<div class="container">
<h1>Recommended update for suse-migration-sle16-activation, SLES16-Migration, SLES16-SAP_Migration, suse-migration-services, suse-migration-rpm, wicked2nm, image-janitor</h1>
<table class="table table-striped table-bordered">
<tbody>
<tr>
<th>Announcement ID:</th>
<td>SUSE-RU-2025:4131-1</td>
</tr>
<tr>
<th>Release Date:</th>
<td>2025-11-18T15:56:53Z</td>
</tr>
<tr>
<th>Rating:</th>
<td>important</td>
</tr>
<tr>
<th>References:</th>
<td>
<ul>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1133919">bsc#1133919</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1142108">bsc#1142108</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1155192">bsc#1155192</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1173532">bsc#1173532</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1178737">bsc#1178737</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1182520">bsc#1182520</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1199028">bsc#1199028</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1209304">bsc#1209304</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1209591">bsc#1209591</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1211240">bsc#1211240</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1219004">bsc#1219004</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1222258">bsc#1222258</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1244188">bsc#1244188</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1246513">bsc#1246513</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1248010">bsc#1248010</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1248137">bsc#1248137</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1250076">bsc#1250076</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1250078">bsc#1250078</a>
</li>
</ul>
</td>
</tr>
<tr>
<th>Affected Products:</th>
<td>
<ul class="list-group">
<li class="list-group-item">Basesystem Module 15-SP7</li>
<li class="list-group-item">SAP Applications Module 15-SP7</li>
<li class="list-group-item">SUSE Linux Enterprise Desktop 15 SP7</li>
<li class="list-group-item">SUSE Linux Enterprise Real Time 15 SP7</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP7</li>
<li class="list-group-item">SUSE Linux Enterprise Server for SAP Applications 15 SP7</li>
</ul>
</td>
</tr>
</tbody>
</table>
<p>An update that has 18 fixes can now be installed.</p>
<h2>Description:</h2>
<p>This update for suse-migration-sle16-activation, SLES16-Migration, SLES16-SAP_Migration, suse-migration-services, suse-migration-rpm, wicked2nm, image-janitor fixes the following issues:</p>
<p>Changes for suse-migration-sle16-activation:</p>
<ul>
<li>Simplify interface naming by disabling predictable names at boot</li>
<li>shellcheck heavily complained</li>
<li>check migration target before testing for architecture version</li>
<li>Create systemd.link files for virtual VMware/Hyper-V NICs</li>
<li>Add changes for newest wicked2nm</li>
<li>Activation packages can no longer be noarch</li>
<li>Architecture check before allowing migration to be activated</li>
<li>Add missing pre snapshot setup to run_migration</li>
<li>Add wicked2nm network migration</li>
<li>Setup ExclusiveArch for activation packages</li>
<li>Make activation package require by provides tag</li>
<li>Fix product related requirement settings</li>
</ul>
<p>Changes for SLES16-Migration:</p>
<ul>
<li>Added .ssh directory for migration user</li>
<li>Add etc/motd overlay file
Print message how to show migration progress information</li>
<li>Fix build on more architectures</li>
<li>Initial changelog</li>
</ul>
<p>Changes for SLES16-SAP_Migration:</p>
<ul>
<li>Support wicked2nm migration</li>
<li>Migration live image for SLES4SAP 15 to 16</li>
</ul>
<p>Changes for suse-migration-services:</p>
<ul>
<li>Set systemd offline for Zypper in chroot mode</li>
<li>Fix apparmor install procedure</li>
<li>Fixed azuremetadata device lookup</li>
<li>Use of f-strings not allowed in the DMS</li>
