SUSE-RU-2026:1526-1: moderate: Maintenance update for Multi-Linux Manager 5.1: Server, Proxy and Retail Branch Server

SLE-UPDATES null at suse.de
Tue Apr 21 16:32:30 UTC 2026



# Maintenance update for Multi-Linux Manager 5.1: Server, Proxy and Retail
Branch Server

Announcement ID: SUSE-RU-2026:1526-1  
Release Date: 2026-04-21T09:28:41Z  
Rating: moderate  
References:

  * bsc#1240895
  * bsc#1244321
  * bsc#1246315
  * bsc#1249675
  * bsc#1250367
  * bsc#1250557
  * bsc#1251821
  * bsc#1251865
  * bsc#1252098
  * bsc#1252548
  * bsc#1252638
  * bsc#1252793
  * bsc#1252867
  * bsc#1252927
  * bsc#1252964
  * bsc#1253034
  * bsc#1253144
  * bsc#1253712
  * bsc#1254154
  * bsc#1254259
  * bsc#1254585
  * bsc#1254619
  * bsc#1254629
  * bsc#1255743
  * bsc#1256044
  * bsc#1256392
  * bsc#1256422
  * bsc#1256493
  * bsc#1256512
  * bsc#1256583
  * bsc#1256590
  * bsc#1256791
  * bsc#1257022
  * bsc#1257447
  * bsc#1257621
  * bsc#1257647
  * bsc#1257660
  * bsc#1257674
  * bsc#1257760
  * bsc#1257823
  * bsc#1257941
  * bsc#1257950
  * bsc#1257967
  * bsc#1258015
  * bsc#1258017
  * bsc#1258106
  * bsc#1258168
  * bsc#1258378
  * bsc#1258382
  * bsc#1258796
  * bsc#1258927
  * bsc#1259057
  * bsc#1259127
  * bsc#1259137
  * bsc#1259208
  * bsc#1259230
  * bsc#1259243
  * bsc#1259287
  * bsc#1259316
  * bsc#1259416
  * bsc#1259471
  * bsc#1259519
  * bsc#1259590
  * bsc#1262136
  * jsc#MSQA-1048

  
Affected Products:

  * SUSE Linux Enterprise Server 15 SP7
  * SUSE Multi-Linux Manager Proxy 5.1 Extension for SLE
  * SUSE Multi-Linux Manager Retail Branch Server 5.1 Extension for SLE
  * SUSE Multi-Linux Manager Server 5.1 Extension for SLE

  
  
An update that contains one feature and has 64 fixes can now be installed.

## Recommended update 5.1.3 for Multi-Linux Manager Proxy

### Description:

This update fixes the following issues:

proxy-httpd-image:

  * Version 5.1.14
  * Image rebuilt to the newest version with updated dependencies for SUSE
    Multi-Linux Manager 5.1.3

proxy-salt-broker-image:

  * Version 5.1.13
  * Image rebuilt to the newest version with updated dependencies for SUSE
    Multi-Linux Manager 5.1.3

proxy-squid-image:

  * Version 5.1.12
  * Image rebuilt to the newest version with updated dependencies for SUSE
    Multi-Linux Manager 5.1.3

proxy-ssh-image:

  * Version 5.1.12
  * Image rebuilt to the newest version with updated dependencies for SUSE
    Multi-Linux Manager 5.1.3

proxy-tftpd-image:

  * Version 5.1.12
  * Image rebuilt to the newest version with updated dependencies for SUSE
    Multi-Linux Manager 5.1.3

uyuni-tools:

  * Version 5.1.26-0
  * Fix applying PTF with images from RPMs (bsc#1252548)
  * Ssl Key file can miss if CA password is blank (bsc#1254154)
  * mgrpxy ssh tuning should happens before crypto policies (bsc#1254619)
  * Fix default value for helm registry (bsc#1258927).
  * Remove hub register command
  * Optimize postgres migration disk space usage (bsc#1257447)
  * Add continuous database backup support (bsc#1250367)
  * Explicitly start proxy pods after operations (bsc#1258015)
  * Use static supportconfig name to avoid dynamic search (bsc#1257941)
  * Do not nest multiple tarball files and instead collect all files into one
    tarball (bsc#1252964)
  * Show where final tarball was generated (bsc#1259208)
  * Set proxy config file permissions (bsc#1257660)

The following packages are underlying build dependencies and system components
used by the containers:

billing-data-service:

  * Version 5.1.4-0
  * Fix billing-data-service crashing (bsc#1252927)

hub-xmlrpc-api:

  * Update to v0.8
  * Use peripheral_server entitlement
  * Use sync.hub.listPeripheralServers API call

inter-server-sync:

  * Version 0.3.11-0
  * Add missing name sanitization for cobbler entries (bsc#1259137)
  * Skip cobbler entries refresh if there are no images (bsc#1257950)

saltboot-formula:

  * Update to version 1.0.0
  * Always send branch id as a string (bsc#1258382)

spacecmd:

  * Version 5.1.13-0
  * Update translation strings

spacewalk-admin:

  * Version 5.1.8-0
  * Update uyuni_roster conf when running spacewalk-hostname-rename

spacewalk-backend:

  * Version 5.1.16-0
  * Use configured email sender instead of auto detected hostname (bsc#1256583)
  * Optimize reposync memory requirements (bsc#1256512)
  * Avoid package duplicates with reposync on synchronization the same package
    with custom and vendored repositories (bsc#1251821, bsc#1252793)
  * Prevent accidental errata deletion from custom channels, including the cases
    of using Hub online synchronization (bsc#1259287)

spacewalk-certs-tools:

  * Version 5.1.11-0
  * Fix bootstrap script failure with SL Micro 6.2 during first execution
    (bsc#1258796)

spacewalk-java:

  * Version 5.1.24-0
  * Removed the expensive diff column (bsc#1256044)
  * Add Action ID info to the Systems event history page
  * Knowledgebase menu updated to point to new URL. (bsc#1250557)
  * Fix updating "modified" column in TaskoRun and TaskoSchedule (bsc#1258378)
  * Fix SSO metadata response in XML format
  * Fix SQL grammar for rescheduling actions (bsc#1257022)
  * Add OpenID Connect login endpoint for MCP security integration
  * Block multiple versions of the same package from being locked (bsc#1246315)
  * Use PackageEvr instead of string for fix_version (bsc#1252638)
  * Commit DB changes before refreshing pillar for SSH push minions
    (bsc#1253712)
  * Fix return type for sync.content.listProducts (bsc#1256422)
  * Fix SCC cache lookup when username have special chars
  * Use Hub URL for SCC lookup when server is a HUB and Peripheral at same time
  * Do not load additional repos in peripheral server (bsc#1257967)
  * Fix Debian repos sync in peripheral (bsc#1257647)
  * Fix API docs for several hub endpoints (bsc#1256493)
  * Fix permission check when assigning system groups to a user (bsc#1257674)
  * Remove hub register API method
  * Improve performance by using lazy fetch for ImageDetails and related classes
    (bsc#1252548)
  * Allow @ for user name on bootstrapping with web UI (bsc#1254629)
  * Optimize schedule queries for performance (bsc#1257621, bsc#1259127)
  * Add RBAC endpoint mappings (bsc#1257760)
  * Add support for Debian 13
  * Allow read-only users to call logout (bsc#1259471)
  * Fix migration of peripheral servers to ISSv3
  * Add listPeripheralServers API method
  * Add all vendor repo channels to hub access token(bsc#1259230)

spacewalk-utils:

  * Version 5.1.9-0
  * Add bootstrap repo definition and spacewalk-common-channels for RHEL10
    clones
  * Add Debian 13 and Raspberry Pi OS 13 repositories

spacewalk-web:

  * Version 5.1.19-0
  * Refined UI spacing and alignment in password policy form
  * Improved form alerts auto-scroll to top on submit
  * CLM filter page UI improvement (bsc#1253034)
  * Fix inconsistent YAML HTML rendering and add ID to generated textarea
    (bsc#1258168)
  * Enable editing of null variables in Ansible WebUI (bsc#1258017)

subscription-matcher:

  * Version 0.43
  * Add new SKU (874-008422) missing in subscription matching (bsc#1259243)
  * Version 0.42
  * Fix unsupported part number in promotional subscriptions (bsc#1256392)
  * Version 0.41
  * keep mvel version 2.2.6 for MLM 5.1 and below

susemanager:

  * Version 5.1.15-0
  * Fix wrong Raspberry Pi OS 12 bootstrap repo creation (bsc#1252867)
  * Add OES25.4 support (bsc#1249675)
  * Add bootstrap repo definition and spacewalk-common-channels for RHEL10
    clones
  * Add bootstrap repositories for Debian 13 and Raspberry Pi OS 13

susemanager-docs_en:

  * Added Red Hat Linux Enterprise 10 support including RHEL 10 clones
  * Extensive update to the client features tables in the Client Configuration
    Guide
  * Added warning for the proxy key creation and limitations around assigning
    cloned channels (bsc#1257823)
  * Fixed typo in EOL Clients partial
  * Fixed disk space management instructions in Administration Guide
    (bsc#1253144)
  * Corrected commands for repository meta data (bsc#1259316)
  * Fixed command for replacing self-signed certificates (bsc#1258106)
  * Added admonition to network requirements about network management not
    working without wicked (bsc#1240895)
  * Removed port 25151 from the network requirements in Installation and Upgrade
    Guide
  * Added instructions for migrating Server and Proxy from 5.1 to 5.2 product
    version to Installation and Upgrade Guide
  * Added instructions for migrating Server and Proxy from 5.0 to 5.2
  * Documented Debian 13
  * Reformatted storage-scripts table to use plain paragraphs instead of bullet
    lists to fix po4a extraction issue causing missing bullets in CJK
    translations
  * Removed Ubuntu 20.04 for SUSE Multi-Linux Manager from the list of supported
    clients in Client Configuration Guide
  * Added a warning for all instances where mgradm upgrade podman is used.
  * Changed the order of reboot/mgrxpy stop instructions during proxy migration
    in Installation and Upgrade Guide
  * Added section about container-based Kiwi image build support to
    Administration guide (bsc#1251865)
  * Fixed Proxy Migration 5.0 > 5.1 inconsistencies
  * Added 4.3 proxy and branch server migrations
  * Included global GPG decryption for pillar data in specialized guide
    (bsc#1255743)
  * Added separate procedure for reenabling router advertisements (bsc#1254259)
  * Changed instructions from provate to public key in Admintration Guide
    (bsc#1254585)
  * Update and clarify Retail formulas page
  * Document formula images on air-gapped systems

susemanager-schema:

  * Version 5.1.16-0
  * Re-apply missing schema update scripts (bsc#1259590)
  * Version 5.1.15-0
  * Add RBAC mappings for affected systems link in SSM patches page
    (bsc#1256590)
  * Add OpenID Connect login endpoint for MCP security integration
  * Refactor oval related tables (bsc#1252638)
  * Add hubsync endpoints to repo-sync Debian repos in peripheral (bsc#1257647)
  * Remove hub register API method
  * Endpoint table cleanup
  * Remove truncated invalid errata (bsc#1259057)
  * Fix schema migration for (bsc#1244321)
  * Add indexes to improve schedule queries performance (bsc#1257621,
    bsc#1259127)
  * Add RBAC endpoint mappings (bsc#1257760)
  * Restrict software management access only to channel admin (bsc#1259416)
  * Add missing SSM-related RBAC endpoints (bsc#1259519)

susemanager-sls:

  * Version 5.1.24-0
  * Make mgr_events salt engine non-blocking on reading events
  * Avoid losing the events on DB connection issues (bsc#1252098)

susemanager-sync-data:

  * Version 5.1.8-0
  * Add OES25.4 support (bsc#1249675)
  * Add Debian 13 support

How to apply this update:

  1. Log in as root user to the SUSE Multi-Linux Manager Proxy.
  2. Upgrade mgrpxy.
  3. If you are in a disconnected environment, upgrade the image packages.
  4. Reboot the system.
  5. Run `mgrpxy upgrade podman` which will use the default image tags.

## Recommended update 5.1.3 for Multi-Linux Manager Retail Branch Server

### Description:

This update fixes the following issues:

proxy-httpd-image:

  * Version 5.1.14
  * Image rebuilt to the newest version with updated dependencies for SUSE
    Multi-Linux Manager 5.1.3

proxy-salt-broker-image:

  * Version 5.1.13
  * Image rebuilt to the newest version with updated dependencies for SUSE
    Multi-Linux Manager 5.1.3

proxy-squid-image:

  * Version 5.1.12
  * Image rebuilt to the newest version with updated dependencies for SUSE
    Multi-Linux Manager 5.1.3

proxy-ssh-image:

  * Version 5.1.12
  * Image rebuilt to the newest version with updated dependencies for SUSE
    Multi-Linux Manager 5.1.3

proxy-tftpd-image:

  * Version 5.1.12
  * Image rebuilt to the newest version with updated dependencies for SUSE
    Multi-Linux Manager 5.1.3

uyuni-tools:

  * Version 5.1.26-0
  * Fix applying PTF with images from RPMs (bsc#1252548)
  * Ssl Key file can miss if CA password is blank (bsc#1254154)
  * mgrpxy ssh tuning should happens before crypto policies (bsc#1254619)
  * Fix default value for helm registry (bsc#1258927).
  * Remove hub register command
  * Optimize postgres migration disk space usage (bsc#1257447)
  * Add continuous database backup support (bsc#1250367)
  * Explicitly start proxy pods after operations (bsc#1258015)
  * Use static supportconfig name to avoid dynamic search (bsc#1257941)
  * Do not nest multiple tarball files and instead collect all files into one
    tarball (bsc#1252964)
  * Show where final tarball was generated (bsc#1259208)
  * Set proxy config file permissions (bsc#1257660)

The following packages are underlying build dependencies and system components
used by the containers:

billing-data-service:

  * Version 5.1.4-0
  * Fix billing-data-service crashing (bsc#1252927)

hub-xmlrpc-api:

  * Update to v0.8
  * Use peripheral_server entitlement
  * Use sync.hub.listPeripheralServers API call

inter-server-sync:

  * Version 0.3.11-0
  * Add missing name sanitization for cobbler entries (bsc#1259137)
  * Skip cobbler entries refresh if there are no images (bsc#1257950)

saltboot-formula:

  * Update to version 1.0.0
  * Always send branch id as a string (bsc#1258382)

spacecmd:

  * Version 5.1.13-0
  * Update translation strings

spacewalk-admin:

  * Version 5.1.8-0
  * Update uyuni_roster conf when running spacewalk-hostname-rename

spacewalk-backend:

  * Version 5.1.16-0
  * Use configured email sender instead of auto detected hostname (bsc#1256583)
  * Optimize reposync memory requirements (bsc#1256512)
  * Avoid package duplicates with reposync on synchronization the same package
    with custom and vendored repositories (bsc#1251821, bsc#1252793)
  * Prevent accidental errata deletion from custom channels, including the cases
    of using Hub online synchronization (bsc#1259287)

spacewalk-certs-tools:

  * Version 5.1.11-0
  * Fix bootstrap script failure with SL Micro 6.2 during first execution
    (bsc#1258796)

spacewalk-java:

  * Version 5.1.24-0
  * Removed the expensive diff column (bsc#1256044)
  * Add Action ID info to the Systems event history page
  * Knowledgebase menu updated to point to new URL. (bsc#1250557)
  * Fix updating "modified" column in TaskoRun and TaskoSchedule (bsc#1258378)
  * Fix SSO metadata response in XML format
  * Fix SQL grammar for rescheduling actions (bsc#1257022)
  * Add OpenID Connect login endpoint for MCP security integration
  * Block multiple versions of the same package from being locked (bsc#1246315)
  * Use PackageEvr instead of string for fix_version (bsc#1252638)
  * Commit DB changes before refreshing pillar for SSH push minions
    (bsc#1253712)
  * Fix return type for sync.content.listProducts (bsc#1256422)
  * Fix SCC cache lookup when username have special chars
  * Use Hub URL for SCC lookup when server is a HUB and Peripheral at same time
  * Do not load additional repos in peripheral server (bsc#1257967)
  * Fix Debian repos sync in peripheral (bsc#1257647)
  * Fix API docs for several hub endpoints (bsc#1256493)
  * Fix permission check when assigning system groups to a user (bsc#1257674)
  * Remove hub register API method
  * Improve performance by using lazy fetch for ImageDetails and related classes
    (bsc#1252548)
  * Allow @ for user name on bootstrapping with web UI (bsc#1254629)
  * Optimize schedule queries for performance (bsc#1257621, bsc#1259127)
  * Add RBAC endpoint mappings (bsc#1257760)
  * Add support for Debian 13
  * Allow read-only users to call logout (bsc#1259471)
  * Fix migration of peripheral servers to ISSv3
  * Add listPeripheralServers API method
  * Add all vendor repo channels to hub access token(bsc#1259230)

spacewalk-utils:

  * Version 5.1.9-0
  * Add bootstrap repo definition and spacewalk-common-channels for RHEL10
    clones
  * Add Debian 13 and Raspberry Pi OS 13 repositories

spacewalk-web:

  * Version 5.1.19-0
  * Refined UI spacing and alignment in password policy form
  * Improved form alerts auto-scroll to top on submit
  * CLM filter page UI improvement (bsc#1253034)
  * Fix inconsistent YAML HTML rendering and add ID to generated textarea
    (bsc#1258168)
  * Enable editing of null variables in Ansible WebUI (bsc#1258017)

subscription-matcher:

  * Version 0.43
  * Add new SKU (874-008422) missing in subscription matching (bsc#1259243)
  * Version 0.42
  * Fix unsupported part number in promotional subscriptions (bsc#1256392)
  * Version 0.41
  * keep mvel version 2.2.6 for MLM 5.1 and below

susemanager:

  * Version 5.1.15-0
  * Fix wrong Raspberry Pi OS 12 bootstrap repo creation (bsc#1252867)
  * Add OES25.4 support (bsc#1249675)
  * Add bootstrap repo definition and spacewalk-common-channels for RHEL10
    clones
  * Add bootstrap repositories for Debian 13 and Raspberry Pi OS 13

susemanager-docs_en:

  * Added Red Hat Linux Enterprise 10 support including RHEL 10 clones
  * Extensive update to the client features tables in the Client Configuration
    Guide
  * Added warning for the proxy key creation and limitations around assigning
    cloned channels (bsc#1257823)
  * Fixed typo in EOL Clients partial
  * Fixed disk space management instructions in Administration Guide
    (bsc#1253144)
  * Corrected commands for repository meta data (bsc#1259316)
  * Fixed command for replacing self-signed certificates (bsc#1258106)
  * Added admonition to network requirements about network management not
    working without wicked (bsc#1240895)
  * Removed port 25151 from the network requirements in Installation and Upgrade
    Guide
  * Added instructions for migrating Server and Proxy from 5.1 to 5.2 product
    version to Installation and Upgrade Guide
  * Added instructions for migrating Server and Proxy from 5.0 to 5.2
  * Documented Debian 13
  * Reformatted storage-scripts table to use plain paragraphs instead of bullet
    lists to fix po4a extraction issue causing missing bullets in CJK
    translations
  * Removed Ubuntu 20.04 for SUSE Multi-Linux Manager from the list of supported
    clients in Client Configuration Guide
  * Added a warning for all instances where mgradm upgrade podman is used.
  * Changed the order of reboot/mgrxpy stop instructions during proxy migration
    in Installation and Upgrade Guide
  * Added section about container-based Kiwi image build support to
    Administration guide (bsc#1251865)
  * Fixed Proxy Migration 5.0 > 5.1 inconsistencies
  * Added 4.3 proxy and branch server migrations
  * Included global GPG decryption for pillar data in specialized guide
    (bsc#1255743)
  * Added separate procedure for reenabling router advertisements (bsc#1254259)
  * Changed instructions from provate to public key in Admintration Guide
    (bsc#1254585)
  * Update and clarify Retail formulas page
  * Document formula images on air-gapped systems

susemanager-schema:

  * Version 5.1.16-0
  * Re-apply missing schema update scripts (bsc#1259590)
  * Version 5.1.15-0
  * Add RBAC mappings for affected systems link in SSM patches page
    (bsc#1256590)
  * Add OpenID Connect login endpoint for MCP security integration
  * Refactor oval related tables (bsc#1252638)
  * Add hubsync endpoints to repo-sync Debian repos in peripheral (bsc#1257647)
  * Remove hub register API method
  * Endpoint table cleanup
  * Remove truncated invalid errata (bsc#1259057)
  * Fix schema migration for (bsc#1244321)
  * Add indexes to improve schedule queries performance (bsc#1257621,
    bsc#1259127)
  * Add RBAC endpoint mappings (bsc#1257760)
  * Restrict software management access only to channel admin (bsc#1259416)
  * Add missing SSM-related RBAC endpoints (bsc#1259519)

susemanager-sls:

  * Version 5.1.24-0
  * Make mgr_events salt engine non-blocking on reading events
  * Avoid losing the events on DB connection issues (bsc#1252098)

susemanager-sync-data:

  * Version 5.1.8-0
  * Add OES25.4 support (bsc#1249675)
  * Add Debian 13 support

How to apply this update:

  1. Log in as root user to the SUSE Multi-Linux Manager Retail Branch Server.
  2. Upgrade mgrpxy.
  3. If you are in a disconnected environment, upgrade the image packages.
  4. Reboot the system.
  5. Run `mgrpxy upgrade podman` which will use the default image tags.

## Recommended update 5.1.3 for Multi-Linux Manager Server

### Description:

This update fixes the following issues:

server-attestation-image:

  * Version 5.1.13
  * Image rebuilt to the newest version with updated dependencies for SUSE
    Multi-Linux Manager 5.1.3

server-hub-xmlrpc-api-image:

  * Version 5.1.12
  * Image rebuilt to the newest version with updated dependencies for SUSE
    Multi-Linux Manager 5.1.3

server-image:

  * Version 5.1.13
  * Allow LDAP users that are not visible to pam_unix (bsc#1256791)

server-migration-14-16-image:

  * Version 5.1.12
  * Image rebuilt to the newest version with updated dependencies for SUSE
    Multi-Linux Manager 5.1.3

server-postgresql-image:

  * Version 5.1.11
  * Correctly install pg_trgm extension to absolute path (bsc#1262136)
  * Version 5.1.10
  * Include tar, gzip and smdba-pgarchive command to the database image
    (bsc#1250367)
  * Trust local user access

server-saline-image:

  * Version 5.1.12
  * Image rebuilt to the newest version with updated dependencies for SUSE
    Multi-Linux Manager 5.1.3

uyuni-tools:

  * Version 5.1.26-0
  * Fix applying PTF with images from RPMs (bsc#1252548)
  * Ssl Key file can miss if CA password is blank (bsc#1254154)
  * mgrpxy ssh tuning should happens before crypto policies (bsc#1254619)
  * Fix default value for helm registry (bsc#1258927).
  * Remove hub register command
  * Optimize postgres migration disk space usage (bsc#1257447)
  * Add continuous database backup support (bsc#1250367)
  * Explicitly start proxy pods after operations (bsc#1258015)
  * Use static supportconfig name to avoid dynamic search (bsc#1257941)
  * Do not nest multiple tarball files and instead collect all files into one
    tarball (bsc#1252964)
  * Show where final tarball was generated (bsc#1259208)
  * Set proxy config file permissions (bsc#1257660)

The following packages are underlying build dependencies and system components
used by the containers:

billing-data-service:

  * Version 5.1.4-0
  * Fix billing-data-service crashing (bsc#1252927)

hub-xmlrpc-api:

  * Update to v0.8
  * Use peripheral_server entitlement
  * Use sync.hub.listPeripheralServers API call

inter-server-sync:

  * Version 0.3.11-0
  * Add missing name sanitization for cobbler entries (bsc#1259137)
  * Skip cobbler entries refresh if there are no images (bsc#1257950)

saltboot-formula:

  * Update to version 1.0.0
  * Always send branch id as a string (bsc#1258382)

spacecmd:

  * Version 5.1.13-0
  * Update translation strings

spacewalk-admin:

  * Version 5.1.8-0
  * Update uyuni_roster conf when running spacewalk-hostname-rename

spacewalk-backend:

  * Version 5.1.16-0
  * Use configured email sender instead of auto detected hostname (bsc#1256583)
  * Optimize reposync memory requirements (bsc#1256512)
  * Avoid package duplicates with reposync on synchronization the same package
    with custom and vendored repositories (bsc#1251821, bsc#1252793)
  * Prevent accidental errata deletion from custom channels, including the cases
    of using Hub online synchronization (bsc#1259287)

spacewalk-certs-tools:

  * Version 5.1.11-0
  * Fix bootstrap script failure with SL Micro 6.2 during first execution
    (bsc#1258796)

spacewalk-java:

  * Version 5.1.24-0
  * Removed the expensive diff column (bsc#1256044)
  * Add Action ID info to the Systems event history page
  * Knowledgebase menu updated to point to new URL. (bsc#1250557)
  * Fix updating "modified" column in TaskoRun and TaskoSchedule (bsc#1258378)
  * Fix SSO metadata response in XML format
  * Fix SQL grammar for rescheduling actions (bsc#1257022)
  * Add OpenID Connect login endpoint for MCP security integration
  * Block multiple versions of the same package from being locked (bsc#1246315)
  * Use PackageEvr instead of string for fix_version (bsc#1252638)
  * Commit DB changes before refreshing pillar for SSH push minions
    (bsc#1253712)
  * Fix return type for sync.content.listProducts (bsc#1256422)
  * Fix SCC cache lookup when username have special chars
  * Use Hub URL for SCC lookup when server is a HUB and Peripheral at same time
  * Do not load additional repos in peripheral server (bsc#1257967)
  * Fix Debian repos sync in peripheral (bsc#1257647)
  * Fix API docs for several hub endpoints (bsc#1256493)
  * Fix permission check when assigning system groups to a user (bsc#1257674)
  * Remove hub register API method
  * Improve performance by using lazy fetch for ImageDetails and related classes
    (bsc#1252548)
  * Allow @ for user name on bootstrapping with web UI (bsc#1254629)
  * Optimize schedule queries for performance (bsc#1257621, bsc#1259127)
  * Add RBAC endpoint mappings (bsc#1257760)
  * Add support for Debian 13
  * Allow read-only users to call logout (bsc#1259471)
  * Fix migration of peripheral servers to ISSv3
  * Add listPeripheralServers API method
  * Add all vendor repo channels to hub access token(bsc#1259230)

spacewalk-utils:

  * Version 5.1.9-0
  * Add bootstrap repo definition and spacewalk-common-channels for RHEL10
    clones
  * Add Debian 13 and Raspberry Pi OS 13 repositories

spacewalk-web:

  * Version 5.1.19-0
  * Refined UI spacing and alignment in password policy form
  * Improved form alerts auto-scroll to top on submit
  * CLM filter page UI improvement (bsc#1253034)
  * Fix inconsistent YAML HTML rendering and add ID to generated textarea
    (bsc#1258168)
  * Enable editing of null variables in Ansible WebUI (bsc#1258017)

subscription-matcher:

  * Version 0.43
  * Add new SKU (874-008422) missing in subscription matching (bsc#1259243)
  * Version 0.42
  * Fix unsupported part number in promotional subscriptions (bsc#1256392)
  * Version 0.41
  * keep mvel version 2.2.6 for MLM 5.1 and below

susemanager:

  * Version 5.1.15-0
  * Fix wrong Raspberry Pi OS 12 bootstrap repo creation (bsc#1252867)
  * Add OES25.4 support (bsc#1249675)
  * Add bootstrap repo definition and spacewalk-common-channels for RHEL10
    clones
  * Add bootstrap repositories for Debian 13 and Raspberry Pi OS 13

susemanager-build-keys:

  * Added AlmaLinux 10 and Rocky Linux 10 GPG keys

susemanager-docs_en:

  * Added Red Hat Linux Enterprise 10 support including RHEL 10 clones
  * Extensive update to the client features tables in the Client Configuration
    Guide
  * Added warning for the proxy key creation and limitations around assigning
    cloned channels (bsc#1257823)
  * Fixed typo in EOL Clients partial
  * Fixed disk space management instructions in Administration Guide
    (bsc#1253144)
  * Corrected commands for repository meta data (bsc#1259316)
  * Fixed command for replacing self-signed certificates (bsc#1258106)
  * Added admonition to network requirements about network management not
    working without wicked (bsc#1240895)
  * Removed port 25151 from the network requirements in Installation and Upgrade
    Guide
  * Added instructions for migrating Server and Proxy from 5.1 to 5.2 product
    version to Installation and Upgrade Guide
  * Added instructions for migrating Server and Proxy from 5.0 to 5.2
  * Documented Debian 13
  * Reformatted storage-scripts table to use plain paragraphs instead of bullet
    lists to fix po4a extraction issue causing missing bullets in CJK
    translations
  * Removed Ubuntu 20.04 for SUSE Multi-Linux Manager from the list of supported
    clients in Client Configuration Guide
  * Added a warning for all instances where mgradm upgrade podman is used.
  * Changed the order of reboot/mgrxpy stop instructions during proxy migration
    in Installation and Upgrade Guide
  * Added section about container-based Kiwi image build support to
    Administration guide (bsc#1251865)
  * Fixed Proxy Migration 5.0 > 5.1 inconsistencies
  * Added 4.3 proxy and branch server migrations
  * Included global GPG decryption for pillar data in specialized guide
    (bsc#1255743)
  * Added separate procedure for reenabling router advertisements (bsc#1254259)
  * Changed instructions from provate to public key in Admintration Guide
    (bsc#1254585)
  * Update and clarify Retail formulas page
  * Document formula images on air-gapped systems

susemanager-schema:

  * Version 5.1.17-0
  * Re-apply some RBAC migrations that were not properly applied (bsc#1262136)
  * Version 5.1.16-0
  * Re-apply missing schema update scripts (bsc#1259590)
  * Version 5.1.15-0
  * Add RBAC mappings for affected systems link in SSM patches page
    (bsc#1256590)
  * Add OpenID Connect login endpoint for MCP security integration
  * Refactor oval related tables (bsc#1252638)
  * Add hubsync endpoints to repo-sync Debian repos in peripheral (bsc#1257647)
  * Remove hub register API method
  * Endpoint table cleanup
  * Remove truncated invalid errata (bsc#1259057)
  * Fix schema migration for (bsc#1244321)
  * Add indexes to improve schedule queries performance (bsc#1257621,
    bsc#1259127)
  * Add RBAC endpoint mappings (bsc#1257760)
  * Restrict software management access only to channel admin (bsc#1259416)
  * Add missing SSM-related RBAC endpoints (bsc#1259519)

susemanager-sls:

  * Version 5.1.24-0
  * Make mgr_events salt engine non-blocking on reading events
  * Avoid losing the events on DB connection issues (bsc#1252098)

susemanager-sync-data:

  * Version 5.1.8-0
  * Add OES25.4 support (bsc#1249675)
  * Add Debian 13 support

How to apply this update:

  1. Log in as root user to the SUSE Multi-Linux Manager Server.
  2. Upgrade mgradm and mgrctl.
  3. If you are in a disconnected environment, upgrade the image packages.
  4. Reboot the system.
  5. Run `mgradm upgrade podman` which will use the default image tags.

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".  
Alternatively you can run the command listed for your product:

  * SUSE Multi-Linux Manager Proxy 5.1 Extension for SLE  
    zypper in -t patch SUSE-Multi-Linux-Manager-Proxy-SLE-5.1-2026-1526=1

  * SUSE Multi-Linux Manager Retail Branch Server 5.1 Extension for SLE  
    zypper in -t patch SUSE-Multi-Linux-Manager-Retail-Branch-Server-
SLE-5.1-2026-1526=1

  * SUSE Multi-Linux Manager Server 5.1 Extension for SLE  
    zypper in -t patch SUSE-Multi-Linux-Manager-Server-SLE-5.1-2026-1526=1

## Package List:

  * SUSE Multi-Linux Manager Proxy 5.1 Extension for SLE (aarch64 ppc64le s390x
    x86_64)
    * mgrpxy-5.1.26-150700.3.18.2
    * mgrpxy-debuginfo-5.1.26-150700.3.18.2
  * SUSE Multi-Linux Manager Proxy 5.1 Extension for SLE (noarch)
    * mgrpxy-zsh-completion-5.1.26-150700.3.18.2
    * mgrpxy-bash-completion-5.1.26-150700.3.18.2
    * mgrpxy-lang-5.1.26-150700.3.18.2
  * SUSE Multi-Linux Manager Proxy 5.1 Extension for SLE (aarch64)
    * suse-multi-linux-manager-5.1-aarch64-proxy-ssh-image-5.1.3-8.14.9
    * suse-multi-linux-manager-5.1-aarch64-proxy-squid-image-5.1.3-8.14.7
    * suse-multi-linux-manager-5.1-aarch64-proxy-salt-broker-image-5.1.3-9.14.16
    * suse-multi-linux-manager-5.1-aarch64-proxy-tftpd-image-5.1.3-8.14.7
    * suse-multi-linux-manager-5.1-aarch64-proxy-httpd-image-5.1.3-8.16.18
  * SUSE Multi-Linux Manager Proxy 5.1 Extension for SLE (ppc64le)
    * suse-multi-linux-manager-5.1-ppc64le-proxy-tftpd-image-5.1.3-8.14.7
    * suse-multi-linux-manager-5.1-ppc64le-proxy-squid-image-5.1.3-8.14.7
    * suse-multi-linux-manager-5.1-ppc64le-proxy-salt-broker-image-5.1.3-9.14.16
    * suse-multi-linux-manager-5.1-ppc64le-proxy-ssh-image-5.1.3-8.14.9
    * suse-multi-linux-manager-5.1-ppc64le-proxy-httpd-image-5.1.3-8.16.18
  * SUSE Multi-Linux Manager Proxy 5.1 Extension for SLE (s390x)
    * suse-multi-linux-manager-5.1-s390x-proxy-httpd-image-5.1.3-8.16.18
    * suse-multi-linux-manager-5.1-s390x-proxy-ssh-image-5.1.3-8.14.9
    * suse-multi-linux-manager-5.1-s390x-proxy-salt-broker-image-5.1.3-9.14.16
    * suse-multi-linux-manager-5.1-s390x-proxy-squid-image-5.1.3-8.14.7
    * suse-multi-linux-manager-5.1-s390x-proxy-tftpd-image-5.1.3-8.14.7
  * SUSE Multi-Linux Manager Proxy 5.1 Extension for SLE (x86_64)
    * suse-multi-linux-manager-5.1-x86_64-proxy-ssh-image-5.1.3-8.14.9
    * suse-multi-linux-manager-5.1-x86_64-proxy-tftpd-image-5.1.3-8.14.7
    * suse-multi-linux-manager-5.1-x86_64-proxy-httpd-image-5.1.3-8.16.18
    * suse-multi-linux-manager-5.1-x86_64-proxy-squid-image-5.1.3-8.14.7
    * suse-multi-linux-manager-5.1-x86_64-proxy-salt-broker-image-5.1.3-9.14.16
  * SUSE Multi-Linux Manager Retail Branch Server 5.1 Extension for SLE (aarch64
    ppc64le s390x x86_64)
    * mgrpxy-5.1.26-150700.3.18.2
    * mgrpxy-debuginfo-5.1.26-150700.3.18.2
  * SUSE Multi-Linux Manager Retail Branch Server 5.1 Extension for SLE (noarch)
    * mgrpxy-zsh-completion-5.1.26-150700.3.18.2
    * mgrpxy-bash-completion-5.1.26-150700.3.18.2
    * mgrpxy-lang-5.1.26-150700.3.18.2
  * SUSE Multi-Linux Manager Retail Branch Server 5.1 Extension for SLE
    (aarch64)
    * suse-multi-linux-manager-5.1-aarch64-proxy-ssh-image-5.1.3-8.14.9
    * suse-multi-linux-manager-5.1-aarch64-proxy-squid-image-5.1.3-8.14.7
    * suse-multi-linux-manager-5.1-aarch64-proxy-salt-broker-image-5.1.3-9.14.16
    * suse-multi-linux-manager-5.1-aarch64-proxy-tftpd-image-5.1.3-8.14.7
    * suse-multi-linux-manager-5.1-aarch64-proxy-httpd-image-5.1.3-8.16.18
  * SUSE Multi-Linux Manager Retail Branch Server 5.1 Extension for SLE
    (ppc64le)
    * suse-multi-linux-manager-5.1-ppc64le-proxy-tftpd-image-5.1.3-8.14.7
    * suse-multi-linux-manager-5.1-ppc64le-proxy-squid-image-5.1.3-8.14.7
    * suse-multi-linux-manager-5.1-ppc64le-proxy-salt-broker-image-5.1.3-9.14.16
    * suse-multi-linux-manager-5.1-ppc64le-proxy-ssh-image-5.1.3-8.14.9
    * suse-multi-linux-manager-5.1-ppc64le-proxy-httpd-image-5.1.3-8.16.18
  * SUSE Multi-Linux Manager Retail Branch Server 5.1 Extension for SLE (s390x)
    * suse-multi-linux-manager-5.1-s390x-proxy-httpd-image-5.1.3-8.16.18
    * suse-multi-linux-manager-5.1-s390x-proxy-ssh-image-5.1.3-8.14.9
    * suse-multi-linux-manager-5.1-s390x-proxy-salt-broker-image-5.1.3-9.14.16
    * suse-multi-linux-manager-5.1-s390x-proxy-squid-image-5.1.3-8.14.7
    * suse-multi-linux-manager-5.1-s390x-proxy-tftpd-image-5.1.3-8.14.7
  * SUSE Multi-Linux Manager Retail Branch Server 5.1 Extension for SLE (x86_64)
    * suse-multi-linux-manager-5.1-x86_64-proxy-ssh-image-5.1.3-8.14.9
    * suse-multi-linux-manager-5.1-x86_64-proxy-tftpd-image-5.1.3-8.14.7
    * suse-multi-linux-manager-5.1-x86_64-proxy-httpd-image-5.1.3-8.16.18
    * suse-multi-linux-manager-5.1-x86_64-proxy-squid-image-5.1.3-8.14.7
    * suse-multi-linux-manager-5.1-x86_64-proxy-salt-broker-image-5.1.3-9.14.16
  * SUSE Multi-Linux Manager Server 5.1 Extension for SLE (aarch64 ppc64le s390x
    x86_64)
    * mgradm-debuginfo-5.1.26-150700.3.18.2
    * mgrctl-debuginfo-5.1.26-150700.3.18.2
    * mgrctl-5.1.26-150700.3.18.2
    * mgradm-5.1.26-150700.3.18.2
  * SUSE Multi-Linux Manager Server 5.1 Extension for SLE (noarch)
    * mgrctl-lang-5.1.26-150700.3.18.2
    * mgrctl-bash-completion-5.1.26-150700.3.18.2
    * mgradm-zsh-completion-5.1.26-150700.3.18.2
    * mgradm-bash-completion-5.1.26-150700.3.18.2
    * mgradm-lang-5.1.26-150700.3.18.2
    * mgrctl-zsh-completion-5.1.26-150700.3.18.2
  * SUSE Multi-Linux Manager Server 5.1 Extension for SLE (aarch64)
    * suse-multi-linux-manager-5.1-aarch64-server-migration-14-16-image-5.1.3-8.14.8
    * suse-multi-linux-manager-5.1-aarch64-server-image-5.1.3-8.14.18
    * suse-multi-linux-manager-5.1-aarch64-server-attestation-image-5.1.3-8.16.7
    * suse-multi-linux-manager-5.1-aarch64-server-hub-xmlrpc-api-image-5.1.3-8.14.9
    * suse-multi-linux-manager-5.1-aarch64-server-saline-image-5.1.3-9.14.13
    * suse-multi-linux-manager-5.1-aarch64-server-postgresql-image-5.1.3-6.16.2
  * SUSE Multi-Linux Manager Server 5.1 Extension for SLE (ppc64le)
    * suse-multi-linux-manager-5.1-ppc64le-server-hub-xmlrpc-api-image-5.1.3-8.14.9
    * suse-multi-linux-manager-5.1-ppc64le-server-image-5.1.3-8.14.18
    * suse-multi-linux-manager-5.1-ppc64le-server-saline-image-5.1.3-9.14.13
    * suse-multi-linux-manager-5.1-ppc64le-server-migration-14-16-image-5.1.3-8.14.8
    * suse-multi-linux-manager-5.1-ppc64le-server-attestation-image-5.1.3-8.16.7
    * suse-multi-linux-manager-5.1-ppc64le-server-postgresql-image-5.1.3-6.16.2
  * SUSE Multi-Linux Manager Server 5.1 Extension for SLE (s390x)
    * suse-multi-linux-manager-5.1-s390x-server-hub-xmlrpc-api-image-5.1.3-8.14.9
    * suse-multi-linux-manager-5.1-s390x-server-saline-image-5.1.3-9.14.13
    * suse-multi-linux-manager-5.1-s390x-server-image-5.1.3-8.14.18
    * suse-multi-linux-manager-5.1-s390x-server-postgresql-image-5.1.3-6.16.2
    * suse-multi-linux-manager-5.1-s390x-server-attestation-image-5.1.3-8.16.7
    * suse-multi-linux-manager-5.1-s390x-server-migration-14-16-image-5.1.3-8.14.8
  * SUSE Multi-Linux Manager Server 5.1 Extension for SLE (x86_64)
    * suse-multi-linux-manager-5.1-x86_64-server-migration-14-16-image-5.1.3-8.14.8
    * suse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-image-5.1.3-8.14.9
    * suse-multi-linux-manager-5.1-x86_64-server-saline-image-5.1.3-9.14.13
    * suse-multi-linux-manager-5.1-x86_64-server-image-5.1.3-8.14.18
    * suse-multi-linux-manager-5.1-x86_64-server-attestation-image-5.1.3-8.16.7
    * suse-multi-linux-manager-5.1-x86_64-server-postgresql-image-5.1.3-6.16.2

## References:

  * https://bugzilla.suse.com/show_bug.cgi?id=1240895
  * https://bugzilla.suse.com/show_bug.cgi?id=1244321
  * https://bugzilla.suse.com/show_bug.cgi?id=1246315
  * https://bugzilla.suse.com/show_bug.cgi?id=1249675
  * https://bugzilla.suse.com/show_bug.cgi?id=1250367
  * https://bugzilla.suse.com/show_bug.cgi?id=1250557
  * https://bugzilla.suse.com/show_bug.cgi?id=1251821
  * https://bugzilla.suse.com/show_bug.cgi?id=1251865
  * https://bugzilla.suse.com/show_bug.cgi?id=1252098
  * https://bugzilla.suse.com/show_bug.cgi?id=1252548
  * https://bugzilla.suse.com/show_bug.cgi?id=1252638
  * https://bugzilla.suse.com/show_bug.cgi?id=1252793
  * https://bugzilla.suse.com/show_bug.cgi?id=1252867
  * https://bugzilla.suse.com/show_bug.cgi?id=1252927
  * https://bugzilla.suse.com/show_bug.cgi?id=1252964
  * https://bugzilla.suse.com/show_bug.cgi?id=1253034
  * https://bugzilla.suse.com/show_bug.cgi?id=1253144
  * https://bugzilla.suse.com/show_bug.cgi?id=1253712
  * https://bugzilla.suse.com/show_bug.cgi?id=1254154
  * https://bugzilla.suse.com/show_bug.cgi?id=1254259
  * https://bugzilla.suse.com/show_bug.cgi?id=1254585
  * https://bugzilla.suse.com/show_bug.cgi?id=1254619
  * https://bugzilla.suse.com/show_bug.cgi?id=1254629
  * https://bugzilla.suse.com/show_bug.cgi?id=1255743
  * https://bugzilla.suse.com/show_bug.cgi?id=1256044
  * https://bugzilla.suse.com/show_bug.cgi?id=1256392
  * https://bugzilla.suse.com/show_bug.cgi?id=1256422
  * https://bugzilla.suse.com/show_bug.cgi?id=1256493
  * https://bugzilla.suse.com/show_bug.cgi?id=1256512
  * https://bugzilla.suse.com/show_bug.cgi?id=1256583
  * https://bugzilla.suse.com/show_bug.cgi?id=1256590
  * https://bugzilla.suse.com/show_bug.cgi?id=1256791
  * https://bugzilla.suse.com/show_bug.cgi?id=1257022
  * https://bugzilla.suse.com/show_bug.cgi?id=1257447
  * https://bugzilla.suse.com/show_bug.cgi?id=1257621
  * https://bugzilla.suse.com/show_bug.cgi?id=1257647
  * https://bugzilla.suse.com/show_bug.cgi?id=1257660
  * https://bugzilla.suse.com/show_bug.cgi?id=1257674
  * https://bugzilla.suse.com/show_bug.cgi?id=1257760
  * https://bugzilla.suse.com/show_bug.cgi?id=1257823
  * https://bugzilla.suse.com/show_bug.cgi?id=1257941
  * https://bugzilla.suse.com/show_bug.cgi?id=1257950
  * https://bugzilla.suse.com/show_bug.cgi?id=1257967
  * https://bugzilla.suse.com/show_bug.cgi?id=1258015
  * https://bugzilla.suse.com/show_bug.cgi?id=1258017
  * https://bugzilla.suse.com/show_bug.cgi?id=1258106
  * https://bugzilla.suse.com/show_bug.cgi?id=1258168
  * https://bugzilla.suse.com/show_bug.cgi?id=1258378
  * https://bugzilla.suse.com/show_bug.cgi?id=1258382
  * https://bugzilla.suse.com/show_bug.cgi?id=1258796
  * https://bugzilla.suse.com/show_bug.cgi?id=1258927
  * https://bugzilla.suse.com/show_bug.cgi?id=1259057
  * https://bugzilla.suse.com/show_bug.cgi?id=1259127
  * https://bugzilla.suse.com/show_bug.cgi?id=1259137
  * https://bugzilla.suse.com/show_bug.cgi?id=1259208
  * https://bugzilla.suse.com/show_bug.cgi?id=1259230
  * https://bugzilla.suse.com/show_bug.cgi?id=1259243
  * https://bugzilla.suse.com/show_bug.cgi?id=1259287
  * https://bugzilla.suse.com/show_bug.cgi?id=1259316
  * https://bugzilla.suse.com/show_bug.cgi?id=1259416
  * https://bugzilla.suse.com/show_bug.cgi?id=1259471
  * https://bugzilla.suse.com/show_bug.cgi?id=1259519
  * https://bugzilla.suse.com/show_bug.cgi?id=1259590
  * https://bugzilla.suse.com/show_bug.cgi?id=1262136
  * https://jira.suse.com/browse/MSQA-1048

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.suse.com/pipermail/sle-updates/attachments/20260421/2aa09fa0/attachment.htm>


More information about the sle-updates mailing list