Maintenance update for Multi-Linux Manager 5.1: Server, Proxy and Retail Branch Server
| Announcement ID: | SUSE-RU-2026:0624-1 |
|---|---|
| Release Date: | 2026-02-25T09:40:41Z |
| Rating: | important |
| References: |
|
| Cross-References: | |
| CVSS scores: |
|
| Affected Products: |
|
An update that solves four vulnerabilities, contains one feature and has 33 fixes can now be installed.
Recommended update 5.1.2 for Multi-Linux Manager Proxy
Description:
This update fixes the following issues:
proxy-httpd-image:
- Version 5.1.13
- Add support for a timeout property in the configuration (bsc#1252020)
- Cleanup and simplify image building
proxy-salt-broker-image:
- Version 5.1.12
- Cleanup and simplify image building
proxy-squid-image:
- Version 5.1.11
- Configure squid replacement policy properly before cache dir (bsc#1253773)
- Add missing USER squid directive
- Cleanup and simplify image building
- Allow override all parameters in squid conf (bsc#1250940)
- Set the default timeout for /pub to 30min (bsc#1247644)
proxy-ssh-image:
- Version 5.1.11
- Cleanup and simplify image building
proxy-tftpd-image:
- Version 5.1.11
- Cleanup and simplify image building
uyuni-storage-setup:
- Version 5.1.4-0
- Add CreateArchive directive for git workflow usage
uyuni-tools:
- Version 5.1.24-0
- Actually use the --dbupgrade-tag parameter when computing the image URL (bsc#1249400)
- Handle CA files with symlinks during migration (bsc#1251044)
- Adjust traefik exposed configuration for chart v27+ (bsc#1247721)
- Fix systemd object initialization in server rename. (bsc#1250981)
- Add SSL secrets to the db setup container during migration. (bsc#1250976)
- Fix images handling in mgrpxy support ptf (bsc#1250940)
- Fix helm upgrade parameters (bsc#1253966)
- Detect custom apache and squid config in the /etc/uyuni/proxy folder
- Add ssh tuning to configure sshd (bsc#1253738)
- Move the SSL checks at the begining of the migration
- Remove cgroup mount for podman containers (bsc#1253347)
- Convert the traefik install time to local time (bsc#1251138)
- During migration, krb5.conf.d should be copied in /etc/rhn (bsc#1254478)
- Read env var from http conf file (bsc#1253282)
- Add --registry-host, --registry-user and --registry-password to pull images from an authenticate registry
- Deprecate --registry
- Unify backup create and restore dryrun option case
- Fix calling of squid -z in mgrpxy cache clear (bsc#1247644)
- Always start database container even if enabled
- Remove extra ipv6 mapping and nftables workaround (bsc#1248848)
- Remove old PostgreSQL exporter environment file before migration
- Support config command parse correctly supportconfig output (bsc#1255781)
How to apply this update:
- Log in as root user to the SUSE Multi-Linux Manager Proxy.
- Upgrade mgrpxy.
- If you are in a disconnected environment, upgrade the image packages.
- Reboot the system.
- Run
mgrpxy upgrade podmanwhich will use the default image tags.
Recommended update 5.1.2 for Multi-Linux Manager Retail Branch Server
Description:
This update fixes the following issues:
proxy-httpd-image:
- Version 5.1.13
- Add support for a timeout property in the configuration (bsc#1252020)
- Cleanup and simplify image building
proxy-salt-broker-image:
- Version 5.1.12
- Cleanup and simplify image building
proxy-squid-image:
- Version 5.1.11
- Configure squid replacement policy properly before cache dir (bsc#1253773)
- Add missing USER squid directive
- Cleanup and simplify image building
- Allow override all parameters in squid conf (bsc#1250940)
- Set the default timeout for /pub to 30min (bsc#1247644)
proxy-ssh-image:
- Version 5.1.11
- Cleanup and simplify image building
proxy-tftpd-image:
- Version 5.1.11
- Cleanup and simplify image building
uyuni-storage-setup:
- Version 5.1.4-0
- Add CreateArchive directive for git workflow usage
uyuni-tools:
- Version 5.1.24-0
- Actually use the --dbupgrade-tag parameter when computing the image URL (bsc#1249400)
- Handle CA files with symlinks during migration (bsc#1251044)
- Adjust traefik exposed configuration for chart v27+ (bsc#1247721)
- Fix systemd object initialization in server rename. (bsc#1250981)
- Add SSL secrets to the db setup container during migration. (bsc#1250976)
- Fix images handling in mgrpxy support ptf (bsc#1250940)
- Fix helm upgrade parameters (bsc#1253966)
- Detect custom apache and squid config in the /etc/uyuni/proxy folder
- Add ssh tuning to configure sshd (bsc#1253738)
- Move the SSL checks at the begining of the migration
- Remove cgroup mount for podman containers (bsc#1253347)
- Convert the traefik install time to local time (bsc#1251138)
- During migration, krb5.conf.d should be copied in /etc/rhn (bsc#1254478)
- Read env var from http conf file (bsc#1253282)
- Add --registry-host, --registry-user and --registry-password to pull images from an authenticate registry
- Deprecate --registry
- Unify backup create and restore dryrun option case
- Fix calling of squid -z in mgrpxy cache clear (bsc#1247644)
- Always start database container even if enabled
- Remove extra ipv6 mapping and nftables workaround (bsc#1248848)
- Remove old PostgreSQL exporter environment file before migration
- Support config command parse correctly supportconfig output (bsc#1255781)
How to apply this update:
- Log in as root user to the SUSE Multi-Linux Manager Retail Branch Server.
