Maintenance update for Multi-Linux Manager 5.1: Server, Proxy and Retail Branch Server

Announcement ID: SUSE-RU-2026:0624-1
Release Date: 2026-02-25T09:40:41Z
Rating: important
References:
Cross-References:
CVSS scores:
  • CVE-2025-13836 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
  • CVE-2025-13836 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
  • CVE-2025-13836 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
  • CVE-2025-13836 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  • CVE-2025-67724 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
  • CVE-2025-67724 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
  • CVE-2025-67724 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
  • CVE-2025-67724 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
  • CVE-2025-67725 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
  • CVE-2025-67725 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  • CVE-2025-67725 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  • CVE-2025-67726 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
  • CVE-2025-67726 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  • CVE-2025-67726 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products:
  • SUSE Linux Enterprise Server 15 SP7
  • SUSE Multi-Linux Manager Proxy 5.1 Extension for SLE
  • SUSE Multi-Linux Manager Retail Branch Server 5.1 Extension for SLE
  • SUSE Multi-Linux Manager Server 5.1 Extension for SLE

An update that solves four vulnerabilities, contains one feature and has 33 fixes can now be installed.

Recommended update 5.1.2 for Multi-Linux Manager Proxy

Description:

This update fixes the following issues:

proxy-httpd-image:

  • Version 5.1.13
  • Add support for a timeout property in the configuration (bsc#1252020)
  • Cleanup and simplify image building

proxy-salt-broker-image:

  • Version 5.1.12
  • Cleanup and simplify image building

proxy-squid-image:

  • Version 5.1.11
  • Configure squid replacement policy properly before cache dir (bsc#1253773)
  • Add missing USER squid directive
  • Cleanup and simplify image building
  • Allow override all parameters in squid conf (bsc#1250940)
  • Set the default timeout for /pub to 30min (bsc#1247644)

proxy-ssh-image:

  • Version 5.1.11
  • Cleanup and simplify image building

proxy-tftpd-image:

  • Version 5.1.11
  • Cleanup and simplify image building

uyuni-storage-setup:

  • Version 5.1.4-0
  • Add CreateArchive directive for git workflow usage

uyuni-tools:

  • Version 5.1.24-0
  • Actually use the --dbupgrade-tag parameter when computing the image URL (bsc#1249400)
  • Handle CA files with symlinks during migration (bsc#1251044)
  • Adjust traefik exposed configuration for chart v27+ (bsc#1247721)
  • Fix systemd object initialization in server rename. (bsc#1250981)
  • Add SSL secrets to the db setup container during migration. (bsc#1250976)
  • Fix images handling in mgrpxy support ptf (bsc#1250940)
  • Fix helm upgrade parameters (bsc#1253966)
  • Detect custom apache and squid config in the /etc/uyuni/proxy folder
  • Add ssh tuning to configure sshd (bsc#1253738)
  • Move the SSL checks at the begining of the migration
  • Remove cgroup mount for podman containers (bsc#1253347)
  • Convert the traefik install time to local time (bsc#1251138)
  • During migration, krb5.conf.d should be copied in /etc/rhn (bsc#1254478)
  • Read env var from http conf file (bsc#1253282)
  • Add --registry-host, --registry-user and --registry-password to pull images from an authenticate registry
  • Deprecate --registry
  • Unify backup create and restore dryrun option case
  • Fix calling of squid -z in mgrpxy cache clear (bsc#1247644)
  • Always start database container even if enabled
  • Remove extra ipv6 mapping and nftables workaround (bsc#1248848)
  • Remove old PostgreSQL exporter environment file before migration
  • Support config command parse correctly supportconfig output (bsc#1255781)

How to apply this update:

  1. Log in as root user to the SUSE Multi-Linux Manager Proxy.
  2. Upgrade mgrpxy.
  3. If you are in a disconnected environment, upgrade the image packages.
  4. Reboot the system.
  5. Run mgrpxy upgrade podman which will use the default image tags.

