stdout to stderr
  • Update to 10.3.7: (bsc#1232770)

    • Fix the product triplet for LTSS, it is always SLES-LTSS, not $BASEPRODUCT-LTSS
  • Update to 10.3.6: (jsc#PCT-471, bsc#1230615)

    • Fix sudo setup ~ permissions cloudguestregistryauth ~ directory ownership /etc/sudoers.d
    • spec file ~ Remove traces of registry related entries on SLE 12
    • Forward port ~ fix for sles12 disable registry ~ fix for sles12 no trans_update
    • Deregister non free extensions at registercloudguest --clean
    • Fix registry cleanup at registercloudguest --clean, don't remove files
    • Prevent duplicate search entries in registry setup
  • Update EC2 plugin to 1.0.5

    • Switch to using the region endpoint from IMDS to determine the region instead of deriving the data from the availability zone
  • Update to 10.3.5:

    • Update spec file to build in all code streams and have proper dependencies.
  • Update to 10.3.4:

    • Modify the message when network access over a specific IP version does not work. This is an informational message and should not look like an error
    • Inform the user that LTSS registration takes a little longer
    • fix for sles12 no transactional update:
      • SLE 12 family has no products with transactional-update we do not need to look for this condition
  • From 10.3.3: (bsc#1229472)

    • Handle changes in process structure to properly identify the running zypper parent process and only check for 1 PID
  • From 10.3.2:

    • Remove rgnsrv-clnt-fix-docker-setup patch included upstream
  • From 10.3.1: (jsc#PCT-400)

    • Add support for LTSS registration
    • Add fix for sles12 disable registry issue: ~ No container support in SLE 12
  • Add fix for docker setup: (bsc#1229137)

    • The entry for the update infrastructure registry mirror was written incorrectly causing docker daemon startup to fail.
  • Update to version 10.3.0: (bsc#1227308, bsc#1222985)

    • Add support for sidecar registry Podman and rootless Docker support to set up the necessary configuration for the container engines to run as defined
    • Add running command as root through sudoers file

Affected packages

Affected packages
PackageAffectedFixed
cloud-regionsrv-client
SUSE:Linux Micro 6.0
before 10.3.11-3.1
10.3.11-3.1
python-toml
SUSE:Linux Micro 6.0
before 0.10.2-5.118
0.10.2-5.118

What each source reports

OSVNo score

Security update for cloud-regionsrv-client

This update for cloud-regionsrv-client contains the following fixes:

  • Update to 10.3.11 (bsc#1234050)

    • Send registration code for the extensions, not only base product
  • Update to 10.3.9: (bsc#1234050)

    • Send registration code for the extensions, not only base product
  • Update to 10.3.8: (bsc#1233333)

    • Fix the package requirements for cloud-regionsrv-client
    • Follow changes to suseconnect error reporting from stdout to stderr
  • Update to 10.3.7: (bsc#1232770)

    • Fix the product triplet for LTSS, it is always SLES-LTSS, not $BASEPRODUCT-LTSS
  • Update to 10.3.6: (jsc#PCT-471, bsc#1230615)

    • Fix sudo setup ~ permissions cloudguestregistryauth ~ directory ownership /etc/sudoers.d
    • spec file ~ Remove traces of registry related entries on SLE 12
    • Forward port ~ fix for sles12 disable registry ~ fix for sles12 no trans_update
    • Deregister non free extensions at registercloudguest --clean
    • Fix registry cleanup at registercloudguest --clean, don't remove files
    • Prevent duplicate search entries in registry setup
  • Update EC2 plugin to 1.0.5

    • Switch to using the region endpoint from IMDS to determine the region instead of deriving the data from the availability zone
  • Update to 10.3.5:

    • Update spec file to build in all code streams and have proper dependencies.
  • Update to 10.3.4:

    • Modify the message when network access over a specific IP version does not work. This is an informational message and should not look like an error
    • Inform the user that LTSS registration takes a little longer
    • fix for sles12 no transactional update:
      • SLE 12 family has no products with transactional-update we do not need to look for this condition
  • From 10.3.3: (bsc#1229472)

    • Handle changes in process structure to properly identify the running zypper parent process and only check for 1 PID
  • From 10.3.2:

    • Remove rgnsrv-clnt-fix-docker-setup patch included upstream
  • From 10.3.1: (jsc#PCT-400)

    • Add support for LTSS registration
    • Add fix for sles12 disable registry issue: ~ No container support in SLE 12
  • Add fix for docker setup: (bsc#1229137)

    • The entry for the update infrastructure registry mirror was written incorrectly causing docker daemon startup to fail.
  • Update to version 10.3.0: (bsc#1227308, bsc#1222985)

    • Add support for sidecar registry Podman and rootless Docker support to set up the necessary configuration for the container engines to run as defined
    • Add running command as root through sudoers file
Record
SUSE-SU-2025:20123-1
Updated
2026-11-02

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open