Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
suseconnect-ng may install outdated OpenSSL component
published 2 months ago
Summary
The suseconnect-ng tool was built using an old version of the Go language that included an outdated OpenSSL library, which could leave your system exposed to known security weaknesses. Updating to version 1.23.0 replaces the old components, improves error messages, and aligns upgrade behavior with other tools. Apply the latest suseconnect-ng update through your regular patching process to keep the system secure.
What to do
- Update suse suseconnect-ng to version 1.23.0-1.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| SUSE:Linux Micro 6.0 | suse | suseconnect-ng |
< 1.23.0-1.1 Fix: upgrade to 1.23.0-1.1
|
Original advisory text
Security update for suseconnect-ng
This update for suseconnect-ng fixes the following issue:
- Build against outdated `go1.24-openssl` (bsc#1268900).
Changes for suseconnect-ng:
- Update version to 1.23.0:
- Use product identifier for product migrations (bsc#1268596).
- Switch to using `go1.26-openssl` as the default Go version to install to support building the package
(bsc#1268900).
- Fix flag parsing so that unknown flags or options are flagged as an error and the usage message is displayed
(bsc#1159776).
- `InstallReleasePackage` interactive/noninteractive handling should be consistent with `DistUpgrade` (bsc#1267478).
- Add new optional `rpm_packages collector`, disabled by default, to collect list of installed SUSE vendored RPM
packages.
- Allow deregsiter when subscribed `regcode` has expired (bsc#1270392).
- Build against outdated `go1.24-openssl` (bsc#1268900).
Changes for suseconnect-ng:
- Update version to 1.23.0:
- Use product identifier for product migrations (bsc#1268596).
- Switch to using `go1.26-openssl` as the default Go version to install to support building the package
(bsc#1268900).
- Fix flag parsing so that unknown flags or options are flagged as an error and the usage message is displayed
(bsc#1159776).
- `InstallReleasePackage` interactive/noninteractive handling should be consistent with `DistUpgrade` (bsc#1267478).
- Add new optional `rpm_packages collector`, disabled by default, to collect list of installed SUSE vendored RPM
packages.
- Allow deregsiter when subscribed `regcode` has expired (bsc#1270392).
References
- https://www.suse.com/support/update/announcement/2026/suse-su-202623211-1/ Vendor Advisory
- https://bugzilla.suse.com/1159776 Third Party Advisory
- https://bugzilla.suse.com/1267478 Third Party Advisory
- https://bugzilla.suse.com/1268596 Third Party Advisory
- https://bugzilla.suse.com/1268900 Third Party Advisory
- https://bugzilla.suse.com/1270392 Third Party Advisory
Timeline
Published18 Aug 2026
Updated26 Aug 2026
First seen26 Aug 2026
Sources
SUSE-SU-2026:23211-1 · OSV
Track software like this
Free during beta