- Upgrade mgrpxy.
- If you are in a disconnected environment, upgrade the image packages.
- Reboot the system.
- Run
mgrpxy upgrade podmanwhich will use the default image tags.
Recommended update 5.1.2 for Multi-Linux Manager Server
Description:
This update fixes the following issues:
dhcpd-formula:
- Update to version 1.1.2
- enable "reservations-global" to fix global hosts (bsc#1258366)
- disable "match-client-id" - to fix static reservations when the id changes during boot (bsc#1258369)
server-attestation-image:
- Version 5.1.12
- Cleanup and simplify image building. No customer facing changes
server-hub-xmlrpc-api-image:
- Version 5.1.11
- Cleanup container building. No customer facing changes
server-image:
- Version 5.1.12
- Use BCI init image as base
- Add zchunk to server image (bsc#1247687)
- Ignore http proxy for localhost in healthcheck (bsc#1249155)
server-migration-14-16-image:
- Version 5.1.11
- Use BCI base image as base
- Cleanup and simplify image building. No customer facing changes
server-postgresql-image:
- Version 5.1.9
- Add pg_trgm extension to support trigram search
server-saline-image:
- Version 5.1.11
- Cleanup and simplify image building
- Keep the RPM database in the image to have information about the packages used to build the container
uyuni-tools:
- version 5.1.25-0
- If PTF image doesn't exists, use the current service image (bsc#1258418)
- Actually use the --dbupgrade-tag parameter when computing the image URL (bsc#1249400)
- Handle CA files with symlinks during migration (bsc#1251044)
- Adjust traefik exposed configuration for chart v27+ (bsc#1247721)
- Fix systemd object initialization in server rename. (bsc#1250981)
- Add SSL secrets to the db setup container during migration. (bsc#1250976)
- Fix images handling in mgrpxy support ptf (bsc#1250940)
- Fix helm upgrade parameters (bsc#1253966)
- Detect custom apache and squid config in the /etc/uyuni/proxy folder
- Add ssh tuning to configure sshd (bsc#1253738)
- Move the SSL checks at the begining of the migration
- Remove cgroup mount for podman containers (bsc#1253347)
- Convert the traefik install time to local time (bsc#1251138)
- During migration, krb5.conf.d should be copied in /etc/rhn (bsc#1254478)
- Read env var from http conf file (bsc#1253282)
- Add --registry-host, --registry-user and --registry-password to pull images from an authenticate registry
- Deprecate --registry
- Unify backup create and restore dryrun option case
- Fix calling of squid -z in mgrpxy cache clear (bsc#1247644)
- Always start database container even if enabled
- Remove extra ipv6 mapping and nftables workaround (bsc#1248848)
- Remove old PostgreSQL exporter environment file before migration
- Support config command parse correctly supportconfig output (bsc#1255781)
How to apply this update:
- Log in as root user to the SUSE Multi-Linux Manager Server.
- Upgrade mgradm and mgrctl.
- If you are in a disconnected environment, upgrade the image packages.
- Reboot the system.
- Run
mgradm upgrade podmanwhich will use the default image tags.
