Remediation Failure for Certain Patches on SUSE Linux 15 Enterprise Server

Product Version: 6.5.0.0

Overview

We have observed that remediation for certain patches fails on SUSE Linux Enterprise Server (SLES) version 15. The remediation failure message is as follows:

“The patched version of the package seems to be the same as the previously vulnerable version. Please ensure your package repository is up to date.”

This typically indicates that the latest patched version of the package is not available in the configured device repository.

Root Cause

This issue commonly occurs when the latest patch for the package is available only under a specific subscription module, such as the Long-Term Service Pack Support (LTSS) module, which requires a valid license. If the system is not subscribed to this module, it will not receive these updates, resulting in remediation failure.

Verification Steps

To confirm whether the latest version of the failed package is available:

1. Check the installed package version:

zypper info <package-name>

2. Check for available updates:

zypper list-updates

3. If the package is not listed under available updates, it suggests that the latest version is not present in the currently configured repository.

4. Verify with SUSE’s official repository:
Visit the SUSE Customer Center to verify the latest package version and repository/module availability:
https://scc.suse.com/packages

Example

For the package cyrus-sasl:

• Installed Version: 2.1.26-41.9.1

• Latest Version: 2.1.26-150000.5.13.1
  
  
  

The latest version is available under the module: SUSE Linux Enterprise Server LTSS 15 SP1  


This confirms that the package update is tied to the LTSS subscription, and remediation will not be successful unless the system is subscribed to this module.

Resolution Steps

1. Ensure your repositories are up to date.

   
   

   zypper refresh

   
   

2. Check repository/module subscriptions:
   Ensure that your system is subscribed to the required SUSE modules, including LTSS, if applicable.
   
   

3. If not subscribed to LTSS:

   • Contact your SUSE representative or licensing team to obtain access.

   • Alternatively, consider removing or excluding packages from remediation if they are not required or eligible for updates under your current license.

Conclusion

Patch remediation failures in SLES 15 are often caused by missing repository access to extended support modules like LTSS. Verifying the package versions and updating repository subscriptions can resolve the issue. Always ensure that your device is configured to use the correct and up-to-date repositories to receive the necessary patches.