<li>Simplify interface naming by disabling predictable names at boot</li>
<li>Fixed test_check_lsm_migration unit test</li>
<li>Fix setup_host_network_test by mocking os.makedirs</li>
<li>wicked2nm: log network state on nm-online failure</li>
<li>Fixed LSM pre checks to be more robust</li>
<li>shellcheck heavily complained</li>
<li>Do not evaluate wicked2nm output in precheck</li>
<li>Fix unit test for lsm check</li>
<li>prechecks/lsm.py: remove _apparmor_analyze_profiles()</li>
<li>LSM migration check for AppArmor -> SELinux</li>
<li>Improve pre-check message</li>
<li>Fix MinSLEVersion value depending on target</li>
<li>reduce package set on migration image</li>
<li>Fixed behavior of wicked2m pre check</li>
<li>implementation of sshd root login pre-check</li>
<li>Fixed selinux to apparmor migration</li>
<li>Fixed reading of migration config for target class</li>
<li>Add recursion guard to MigrationConfig::_merge_config_dicts</li>
<li>shrink migration image</li>
<li>container/sle16/config.sh</li>
<li>sle16/config.sh - use dropin for s390 migration-config</li>
<li>doc: fix indentation</li>
<li>check for migration target by matching ISO file name</li>
<li>config: introduce dropin dir migration-config.d/</li>
<li>Apply SLE16 live image setup to container setup</li>
<li>bind mount only required subdirectories under /run into chroot</li>
<li>Add missing package requirement</li>
<li>check migration target before testing for architecture version</li>
<li>setup_host_network: simplify code - use os.makedirs()</li>
<li>Create systemd.link files for virtual VMware/Hyper-V NIC</li>
<li>Preserve systemd.link files from /etc/systemd/network/ </li>
<li>Add changes for the newest wicked2nm</li>
<li>Ensure wicked2nm is a dependency of pre-checks for SLE 16 migration</li>
<li>Activation packages can no longer be noarch</li>
<li>Fix update of image .changes files</li>
<li>Architecture check before allowing migration to be activated</li>
<li>Improve error logs when wicked2nm fails</li>
<li>Include image changelog to version bump</li>
<li>Ensure wicked2nm migration is always running, despite warnings</li>
<li>Fix: add --no-recommends on patterns-base-selinux installation</li>
<li>Update suse-migration-services for container use</li>
<li>Update SLE16 migration container</li>
<li>Update SAP live migration image</li>
<li>Add missing pre snapshot setup to run_migration</li>
<li>Follow up fix for the wicked to nm migration</li>
<li>Add wicked2nm network migration</li>
<li>Add glob support to preserve_files</li>
<li>Setup ExclusiveArch for activation packages</li>
<li>Build sles4sap migration for cloud on x86_64 only</li>
<li>Do not build sles4sap migration on s390x </li>
<li>Use systemctl kexec</li>
<li>Fix: return the correct kernel path based on machine type</li>
<li>Fixed glob pattern match for package name</li>
<li>Remove menitoning of SLES 12-SP4</li>
<li>Make activation package require by provides tag</li>
<li>Added SLES16-SAP_Migration live image</li>
<li>Do not use list[str] type hint</li>
<li>Fix error evaluation from offline_migrations API</li>
<li>Fix logging from non unit files</li>
<li>Fix product related requirement settings</li>
<li>Repos for migration image must be in kiwi</li>
<li>Added .ssh to migration user for SAP 15 live image</li>
<li>Added SLES15-SAP_Migration Makefile target</li>
<li>Add proper release package for SLE16 migration</li>
<li>Fix typo in service name</li>
<li>Drop obsolete check for resolv.conf</li>
<li>Fix migration user home dir setup for SLE16</li>
<li>Update README_QA.rst</li>
<li>test: split unit test for setup_name_resolver</li>
<li>Install patterns-base-selinux for Apparmor migration</li>
<li>Ensure the rebuild counter is not stripped from the rpm</li>
<li>Exit silently if no migration iso is found</li>
<li>Ensure rpmlintrc file is part of suse-migration-services SRPM</li>
<li>Ignore fixup! entries when generating changelog</li>
<li>Increase python test matrix</li>