Patch Instructions:
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
-
SUSE Multi-Linux Manager Proxy 5.1 Extension for SLE
zypper in -t patch SUSE-Multi-Linux-Manager-Proxy-SLE-5.1-2026-624=1 -
SUSE Multi-Linux Manager Retail Branch Server 5.1 Extension for SLE
zypper in -t patch SUSE-Multi-Linux-Manager-Retail-Branch-Server-SLE-5.1-2026-624=1 -
SUSE Multi-Linux Manager Server 5.1 Extension for SLE
zypper in -t patch SUSE-Multi-Linux-Manager-Server-SLE-5.1-2026-624=1
Package List:
-
SUSE Multi-Linux Manager Proxy 5.1 Extension for SLE (aarch64 ppc64le s390x x86_64)
- mgrpxy-5.1.25-150700.3.15.1
- mgrpxy-debuginfo-5.1.25-150700.3.15.1
- uyuni-storage-setup-proxy-5.1.4-150700.3.3.5
-
SUSE Multi-Linux Manager Proxy 5.1 Extension for SLE (noarch)
- mgrpxy-bash-completion-5.1.25-150700.3.15.1
- mgrpxy-lang-5.1.25-150700.3.15.1
- mgrpxy-zsh-completion-5.1.25-150700.3.15.1
-
SUSE Multi-Linux Manager Proxy 5.1 Extension for SLE (aarch64)
- suse-multi-linux-manager-5.1-aarch64-proxy-squid-image-5.1.2-8.11.15
- suse-multi-linux-manager-5.1-aarch64-proxy-tftpd-image-5.1.2-8.11.16
- suse-multi-linux-manager-5.1-aarch64-proxy-httpd-image-5.1.2-8.13.41
- suse-multi-linux-manager-5.1-aarch64-proxy-salt-broker-image-5.1.2-9.11.44
- suse-multi-linux-manager-5.1-aarch64-proxy-ssh-image-5.1.2-8.11.15
-
SUSE Multi-Linux Manager Proxy 5.1 Extension for SLE (ppc64le)
- suse-multi-linux-manager-5.1-ppc64le-proxy-squid-image-5.1.2-8.11.15
- suse-multi-linux-manager-5.1-ppc64le-proxy-salt-broker-image-5.1.2-9.11.44
- suse-multi-linux-manager-5.1-ppc64le-proxy-httpd-image-5.1.2-8.13.41
- suse-multi-linux-manager-5.1-ppc64le-proxy-ssh-image-5.1.2-8.11.15
- suse-multi-linux-manager-5.1-ppc64le-proxy-tftpd-image-5.1.2-8.11.16
-
SUSE Multi-Linux Manager Proxy 5.1 Extension for SLE (s390x)
- suse-multi-linux-manager-5.1-s390x-proxy-tftpd-image-5.1.2-8.11.16
- suse-multi-linux-manager-5.1-s390x-proxy-squid-image-5.1.2-8.11.15
- suse-multi-linux-manager-5.1-s390x-proxy-salt-broker-image-5.1.2-9.11.44
- suse-multi-linux-manager-5.1-s390x-proxy-ssh-image-5.1.2-8.11.15
- suse-multi-linux-manager-5.1-s390x-proxy-httpd-image-5.1.2-8.13.41
-
SUSE Multi-Linux Manager Proxy 5.1 Extension for SLE (x86_64)
- suse-multi-linux-manager-5.1-x86_64-proxy-httpd-image-5.1.2-8.13.41
- suse-multi-linux-manager-5.1-x86_64-proxy-tftpd-image-5.1.2-8.11.16
- suse-multi-linux-manager-5.1-x86_64-proxy-salt-broker-image-5.1.2-9.11.44
- suse-multi-linux-manager-5.1-x86_64-proxy-squid-image-5.1.2-8.11.15
- suse-multi-linux-manager-5.1-x86_64-proxy-ssh-image-5.1.2-8.11.15
-
SUSE Multi-Linux Manager Retail Branch Server 5.1 Extension for SLE (aarch64 ppc64le s390x x86_64)
- mgrpxy-5.1.25-150700.3.15.1
- mgrpxy-debuginfo-5.1.25-150700.3.15.1
- uyuni-storage-setup-proxy-5.1.4-150700.3.3.5
-
SUSE Multi-Linux Manager Retail Branch Server 5.1 Extension for SLE (noarch)
- mgrpxy-bash-completion-5.1.25-150700.3.15.1
- mgrpxy-lang-5.1.25-150700.3.15.1
- mgrpxy-zsh-completion-5.1.25-150700.3.15.1
-
SUSE Multi-Linux Manager Retail Branch Server 5.1 Extension for SLE (aarch64)
- suse-multi-linux-manager-5.1-aarch64-proxy-squid-image-5.1.2-8.11.15
- suse-multi-linux-manager-5.1-aarch64-proxy-tftpd-image-5.1.2-8.11.16