Recommended update 5.1.2 for Multi-Linux Manager Retail Branch Server

Description:

This update fixes the following issues:

proxy-httpd-image:

  • Version 5.1.13
  • Add support for a timeout property in the configuration (bsc#1252020)
  • Cleanup and simplify image building

proxy-salt-broker-image:

  • Version 5.1.12
  • Cleanup and simplify image building

proxy-squid-image:

  • Version 5.1.11
  • Configure squid replacement policy properly before cache dir (bsc#1253773)
  • Add missing USER squid directive
  • Cleanup and simplify image building
  • Allow override all parameters in squid conf (bsc#1250940)
  • Set the default timeout for /pub to 30min (bsc#1247644)

proxy-ssh-image:

  • Version 5.1.11
  • Cleanup and simplify image building

proxy-tftpd-image:

  • Version 5.1.11
  • Cleanup and simplify image building

uyuni-storage-setup:

  • Version 5.1.4-0
  • Add CreateArchive directive for git workflow usage

uyuni-tools:

  • Version 5.1.24-0
  • Actually use the --dbupgrade-tag parameter when computing the image URL (bsc#1249400)
  • Handle CA files with symlinks during migration (bsc#1251044)
  • Adjust traefik exposed configuration for chart v27+ (bsc#1247721)
  • Fix systemd object initialization in server rename. (bsc#1250981)
  • Add SSL secrets to the db setup container during migration. (bsc#1250976)
  • Fix images handling in mgrpxy support ptf (bsc#1250940)
  • Fix helm upgrade parameters (bsc#1253966)
  • Detect custom apache and squid config in the /etc/uyuni/proxy folder
  • Add ssh tuning to configure sshd (bsc#1253738)
  • Move the SSL checks at the begining of the migration
  • Remove cgroup mount for podman containers (bsc#1253347)
  • Convert the traefik install time to local time (bsc#1251138)
  • During migration, krb5.conf.d should be copied in /etc/rhn (bsc#1254478)
  • Read env var from http conf file (bsc#1253282)
  • Add --registry-host, --registry-user and --registry-password to pull images from an authenticate registry
  • Deprecate --registry
  • Unify backup create and restore dryrun option case
  • Fix calling of squid -z in mgrpxy cache clear (bsc#1247644)
  • Always start database container even if enabled
  • Remove extra ipv6 mapping and nftables workaround (bsc#1248848)
  • Remove old PostgreSQL exporter environment file before migration
  • Support config command parse correctly supportconfig output (bsc#1255781)

How to apply this update:

  1. Log in as root user to the SUSE Multi-Linux Manager Retail Branch Server.
  2. Upgrade mgrpxy.
  3. If you are in a disconnected environment, upgrade the image packages.
  4. Reboot the system.
  5. Run mgrpxy upgrade podman which will use the default image tags.

Recommended update 5.1.2 for Multi-Linux Manager Server

Description:

This update fixes the following issues:

dhcpd-formula:

  • Update to version 1.1.2
  • enable "reservations-global" to fix global hosts (bsc#1258366)
  • disable "match-client-id" - to fix static reservations when the id changes during boot (bsc#1258369)

server-attestation-image:

  • Version 5.1.12
  • Cleanup and simplify image building. No customer facing changes

server-hub-xmlrpc-api-image:

  • Version 5.1.11
  • Cleanup container building. No customer facing changes

server-image:

  • Version 5.1.12
  • Use BCI init image as base
  • Add zchunk to server image (bsc#1247687)
  • Ignore http proxy for localhost in healthcheck (bsc#1249155)

server-migration-14-16-image:

  • Version 5.1.11
  • Use BCI base image as base
  • Cleanup and simplify image building. No customer facing changes

server-postgresql-image:

  • Version 5.1.9
  • Add pg_trgm extension to support trigram search

server-saline-image:

  • Version 5.1.11
  • Cleanup and simplify image building
  • Keep the RPM database in the image to have information about the packages used to build the container

uyuni-tools:

  • version 5.1.25-0
  • If PTF image doesn't exists, use the current service image (bsc#1258418)
  • Actually use the --dbupgrade-tag parameter when computing the image URL (bsc#1249400)
  • Handle CA files with symlinks during migration (bsc#1251044)
  • Adjust traefik exposed configuration for chart v27+ (bsc#1247721)
  • Fix systemd object initialization in server rename. (bsc#1250981)
  • Add SSL secrets to the db setup container during migration. (bsc#1250976)
  • Fix images handling in mgrpxy support ptf (bsc#1250940)
  • Fix helm upgrade parameters (bsc#1253966)
  • Detect custom apache and squid config in the /etc/uyuni/proxy folder
  • Add ssh tuning to configure sshd (bsc#1253738)
  • Move the SSL checks at the begining of the migration
  • Remove cgroup mount for podman containers (bsc#1253347)
  • Convert the traefik install time to local time (bsc#1251138)
  • During migration, krb5.conf.d should be copied in /etc/rhn (bsc#1254478)
  • Read env var from http conf file (bsc#1253282)
  • Add --registry-host, --registry-user and --registry-password to pull images from an authenticate registry
  • Deprecate --registry
  • Unify backup create and restore dryrun option case
  • Fix calling of squid -z in mgrpxy cache clear (bsc#1247644)
  • Always start database container even if enabled
  • Remove extra ipv6 mapping and nftables workaround (bsc#1248848)
  • Remove old PostgreSQL exporter environment file before migration
  • Support config command parse correctly supportconfig output (bsc#1255781)

How to apply this update:

  1. Log in as root user to the SUSE Multi-Linux Manager Server.
  2. Upgrade mgradm and mgrctl.
  3. If you are in a disconnected environment, upgrade the image packages.
  4. Reboot the system.
  5. Run mgradm upgrade podman which will use the default image tags.

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

  • SUSE Multi-Linux Manager Proxy 5.1 Extension for SLE
    zypper in -t patch SUSE-Multi-Linux-Manager-Proxy-SLE-5.1-2026-624=1
  • SUSE Multi-Linux Manager Retail Branch Server 5.1 Extension for SLE
    zypper in -t patch SUSE-Multi-Linux-Manager-Retail-Branch-Server-SLE-5.1-2026-624=1
  • SUSE Multi-Linux Manager Server 5.1 Extension for SLE
    zypper in -t patch SUSE-Multi-Linux-Manager-Server-SLE-5.1-2026-624=1

Package List:

  • SUSE Multi-Linux Manager Proxy 5.1 Extension for SLE (aarch64 ppc64le s390x x86_64)
    • mgrpxy-5.1.25-150700.3.15.1
    • mgrpxy-debuginfo-5.1.25-150700.3.15.1
    • uyuni-storage-setup-proxy-5.1.4-150700.3.3.5
  • SUSE Multi-Linux Manager Proxy 5.1 Extension for SLE (noarch)
    • mgrpxy-bash-completion-5.1.25-150700.3.15.1
    • mgrpxy-lang-5.1.25-150700.3.15.1
    • mgrpxy-zsh-completion-5.1.25-150700.3.15.1
  • SUSE Multi-Linux Manager Proxy 5.1 Extension for SLE (aarch64)
    • suse-multi-linux-manager-5.1-aarch64-proxy-squid-image-5.1.2-8.11.15
    • suse-multi-linux-manager-5.1-aarch64-proxy-tftpd-image-5.1.2-8.11.16
    • suse-multi-linux-manager-5.1-aarch64-proxy-httpd-image-5.1.2-8.13.41
    • suse-multi-linux-manager-5.1-aarch64-proxy-salt-broker-image-5.1.2-9.11.44
    • suse-multi-linux-manager-5.1-aarch64-proxy-ssh-image-5.1.2-8.11.15
  • SUSE Multi-Linux Manager Proxy 5.1 Extension for SLE (ppc64le)
    • suse-multi-linux-manager-5.1-ppc64le-proxy-squid-image-5.1.2-8.11.15
    • suse-multi-linux-manager-5.1-ppc64le-proxy-salt-broker-image-5.1.2-9.11.44
    • suse-multi-linux-manager-5.1-ppc64le-proxy-httpd-image-5.1.2-8.13.41
    • suse-multi-linux-manager-5.1-ppc64le-proxy-ssh-image-5.1.2-8.11.15
    • suse-multi-linux-manager-5.1-ppc64le-proxy-tftpd-image-5.1.2-8.11.16
  • SUSE Multi-Linux Manager Proxy 5.1 Extension for SLE (s390x)
    • suse-multi-linux-manager-5.1-s390x-proxy-tftpd-image-5.1.2-8.11.16
    • suse-multi-linux-manager-5.1-s390x-proxy-squid-image-5.1.2-8.11.15
    • suse-multi-linux-manager-5.1-s390x-proxy-salt-broker-image-5.1.2-9.11.44
    • suse-multi-linux-manager-5.1-s390x-proxy-ssh-image-5.1.2-8.11.15
    • suse-multi-linux-manager-5.1-s390x-proxy-httpd-image-5.1.2-8.13.41
  • SUSE Multi-Linux Manager Proxy 5.1 Extension for SLE (x86_64)
    • suse-multi-linux-manager-5.1-x86_64-proxy-httpd-image-5.1.2-8.13.41
    • suse-multi-linux-manager-5.1-x86_64-proxy-tftpd-image-5.1.2-8.11.16
    • suse-multi-linux-manager-5.1-x86_64-proxy-salt-broker-image-5.1.2-9.11.44
    • suse-multi-linux-manager-5.1-x86_64-proxy-squid-image-5.1.2-8.11.15
    • suse-multi-linux-manager-5.1-x86_64-proxy-ssh-image-5.1.2-8.11.15
  • SUSE Multi-Linux Manager Retail Branch Server 5.1 Extension for SLE (aarch64 ppc64le s390x x86_64)
    • mgrpxy-5.1.25-150700.3.15.1
    • mgrpxy-debuginfo-5.1.25-150700.3.15.1
    • uyuni-storage-setup-proxy-5.1.4-150700.3.3.5
  • SUSE Multi-Linux Manager Retail Branch Server 5.1 Extension for SLE (noarch)
    • mgrpxy-bash-completion-5.1.25-150700.3.15.1
    • mgrpxy-lang-5.1.25-150700.3.15.1
    • mgrpxy-zsh-completion-5.1.25-150700.3.15.1
  • SUSE Multi-Linux Manager Retail Branch Server 5.1 Extension for SLE (aarch64)
    • suse-multi-linux-manager-5.1-aarch64-proxy-squid-image-5.1.2-8.11.15
    • suse-multi-linux-manager-5.1-aarch64-proxy-tftpd-image-5.1.2-8.11.16
    • suse-multi-linux-manager-5.1-aarch64-proxy-httpd-image-5.1.2-8.13.41
    • suse-multi-linux-manager-5.1-aarch64-proxy-salt-broker-image-5.1.2-9.11.44
    • suse-multi-linux-manager-5.1-aarch64-proxy-ssh-image-5.1.2-8.11.15
  • SUSE Multi-Linux Manager Retail Branch Server 5.1 Extension for SLE (ppc64le)
    • suse-multi-linux-manager-5.1-ppc64le-proxy-squid-image-5.1.2-8.11.15
    • suse-multi-linux-manager-5.1-ppc64le-proxy-salt-broker-image-5.1.2-9.11.44
    • suse-multi-linux-manager-5.1-ppc64le-proxy-httpd-image-5.1.2-8.13.41
    • suse-multi-linux-manager-5.1-ppc64le-proxy-ssh-image-5.1.2-8.11.15
    • suse-multi-linux-manager-5.1-ppc64le-proxy-tftpd-image-5.1.2-8.11.16
  • SUSE Multi-Linux Manager Retail Branch Server 5.1 Extension for SLE (s390x)
