{"answers":{"affected":"","exploited":"There is no known exploitation of SUSE-SU-2025:20123-1 in the wild and no public exploit code.","fix":"Upgrade to a fixed version.","what":"SUSE-SU-2025:20123-1 is a vulnerability in cloud-regionsrv-client, published on 10 Feb 2025."},"fix_prompt":"Check this codebase for SUSE-SU-2025:20123-1 and fix it if it is affected.\n\nWhat it is: SUSE-SU-2025:20123-1 is a vulnerability in cloud-regionsrv-client, published on 10 Feb 2025. \nExploitation: There is no known exploitation of SUSE-SU-2025:20123-1 in the wild and no public exploit code.\n\nAffected product: cloud-regionsrv-client. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/SUSE-SU-2025-20123-1/ (Markdown: https://insights.sbomify.com/SUSE-SU-2025-20123-1/index.md)","id":"SUSE-SU-2025:20123-1","markdown":"https://insights.sbomify.com/SUSE-SU-2025-20123-1/index.md","name":"SUSE-SU-2025:20123-1","record":{"aliases":[],"analysis":{"component_type":"operating_system","fix_type":"upgrade","impacts":[],"network_reachable":"unknown","non_default_config":false,"product_category":"SUSE cloud client","requires_auth":"unknown","summary":"Security update for cloud-regionsrv-client fixing registration, sudo permissions, and registry cleanup issues.","user_interaction":"unknown","vuln_class":"other"},"analysis_generated_by":"qwen3.8-flash-next","assigner":null,"cpe":[],"cvss":{"score":null,"severity":null,"source":null,"vector":null,"version":null},"cwes":[],"description":"This update for cloud-regionsrv-client contains the following fixes:\n\n- Update to 10.3.11 (bsc#1234050)\n  + Send registration code for the extensions, not only base product\n\n- Update to 10.3.9: (bsc#1234050)\n  + Send registration code for the extensions, not only base product\n\n- Update to 10.3.8: (bsc#1233333)\n  + Fix the package requirements for cloud-regionsrv-client\n  + Follow changes to suseconnect error reporting from stdout to stderr\n\n- Update to 10.3.7: (bsc#1232770)\n  + Fix the product triplet for LTSS, it is always SLES-LTSS, not\n    $BASEPRODUCT-LTSS\n\n- Update to 10.3.6: (jsc#PCT-471, bsc#1230615)\n  + Fix sudo setup\n    ~ permissions cloudguestregistryauth\n    ~ directory ownership /etc/sudoers.d\n  + spec file\n    ~ Remove traces of registry related entries on SLE 12\n  + Forward port\n    ~ fix for sles12 disable registry\n    ~ fix for sles12 no trans_update\n  + Deregister non free extensions at registercloudguest --clean\n  + Fix registry cleanup at registercloudguest --clean, don't remove files\n  + Prevent duplicate search entries in registry setup\n- Update EC2 plugin to 1.0.5\n  + Switch to using the region endpoint from IMDS to determine the region\n    instead of deriving the data from the availability zone\n\n- Update to 10.3.5:\n  + Update spec file to build in all code streams and have proper dependencies.\n\n- Update to 10.3.4:\n  + Modify the message when network access over a specific IP version does\n    not work. This is an informational message and should not look like\n    an error\n  + Inform the user that LTSS registration takes a little longer\n  + fix for sles12 no transactional update:\n    + SLE 12 family has no products with transactional-update we do not\n      need to look for this condition\n- From 10.3.3: (bsc#1229472)\n  + Handle changes in process structure to properly identify the running\n    zypper parent process and only check for 1 PID\n- From 10.3.2:\n  + Remove rgnsrv-clnt-fix-docker-setup patch included upstream\n- From 10.3.1: (jsc#PCT-400)\n  + Add support for LTSS registration\n  + Add fix for sles12 disable registry issue:\n    ~ No container support in SLE 12\n\n- Add fix for docker setup: (bsc#1229137)\n  + The entry for the update infrastructure registry mirror was written\n    incorrectly causing docker daemon startup to fail.\n\n- Update to version 10.3.0: (bsc#1227308, bsc#1222985)\n  + Add support for sidecar registry\n    Podman and rootless Docker support to set up the necessary \n    configuration for the container engines to run as defined\n  + Add running command as root through sudoers file","ecosystems":["SUSE:Linux Micro 6.0"],"exploits":{"exploitdb":null,"first_seen":null,"github_poc":null,"max_poc_stars":null,"metasploit":null,"nuclei":null,"refs":[],"tier":null},"has_fix":true,"headline":"Security update for cloud-regionsrv-client","id":"SUSE-SU-2025:20123-1","indexable":true,"kev":null,"kind":"advisory","links":{"ecosystem":null,"product":null,"products":[],"type":"other","year":"2025"},"n_packages":2,"n_references":null,"packages":[{"ecosystem":"SUSE:Linux Micro 6.0","fixed":["10.3.11-3.1"],"introduced":["0"],"last_affected":[],"package":"cloud-regionsrv-client","purl":"pkg:rpm/suse/cloud-regionsrv-client\u0026distro=SUSE%20Linux%20Micro%206.0","source":"SUSE-SU-2025:20123-1"},{"ecosystem":"SUSE:Linux Micro 6.0","fixed":["0.10.2-5.118"],"introduced":["0"],"last_affected":[],"package":"python-toml","purl":"pkg:rpm/suse/python-toml\u0026distro=SUSE%20Linux%20Micro%206.0","source":"SUSE-SU-2025:20123-1"}],"products":null,"published":"2025-02-10","related":[],"sources":[{"class":"attribution","licence":"CC BY 4.0","name":"SUSE","prefix":"SUSE"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":null,"updated":null,"vendors":null},"summary":"Security update for cloud-regionsrv-client fixing registration, sudo permissions, and registry cleanup issues.","url":"https://insights.sbomify.com/SUSE-SU-2025-20123-1/"}