- suse-multi-linux-manager-5.1-aarch64-proxy-httpd-image-5.1.2-8.13.41
- suse-multi-linux-manager-5.1-aarch64-proxy-salt-broker-image-5.1.2-9.11.44
- suse-multi-linux-manager-5.1-aarch64-proxy-ssh-image-5.1.2-8.11.15
-
SUSE Multi-Linux Manager Retail Branch Server 5.1 Extension for SLE (ppc64le)
- suse-multi-linux-manager-5.1-ppc64le-proxy-squid-image-5.1.2-8.11.15
- suse-multi-linux-manager-5.1-ppc64le-proxy-salt-broker-image-5.1.2-9.11.44
- suse-multi-linux-manager-5.1-ppc64le-proxy-httpd-image-5.1.2-8.13.41
- suse-multi-linux-manager-5.1-ppc64le-proxy-ssh-image-5.1.2-8.11.15
- suse-multi-linux-manager-5.1-ppc64le-proxy-tftpd-image-5.1.2-8.11.16
-
SUSE Multi-Linux Manager Retail Branch Server 5.1 Extension for SLE (s390x)
- suse-multi-linux-manager-5.1-s390x-proxy-tftpd-image-5.1.2-8.11.16
- suse-multi-linux-manager-5.1-s390x-proxy-squid-image-5.1.2-8.11.15
- suse-multi-linux-manager-5.1-s390x-proxy-salt-broker-image-5.1.2-9.11.44
- suse-multi-linux-manager-5.1-s390x-proxy-ssh-image-5.1.2-8.11.15
- suse-multi-linux-manager-5.1-s390x-proxy-httpd-image-5.1.2-8.13.41
-
SUSE Multi-Linux Manager Retail Branch Server 5.1 Extension for SLE (x86_64)
- suse-multi-linux-manager-5.1-x86_64-proxy-httpd-image-5.1.2-8.13.41
- suse-multi-linux-manager-5.1-x86_64-proxy-tftpd-image-5.1.2-8.11.16
- suse-multi-linux-manager-5.1-x86_64-proxy-salt-broker-image-5.1.2-9.11.44
- suse-multi-linux-manager-5.1-x86_64-proxy-squid-image-5.1.2-8.11.15
- suse-multi-linux-manager-5.1-x86_64-proxy-ssh-image-5.1.2-8.11.15
-
SUSE Multi-Linux Manager Server 5.1 Extension for SLE (aarch64 ppc64le s390x x86_64)
- mgradm-debuginfo-5.1.25-150700.3.15.1
- uyuni-storage-setup-server-5.1.4-150700.3.3.5
- mgrctl-5.1.25-150700.3.15.1
- mgradm-5.1.25-150700.3.15.1
- mgrctl-debuginfo-5.1.25-150700.3.15.1
-
SUSE Multi-Linux Manager Server 5.1 Extension for SLE (noarch)
- mgradm-lang-5.1.25-150700.3.15.1
- mgradm-bash-completion-5.1.25-150700.3.15.1
- uyuni-payg-timer-5.1.3-150700.3.3.5
- mgrctl-zsh-completion-5.1.25-150700.3.15.1
- mgrctl-bash-completion-5.1.25-150700.3.15.1
- mgrctl-lang-5.1.25-150700.3.15.1
- mgradm-zsh-completion-5.1.25-150700.3.15.1
-
SUSE Multi-Linux Manager Server 5.1 Extension for SLE (aarch64)
- suse-multi-linux-manager-5.1-aarch64-server-postgresql-image-5.1.2-6.11.15
- suse-multi-linux-manager-5.1-aarch64-server-attestation-image-5.1.2-8.13.26
- suse-multi-linux-manager-5.1-aarch64-server-hub-xmlrpc-api-image-5.1.2-8.11.16
- suse-multi-linux-manager-5.1-aarch64-server-migration-14-16-image-5.1.2-8.11.16
- suse-multi-linux-manager-5.1-aarch64-server-saline-image-5.1.2-9.11.36
- suse-multi-linux-manager-5.1-aarch64-server-image-5.1.2-8.11.37
-
SUSE Multi-Linux Manager Server 5.1 Extension for SLE (ppc64le)
- suse-multi-linux-manager-5.1-ppc64le-server-attestation-image-5.1.2-8.13.26
- suse-multi-linux-manager-5.1-ppc64le-server-image-5.1.2-8.11.37
- suse-multi-linux-manager-5.1-ppc64le-server-postgresql-image-5.1.2-6.11.15
- suse-multi-linux-manager-5.1-ppc64le-server-migration-14-16-image-5.1.2-8.11.16
- suse-multi-linux-manager-5.1-ppc64le-server-hub-xmlrpc-api-image-5.1.2-8.11.16
- suse-multi-linux-manager-5.1-ppc64le-server-saline-image-5.1.2-9.11.36
-