    • suse-multi-linux-manager-5.1-s390x-proxy-tftpd-image-5.1.2-8.11.16
    • suse-multi-linux-manager-5.1-s390x-proxy-squid-image-5.1.2-8.11.15
    • suse-multi-linux-manager-5.1-s390x-proxy-salt-broker-image-5.1.2-9.11.44
    • suse-multi-linux-manager-5.1-s390x-proxy-ssh-image-5.1.2-8.11.15
    • suse-multi-linux-manager-5.1-s390x-proxy-httpd-image-5.1.2-8.13.41
  • SUSE Multi-Linux Manager Retail Branch Server 5.1 Extension for SLE (x86_64)
    • suse-multi-linux-manager-5.1-x86_64-proxy-httpd-image-5.1.2-8.13.41
    • suse-multi-linux-manager-5.1-x86_64-proxy-tftpd-image-5.1.2-8.11.16
    • suse-multi-linux-manager-5.1-x86_64-proxy-salt-broker-image-5.1.2-9.11.44
    • suse-multi-linux-manager-5.1-x86_64-proxy-squid-image-5.1.2-8.11.15
    • suse-multi-linux-manager-5.1-x86_64-proxy-ssh-image-5.1.2-8.11.15
  • SUSE Multi-Linux Manager Server 5.1 Extension for SLE (aarch64 ppc64le s390x x86_64)
    • mgradm-debuginfo-5.1.25-150700.3.15.1
    • uyuni-storage-setup-server-5.1.4-150700.3.3.5
    • mgrctl-5.1.25-150700.3.15.1
    • mgradm-5.1.25-150700.3.15.1
    • mgrctl-debuginfo-5.1.25-150700.3.15.1
  • SUSE Multi-Linux Manager Server 5.1 Extension for SLE (noarch)
    • mgradm-lang-5.1.25-150700.3.15.1
    • mgradm-bash-completion-5.1.25-150700.3.15.1
    • uyuni-payg-timer-5.1.3-150700.3.3.5
    • mgrctl-zsh-completion-5.1.25-150700.3.15.1
    • mgrctl-bash-completion-5.1.25-150700.3.15.1
    • mgrctl-lang-5.1.25-150700.3.15.1
    • mgradm-zsh-completion-5.1.25-150700.3.15.1
  • SUSE Multi-Linux Manager Server 5.1 Extension for SLE (aarch64)
    • suse-multi-linux-manager-5.1-aarch64-server-postgresql-image-5.1.2-6.11.15
    • suse-multi-linux-manager-5.1-aarch64-server-attestation-image-5.1.2-8.13.26
    • suse-multi-linux-manager-5.1-aarch64-server-hub-xmlrpc-api-image-5.1.2-8.11.16
    • suse-multi-linux-manager-5.1-aarch64-server-migration-14-16-image-5.1.2-8.11.16
    • suse-multi-linux-manager-5.1-aarch64-server-saline-image-5.1.2-9.11.36
    • suse-multi-linux-manager-5.1-aarch64-server-image-5.1.2-8.11.37
  • SUSE Multi-Linux Manager Server 5.1 Extension for SLE (ppc64le)
    • suse-multi-linux-manager-5.1-ppc64le-server-attestation-image-5.1.2-8.13.26
    • suse-multi-linux-manager-5.1-ppc64le-server-image-5.1.2-8.11.37
    • suse-multi-linux-manager-5.1-ppc64le-server-postgresql-image-5.1.2-6.11.15
    • suse-multi-linux-manager-5.1-ppc64le-server-migration-14-16-image-5.1.2-8.11.16
    • suse-multi-linux-manager-5.1-ppc64le-server-hub-xmlrpc-api-image-5.1.2-8.11.16
    • suse-multi-linux-manager-5.1-ppc64le-server-saline-image-5.1.2-9.11.36
  • SUSE Multi-Linux Manager Server 5.1 Extension for SLE (s390x)
    • suse-multi-linux-manager-5.1-s390x-server-saline-image-5.1.2-9.11.36
    • suse-multi-linux-manager-5.1-s390x-server-migration-14-16-image-5.1.2-8.11.16
    • suse-multi-linux-manager-5.1-s390x-server-hub-xmlrpc-api-image-5.1.2-8.11.16
    • suse-multi-linux-manager-5.1-s390x-server-attestation-image-5.1.2-8.13.26
    • suse-multi-linux-manager-5.1-s390x-server-image-5.1.2-8.11.37
    • suse-multi-linux-manager-5.1-s390x-server-postgresql-image-5.1.2-6.11.15
  • SUSE Multi-Linux Manager Server 5.1 Extension for SLE (x86_64)
    • suse-multi-linux-manager-5.1-x86_64-server-saline-image-5.1.2-9.11.36
    • suse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-image-5.1.2-8.11.16
    • suse-multi-linux-manager-5.1-x86_64-server-postgresql-image-5.1.2-6.11.15
    • suse-multi-linux-manager-5.1-x86_64-server-migration-14-16-image-5.1.2-8.11.16
    • suse-multi-linux-manager-5.1-x86_64-server-attestation-image-5.1.2-8.13.26
    • suse-multi-linux-manager-5.1-x86_64-server-image-5.1.2-8.11.37

References: