SUSE-SU-2026:23186-1

Security update for suseconnect-ng

No scoreFix available

SUSE-SU-2026:23186-1 is a vulnerability with no CVSS score yet in suseconnect-ng, published August 17, 2026. No source lists public exploit code. Fixed in suseconnect-ng 1.23.0-slfo.1.1_1.1.

What does this mean?

Severity: UnratedNo CVSS score yet
Exploit chance: UnscoredNo EPSS score yet
Exploitation: None knownNot on CISA’s or ENISA’s lists
Fixed in: 1.23.0-slfo.1.1_1.1suseconnect-ng

Description

This update for suseconnect-ng fixes the following issue:

Build against outdated go1.24-openssl (bsc#1268900).

Changes for suseconnect-ng:

Update version to 1.23.0:
- Use product identifier for product migrations (bsc#1268596).
- Switch to using go1.26-openssl as the default Go version to install to support building the package (bsc#1268900).
- Fix flag parsing so that unknown flags or options are flagged as an error and the usage message is displayed (bsc#1159776).
- InstallReleasePackage interactive/noninteractive handling should be consistent with DistUpgrade (bsc#1267478).
- Add new optional rpm_packages collector, disabled by default, to collect list of installed SUSE vendored RPM packages.
- Allow deregsiter when subscribed regcode has expired (bsc#1270392).

Affected packages

Affected packages
Package	Affected	Fixed
`suseconnect-ng` SUSE:Linux Micro 6.1	before 1.23.0-slfo.1.1_1.1	1.23.0-slfo.1.1_1.1

What each source reports

OSVNo score

Security update for suseconnect-ng

This update for suseconnect-ng fixes the following issue:

Build against outdated go1.24-openssl (bsc#1268900).

Changes for suseconnect-ng:

Update version to 1.23.0:
- Use product identifier for product migrations (bsc#1268596).
- Switch to using go1.26-openssl as the default Go version to install to support building the package (bsc#1268900).
- Fix flag parsing so that unknown flags or options are flagged as an error and the usage message is displayed (bsc#1159776).
- InstallReleasePackage interactive/noninteractive handling should be consistent with DistUpgrade (bsc#1267478).
- Add new optional rpm_packages collector, disabled by default, to collect list of installed SUSE vendored RPM packages.
- Allow deregsiter when subscribed regcode has expired (bsc#1270392).

Record: SUSE-SU-2026:23186-1
Updated: 2026-11-02

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

Description

Affected packages

What each source reports

History

References