SUSE Multi-Linux Manager Server 5.1 Extension for SLE (s390x)
- suse-multi-linux-manager-5.1-s390x-server-saline-image-5.1.2-9.11.36
- suse-multi-linux-manager-5.1-s390x-server-migration-14-16-image-5.1.2-8.11.16
- suse-multi-linux-manager-5.1-s390x-server-hub-xmlrpc-api-image-5.1.2-8.11.16
- suse-multi-linux-manager-5.1-s390x-server-attestation-image-5.1.2-8.13.26
- suse-multi-linux-manager-5.1-s390x-server-image-5.1.2-8.11.37
- suse-multi-linux-manager-5.1-s390x-server-postgresql-image-5.1.2-6.11.15
-
SUSE Multi-Linux Manager Server 5.1 Extension for SLE (x86_64)
- suse-multi-linux-manager-5.1-x86_64-server-saline-image-5.1.2-9.11.36
- suse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-image-5.1.2-8.11.16
- suse-multi-linux-manager-5.1-x86_64-server-postgresql-image-5.1.2-6.11.15
- suse-multi-linux-manager-5.1-x86_64-server-migration-14-16-image-5.1.2-8.11.16
- suse-multi-linux-manager-5.1-x86_64-server-attestation-image-5.1.2-8.13.26
- suse-multi-linux-manager-5.1-x86_64-server-image-5.1.2-8.11.37
References:
- https://www.suse.com/security/cve/CVE-2025-13836.html
- https://www.suse.com/security/cve/CVE-2025-67724.html
- https://www.suse.com/security/cve/CVE-2025-67725.html
- https://www.suse.com/security/cve/CVE-2025-67726.html
- https://bugzilla.suse.com/show_bug.cgi?id=1240532
- https://bugzilla.suse.com/show_bug.cgi?id=1246130
- https://bugzilla.suse.com/show_bug.cgi?id=1247644
- https://bugzilla.suse.com/show_bug.cgi?id=1247687
- https://bugzilla.suse.com/show_bug.cgi?id=1247721
- https://bugzilla.suse.com/show_bug.cgi?id=1248848
- https://bugzilla.suse.com/show_bug.cgi?id=1249155
- https://bugzilla.suse.com/show_bug.cgi?id=1249400
- https://bugzilla.suse.com/show_bug.cgi?id=1250940
- https://bugzilla.suse.com/show_bug.cgi?id=1250976
- https://bugzilla.suse.com/show_bug.cgi?id=1250981
- https://bugzilla.suse.com/show_bug.cgi?id=1251044
- https://bugzilla.suse.com/show_bug.cgi?id=1251138
- https://bugzilla.suse.com/show_bug.cgi?id=1252020
- https://bugzilla.suse.com/show_bug.cgi?id=1253282
- https://bugzilla.suse.com/show_bug.cgi?id=1253347
- https://bugzilla.suse.com/show_bug.cgi?id=1253738
- https://bugzilla.suse.com/show_bug.cgi?id=1253773
- https://bugzilla.suse.com/show_bug.cgi?id=1253966
- https://bugzilla.suse.com/show_bug.cgi?id=1254316
- https://bugzilla.suse.com/show_bug.cgi?id=1254325
- https://bugzilla.suse.com/show_bug.cgi?id=1254400
- https://bugzilla.suse.com/show_bug.cgi?id=1254478
- https://bugzilla.suse.com/show_bug.cgi?id=1254903
- https://bugzilla.suse.com/show_bug.cgi?id=1254904
- https://bugzilla.suse.com/show_bug.cgi?id=1254905
- https://bugzilla.suse.com/show_bug.cgi?id=1255781
- https://bugzilla.suse.com/show_bug.cgi?id=1256991
- https://bugzilla.suse.com/show_bug.cgi?id=1257147
- https://bugzilla.suse.com/show_bug.cgi?id=1257255
- https://bugzilla.suse.com/show_bug.cgi?id=1257538
- https://bugzilla.suse.com/show_bug.cgi?id=1257992
- https://bugzilla.suse.com/show_bug.cgi?id=1258082
- https://bugzilla.suse.com/show_bug.cgi?id=1258164
- https://bugzilla.suse.com/show_bug.cgi?id=1258366
- https://bugzilla.suse.com/show_bug.cgi?id=1258369
- https://bugzilla.suse.com/show_bug.cgi?id=1258418
- https://jira.suse.com/browse/MSQA-1040