<li>Remove redundanct requires on itself</li>
<li>Fix ordering of pre-checks and actual migration</li>
<li>Add SLES15-Migration target to Makefile</li>
<li>Fix suse-migration-console-log service</li>
<li>Fix typo in REA- Activate only connections if present in the current system</li>
<li>Improve error output, exit codes and add flag to disable user hints</li>
<li>Add support for autoip-fallback</li>
<li>Issue only a info when dhcp.update is non default </li>
<li>Add ipv4_static broadcast </li>
<li>Apply dhcp settings to mirror wicked client id </li>
<li>Fix test.sh, fail if migration succeed but expect fail </li>
<li>Fix sysctl handling </li>
<li>Avoid cloning in parsing of route </li>
<li>Fix continue migration to show all warnings beforehand </li>
<li>Improve warning messages - show interface, element names </li>
<li>Remove unwrap in route parsing </li>
<li>bump slab from 0.4.10 to 0.4.11 to address CVE-2025-55159 (bsc#1248010)</li>
<li>Fix netconfig handling with proper priority setting</li>
<li>Add ovs support</li>
<li>Use agama-network instead of agama-(lib|server)</li>
<li>Only activate connections marked with autostart</li>
<li>Give hint in error message how to ignore warnings</li>
<li>Update README.md with updated installation and usage infos</li>
<li>Add support for Leap 15</li>
<li>Remove BuildRequires that are no longer necessary due to the agama-network switch.</li>
<li>The agama-network switch also removes the vulnerable and
unmaintained 'users' crate from the dependencies. (bsc#1244188)DME_QA</li>
<li>Fix: split name resolver setup into its own service</li>
<li>Fix: set path according to current arch in grub.d/99_migration</li>
<li>Add support to enable single rpm transaction for upgrade</li>
<li>enable suse-migration-ha.service in the migration image</li>
<li>Migration for high availability extension</li>
<li>RPM wrapper fixes</li>
<li>Cleanup secfile to follow python singlespec policy</li>
<li>Support product specifier in ISO name</li>
<li>Ensure sle16 images can build on all supported platforms</li>
<li>Use name pattern compatible to suse-migration-rpm</li>
<li>Fix SLE15 migration images</li>
<li>SAP product should migrate to 15 SP4</li>
<li>Add SLES15-SAP-Migration</li>
<li>Bump target to SLE15 SP7</li>
<li>Update bumpversion config
Include sle16 container build to version bump</li>
<li>Handle selinux boot option when using kexec</li>
<li>Ensure migration to SLES16 uses selinux, not apparmor</li>
<li>improve os-release parsing</li>
<li>Ensure SLES16 is also detected in SCC precheck</li>
<li>Add high availablity extension check</li>
<li>Fix package names for python packages on SLE16</li>
<li>Relax on the shim-install call</li>
<li>Fixup package name for SLE16 and SLE16 container</li>
<li>Fix changelog references for activation packages</li>
<li>Add product migration check</li>
</ul>
<p>Changes for suse-migration-rpm:</p>
<ul>
<li>Fix MinSLEVersion value depending on target</li>
<li>Add product requirement according to image name.</li>
<li>Exit silently if no migration iso is found. </li>
<li>Add build and perl(Date::Parse) to ensure we can append changelog entries to generated package.</li>
</ul>
<p>Changes for wicked2nm:</p>
<ul>
<li>Activate only connections if present in the current system</li>
<li>Improve error output, exit codes and add flag to disable user hints</li>
<li>Add support for autoip-fallback</li>
<li>Issue only a info when dhcp.update is non default </li>
<li>Add ipv4_static broadcast </li>
<li>Apply dhcp settings to mirror wicked client id </li>
<li>Fix test.sh, fail if migration succeed but expect fail </li>
<li>Fix sysctl handling </li>
<li>Avoid cloning in parsing of route </li>
<li>Fix continue migration to show all warnings beforehand </li>
<li>Improve warning messages - show interface, element names </li>
<li>Remove unwrap in route parsing </li>
<li>bump slab from 0.4.10 to 0.4.11 to address CVE-2025-55159 (bsc#1248010)</li>
<li>Fix netconfig handling with proper priority setting</li>
<li>Add ovs support</li>
<li>Use agama-network instead of agama-(lib|server)</li>
<li>Only activate connections marked with autostart</li>
<li>Give hint in error message how to ignore warnings</li>
<li>Update README.md with updated installation and usage infos</li>
<li>Add support for Leap 15</li>
<li>Remove BuildRequires that are no longer necessary due to the agama-network switch.</li>
<li>The agama-network switch also removes the vulnerable and
unmaintained 'users' crate from the dependencies. (bsc#1244188)</li>
</ul>
<p>Chages for image-janitor:
- Fix packaging (add doc, license)
- Release 0.2.0 with configuration files packaged
- Initial packag</p>
<h2>Patch Instructions:</h2>
<p>
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".<br/>
Alternatively you can run the command listed for your product:
</p>
<ul class="list-group">
<li class="list-group-item">
SAP Applications Module 15-SP7
<br/>
<code>zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP7-2025-4131=1</code>
</li>
<li class="list-group-item">
Basesystem Module 15-SP7
<br/>
<code>zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2025-4131=1</code>
</li>
</ul>
<h2>Package List:</h2>
<ul>
<li>
SAP Applications Module 15-SP7 (ppc64le x86_64)
<ul>
<li>SLES16-SAP_Migration-2.1.26-15.14.4</li>
</ul>
</li>
<li>
Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64)
<ul>
<li>wicked2nm-debuginfo-1.4.0-150700.15.7.2</li>
<li>wicked2nm-1.4.0-150700.15.7.2</li>
<li>wicked2nm-debugsource-1.4.0-150700.15.7.2</li>
<li>SLES16-Migration-2.1.26-15.22.4</li>
</ul>
</li>
<li>
Basesystem Module 15-SP7 (noarch)
<ul>
<li>python3-Cerberus-1.3.2-150700.20.2.10</li>
<li>python3-migration-2.1.26-150700.16.12.1</li>
<li>suse-migration-pre-checks-2.1.26-150700.16.12.1</li>
</ul>
</li>
<li>
Basesystem Module 15-SP7 (aarch64 ppc64le x86_64)
<ul>
<li>suse-migration-sle16-activation-2.1.26-150700.15.9.1</li>
</ul>
</li>
</ul>
<h2>References:</h2>
<ul>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1133919">https://bugzilla.suse.com/show_bug.cgi?id=1133919</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1142108">https://bugzilla.suse.com/show_bug.cgi?id=1142108</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1155192">https://bugzilla.suse.com/show_bug.cgi?id=1155192</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1173532">https://bugzilla.suse.com/show_bug.cgi?id=1173532</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1178737">https://bugzilla.suse.com/show_bug.cgi?id=1178737</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1182520">https://bugzilla.suse.com/show_bug.cgi?id=1182520</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1199028">https://bugzilla.suse.com/show_bug.cgi?id=1199028</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1209304">https://bugzilla.suse.com/show_bug.cgi?id=1209304</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1209591">https://bugzilla.suse.com/show_bug.cgi?id=1209591</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1211240">https://bugzilla.suse.com/show_bug.cgi?id=1211240</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1219004">https://bugzilla.suse.com/show_bug.cgi?id=1219004</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1222258">https://bugzilla.suse.com/show_bug.cgi?id=1222258</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1244188">https://bugzilla.suse.com/show_bug.cgi?id=1244188</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1246513">https://bugzilla.suse.com/show_bug.cgi?id=1246513</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1248010">https://bugzilla.suse.com/show_bug.cgi?id=1248010</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1248137">https://bugzilla.suse.com/show_bug.cgi?id=1248137</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1250076">https://bugzilla.suse.com/show_bug.cgi?id=1250076</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1250078">https://bugzilla.suse.com/show_bug.cgi?id=1250078</a>
</li>
</ul>
</div>