diff --git a/Gemfile.lock b/Gemfile.lock
index 1f165a671..c663b9a34 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -30,10 +30,11 @@ GEM
       minitest (>= 5.1)
       tzinfo (~> 2.0)
       zeitwerk (~> 2.3)
-    addressable (2.8.5)
+    addressable (2.8.6)
       public_suffix (>= 2.0.2, < 6.0)
     ast (2.4.2)
     awesome_print (1.9.2)
+    bigdecimal (3.1.6)
     builder (3.2.4)
     byebug (11.1.3)
     case_transform (0.2)
@@ -49,7 +50,8 @@ GEM
       term-ansicolor (~> 1.3)
       thor (>= 0.19.4, < 2.0)
       tins (~> 1.6)
-    crack (0.4.5)
+    crack (0.4.6)
+      bigdecimal
       rexml
     crass (1.0.6)
     deep_merge (1.2.1)
@@ -129,7 +131,7 @@ GEM
       guard (~> 2.1)
       guard-compat (~> 1.1)
       rspec (>= 2.99.0, < 4.0)
-    hashdiff (1.0.1)
+    hashdiff (1.1.0)
     hpricot (0.8.6)
     i18n (1.14.1)
       concurrent-ruby (~> 1.0)
@@ -306,7 +308,7 @@ GEM
       activesupport (>= 3)
       railties (>= 3)
       yard (~> 0.9.20)
-    webmock (3.19.1)
+    webmock (3.20.0)
       addressable (>= 2.8.0)
       crack (>= 0.3.2)
       hashdiff (>= 0.4.0, < 2.0.0)
diff --git a/package/files/nginx-pubcloud/nginx-https.conf b/package/files/nginx-pubcloud/nginx-https.conf
index 0a8c44f39..07cae2e82 100644
--- a/package/files/nginx-pubcloud/nginx-https.conf
+++ b/package/files/nginx-pubcloud/nginx-https.conf
@@ -22,6 +22,12 @@ server {
         autoindex off;
     }
 
+    # no authentication for license files
+    location ~ ^.*/product.license/.*$ {
+        autoindex on;
+        log_not_found off;
+    }
+
     location /repo {
         autoindex on;
         log_not_found off;
diff --git a/package/obs/rmt-server.changes b/package/obs/rmt-server.changes
index 4d8b7ebf9..70aa81357 100644
--- a/package/obs/rmt-server.changes
+++ b/package/obs/rmt-server.changes
@@ -1,14 +1,15 @@
 -------------------------------------------------------------------
-Thu Jan 25 17:40:00 UTC 2024 - Felix Schnizlein <fschnizlein@suse.com>
+Thu Feb 08 15:33:00 UTC 2024 - Felix Schnizlein <fschnizlein@suse.com>
 
 - Version 2.15:
   * Moving system hardware information to systems database table to
     allow transmitting system information dynamically. (jsc#PED-3734)
   * Dropping Rails Secrets facilities and related config files (bsc#1215176)
-  * rmt-client-setup-res script: fix for CentOS8 clients (bsc#1214709)
   * Updated supportconfig script (bsc#1216389)
   * Support zstd compression for repository metadata (bsc#1218775)
-  * Do not add credential handling to normal repository URLs (#1219153)
+  * Do not add credential handling to normal repository URLs (bsc#1219153)
+  * Disable authentication for license files in pubcloud context
+  * Higher registration sharing timeout
 
 -------------------------------------------------------------------
 Thu Jun 06 15:44:00 UTC 2023 - Luís Caparroz <lcaparroz@suse.com>