SUSE-RU-2025:4131-1: important: Recommended update for suse-migration-sle16-activation, SLES16-Migration, SLES16-SAP_Migration, suse-migration-services, suse-migration-rpm, wicked2nm, image-janitor

SLE-UPDATES null at suse.de
Tue Nov 18 16:30:23 UTC 2025 


# Recommended update for suse-migration-sle16-activation, SLES16-Migration,
SLES16-SAP_Migration, suse-migration-services, suse-migration-rpm, wicked2nm,
image-janitor

Announcement ID: SUSE-RU-2025:4131-1  
Release Date: 2025-11-18T15:56:53Z  
Rating: important  
References:

  * bsc#1133919
  * bsc#1142108
  * bsc#1155192
  * bsc#1173532
  * bsc#1178737
  * bsc#1182520
  * bsc#1199028
  * bsc#1209304
  * bsc#1209591
  * bsc#1211240
  * bsc#1219004
  * bsc#1222258
  * bsc#1244188
  * bsc#1246513
  * bsc#1248010
  * bsc#1248137
  * bsc#1250076
  * bsc#1250078

  
Affected Products:

  * Basesystem Module 15-SP7
  * SAP Applications Module 15-SP7
  * SUSE Linux Enterprise Desktop 15 SP7
  * SUSE Linux Enterprise Real Time 15 SP7
  * SUSE Linux Enterprise Server 15 SP7
  * SUSE Linux Enterprise Server for SAP Applications 15 SP7

  
  
An update that has 18 fixes can now be installed.

## Description:

This update for suse-migration-sle16-activation, SLES16-Migration,
SLES16-SAP_Migration, suse-migration-services, suse-migration-rpm, wicked2nm,
image-janitor fixes the following issues:

Changes for suse-migration-sle16-activation:

  * Simplify interface naming by disabling predictable names at boot
  * shellcheck heavily complained
  * check migration target before testing for architecture version
  * Create systemd.link files for virtual VMware/Hyper-V NICs
  * Add changes for newest wicked2nm
  * Activation packages can no longer be noarch
  * Architecture check before allowing migration to be activated
  * Add missing pre snapshot setup to run_migration
  * Add wicked2nm network migration
  * Setup ExclusiveArch for activation packages
  * Make activation package require by provides tag
  * Fix product related requirement settings

Changes for SLES16-Migration:

  * Added .ssh directory for migration user
  * Add etc/motd overlay file Print message how to show migration progress
    information
  * Fix build on more architectures
  * Initial changelog

Changes for SLES16-SAP_Migration:

  * Support wicked2nm migration
  * Migration live image for SLES4SAP 15 to 16

Changes for suse-migration-services:

  * Set systemd offline for Zypper in chroot mode
  * Fix apparmor install procedure
  * Fixed azuremetadata device lookup
  * Use of f-strings not allowed in the DMS
  * Simplify interface naming by disabling predictable names at boot
  * Fixed test_check_lsm_migration unit test
  * Fix setup_host_network_test by mocking os.makedirs
  * wicked2nm: log network state on nm-online failure
  * Fixed LSM pre checks to be more robust
  * shellcheck heavily complained
  * Do not evaluate wicked2nm output in precheck
  * Fix unit test for lsm check
  * prechecks/lsm.py: remove _apparmor_analyze_profiles()
  * LSM migration check for AppArmor -> SELinux
  * Improve pre-check message
  * Fix MinSLEVersion value depending on target
  * reduce package set on migration image
  * Fixed behavior of wicked2m pre check
  * implementation of sshd root login pre-check
  * Fixed selinux to apparmor migration
  * Fixed reading of migration config for target class
  * Add recursion guard to MigrationConfig::_merge_config_dicts
  * shrink migration image
  * container/sle16/config.sh
  * sle16/config.sh - use dropin for s390 migration-config
  * doc: fix indentation
  * check for migration target by matching ISO file name
  * config: introduce dropin dir migration-config.d/
  * Apply SLE16 live image setup to container setup
  * bind mount only required subdirectories under /run into chroot
  * Add missing package requirement
  * check migration target before testing for architecture version
  * setup_host_network: simplify code - use os.makedirs()
  * Create systemd.link files for virtual VMware/Hyper-V NIC
  * Preserve systemd.link files from /etc/systemd/network/
  * Add changes for the newest wicked2nm
  * Ensure wicked2nm is a dependency of pre-checks for SLE 16 migration
  * Activation packages can no longer be noarch
  * Fix update of image .changes files
  * Architecture check before allowing migration to be activated
  * Improve error logs when wicked2nm fails
  * Include image changelog to version bump
  * Ensure wicked2nm migration is always running, despite warnings
  * Fix: add --no-recommends on patterns-base-selinux installation
  * Update suse-migration-services for container use
  * Update SLE16 migration container
  * Update SAP live migration image
  * Add missing pre snapshot setup to run_migration
  * Follow up fix for the wicked to nm migration
  * Add wicked2nm network migration
  * Add glob support to preserve_files
  * Setup ExclusiveArch for activation packages
  * Build sles4sap migration for cloud on x86_64 only
  * Do not build sles4sap migration on s390x
  * Use systemctl kexec
  * Fix: return the correct kernel path based on machine type
  * Fixed glob pattern match for package name
  * Remove menitoning of SLES 12-SP4
  * Make activation package require by provides tag
  * Added SLES16-SAP_Migration live image
  * Do not use list[str] type hint
  * Fix error evaluation from offline_migrations API
  * Fix logging from non unit files
  * Fix product related requirement settings
  * Repos for migration image must be in kiwi
  * Added .ssh to migration user for SAP 15 live image
  * Added SLES15-SAP_Migration Makefile target
  * Add proper release package for SLE16 migration
  * Fix typo in service name
  * Drop obsolete check for resolv.conf
  * Fix migration user home dir setup for SLE16
  * Update README_QA.rst
  * test: split unit test for setup_name_resolver
  * Install patterns-base-selinux for Apparmor migration
  * Ensure the rebuild counter is not stripped from the rpm
  * Exit silently if no migration iso is found
  * Ensure rpmlintrc file is part of suse-migration-services SRPM
  * Ignore fixup! entries when generating changelog
  * Increase python test matrix
  * Remove redundanct requires on itself
  * Fix ordering of pre-checks and actual migration
  * Add SLES15-Migration target to Makefile
  * Fix suse-migration-console-log service
  * Fix typo in REA- Activate only connections if present in the current system
  * Improve error output, exit codes and add flag to disable user hints
  * Add support for autoip-fallback
  * Issue only a info when dhcp.update is non default
  * Add ipv4_static broadcast
  * Apply dhcp settings to mirror wicked client id
  * Fix test.sh, fail if migration succeed but expect fail
  * Fix sysctl handling
  * Avoid cloning in parsing of route
  * Fix continue migration to show all warnings beforehand
  * Improve warning messages - show interface, element names
  * Remove unwrap in route parsing
  * bump slab from 0.4.10 to 0.4.11 to address CVE-2025-55159 (bsc#1248010)
  * Fix netconfig handling with proper priority setting
  * Add ovs support
  * Use agama-network instead of agama-(lib|server)
  * Only activate connections marked with autostart
  * Give hint in error message how to ignore warnings
  * Update README.md with updated installation and usage infos
  * Add support for Leap 15
  * Remove BuildRequires that are no longer necessary due to the agama-network
    switch.
  * The agama-network switch also removes the vulnerable and unmaintained
    'users' crate from the dependencies. (bsc#1244188)DME_QA
  * Fix: split name resolver setup into its own service
  * Fix: set path according to current arch in grub.d/99_migration
  * Add support to enable single rpm transaction for upgrade
  * enable suse-migration-ha.service in the migration image
  * Migration for high availability extension
  * RPM wrapper fixes
  * Cleanup secfile to follow python singlespec policy
  * Support product specifier in ISO name
  * Ensure sle16 images can build on all supported platforms
  * Use name pattern compatible to suse-migration-rpm
  * Fix SLE15 migration images
  * SAP product should migrate to 15 SP4
  * Add SLES15-SAP-Migration
  * Bump target to SLE15 SP7
  * Update bumpversion config Include sle16 container build to version bump
  * Handle selinux boot option when using kexec
  * Ensure migration to SLES16 uses selinux, not apparmor
  * improve os-release parsing
  * Ensure SLES16 is also detected in SCC precheck
  * Add high availablity extension check
  * Fix package names for python packages on SLE16
  * Relax on the shim-install call
  * Fixup package name for SLE16 and SLE16 container
  * Fix changelog references for activation packages
  * Add product migration check

Changes for suse-migration-rpm:

  * Fix MinSLEVersion value depending on target
  * Add product requirement according to image name.
  * Exit silently if no migration iso is found.
  * Add build and perl(Date::Parse) to ensure we can append changelog entries to
    generated package.

Changes for wicked2nm:

  * Activate only connections if present in the current system
  * Improve error output, exit codes and add flag to disable user hints
  * Add support for autoip-fallback
  * Issue only a info when dhcp.update is non default
  * Add ipv4_static broadcast
  * Apply dhcp settings to mirror wicked client id
  * Fix test.sh, fail if migration succeed but expect fail
  * Fix sysctl handling
  * Avoid cloning in parsing of route
  * Fix continue migration to show all warnings beforehand
  * Improve warning messages - show interface, element names
  * Remove unwrap in route parsing
  * bump slab from 0.4.10 to 0.4.11 to address CVE-2025-55159 (bsc#1248010)
  * Fix netconfig handling with proper priority setting
  * Add ovs support
  * Use agama-network instead of agama-(lib|server)
  * Only activate connections marked with autostart
  * Give hint in error message how to ignore warnings
  * Update README.md with updated installation and usage infos
  * Add support for Leap 15
  * Remove BuildRequires that are no longer necessary due to the agama-network
    switch.
  * The agama-network switch also removes the vulnerable and unmaintained
    'users' crate from the dependencies. (bsc#1244188)

Chages for image-janitor: \- Fix packaging (add doc, license) \- Release 0.2.0
with configuration files packaged \- Initial packag

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".  
Alternatively you can run the command listed for your product:

  * SAP Applications Module 15-SP7  
    zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP7-2025-4131=1

  * Basesystem Module 15-SP7  
    zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2025-4131=1

## Package List:

  * SAP Applications Module 15-SP7 (ppc64le x86_64)
    * SLES16-SAP_Migration-2.1.26-15.14.4
  * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64)
    * wicked2nm-debuginfo-1.4.0-150700.15.7.2
    * wicked2nm-1.4.0-150700.15.7.2
    * wicked2nm-debugsource-1.4.0-150700.15.7.2
    * SLES16-Migration-2.1.26-15.22.4
  * Basesystem Module 15-SP7 (noarch)
    * python3-Cerberus-1.3.2-150700.20.2.10
    * python3-migration-2.1.26-150700.16.12.1
    * suse-migration-pre-checks-2.1.26-150700.16.12.1
  * Basesystem Module 15-SP7 (aarch64 ppc64le x86_64)
    * suse-migration-sle16-activation-2.1.26-150700.15.9.1

## References:

  * https://bugzilla.suse.com/show_bug.cgi?id=1133919
  * https://bugzilla.suse.com/show_bug.cgi?id=1142108
  * https://bugzilla.suse.com/show_bug.cgi?id=1155192
  * https://bugzilla.suse.com/show_bug.cgi?id=1173532
  * https://bugzilla.suse.com/show_bug.cgi?id=1178737
  * https://bugzilla.suse.com/show_bug.cgi?id=1182520
  * https://bugzilla.suse.com/show_bug.cgi?id=1199028
  * https://bugzilla.suse.com/show_bug.cgi?id=1209304
  * https://bugzilla.suse.com/show_bug.cgi?id=1209591
  * https://bugzilla.suse.com/show_bug.cgi?id=1211240
  * https://bugzilla.suse.com/show_bug.cgi?id=1219004
  * https://bugzilla.suse.com/show_bug.cgi?id=1222258
  * https://bugzilla.suse.com/show_bug.cgi?id=1244188
  * https://bugzilla.suse.com/show_bug.cgi?id=1246513
  * https://bugzilla.suse.com/show_bug.cgi?id=1248010
  * https://bugzilla.suse.com/show_bug.cgi?id=1248137
  * https://bugzilla.suse.com/show_bug.cgi?id=1250076
  * https://bugzilla.suse.com/show_bug.cgi?id=1250078

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.suse.com/pipermail/sle-updates/attachments/20251118/aaa7e2a3/attachment.htm>

More information about the sle-updates mailing list