<div class="container">
<h1>Maintenance update for Multi-Linux Manager 5.1.5</h1>
<table class="table table-striped table-bordered">
<tbody>
<tr>
<th>Announcement ID:</th>
<td>SUSE-RU-2026:3712-1</td>
</tr>
<tr>
<th>Release Date:</th>
<td>2026-08-24T02:53:13Z</td>
</tr>
<tr>
<th>Rating:</th>
<td>important</td>
</tr>
<tr>
<th>References:</th>
<td>
<ul>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1243168">bsc#1243168</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1244141">bsc#1244141</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1245944">bsc#1245944</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1247004">bsc#1247004</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1253505">bsc#1253505</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1254201">bsc#1254201</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1257102">bsc#1257102</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1257295">bsc#1257295</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1258500">bsc#1258500</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1258567">bsc#1258567</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1259225">bsc#1259225</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1259254">bsc#1259254</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1259594">bsc#1259594</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1259720">bsc#1259720</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1260342">bsc#1260342</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1260396">bsc#1260396</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1261195">bsc#1261195</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1262012">bsc#1262012</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1262168">bsc#1262168</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1262664">bsc#1262664</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1263822">bsc#1263822</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1263823">bsc#1263823</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1265334">bsc#1265334</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1266481">bsc#1266481</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1267619">bsc#1267619</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1267871">bsc#1267871</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1268006">bsc#1268006</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1268151">bsc#1268151</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1268229">bsc#1268229</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1268309">bsc#1268309</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1268325">bsc#1268325</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1268567">bsc#1268567</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1268570">bsc#1268570</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1268673">bsc#1268673</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1269192">bsc#1269192</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1269267">bsc#1269267</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1269408">bsc#1269408</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1270040">bsc#1270040</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1274571">bsc#1274571</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1274984">bsc#1274984</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1275217">bsc#1275217</a>
</li>
<li style="display: inline;">
<a href="https://jira.suse.com/browse/MSQA-1059">jsc#MSQA-1059</a>
</li>
</ul>
</td>
</tr>
<tr>
<th>
Cross-References:
</th>
<td>
<ul>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-39821.html">CVE-2026-39821</a>
</li>
</ul>
</td>
</tr>
<tr>
<th>CVSS scores:</th>
<td>
<ul class="list-group">
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-39821</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">9.1</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-39821</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">7.4</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-39821</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">9.6</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-39821</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">8.2</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N</span>
</li>
</ul>
</td>
</tr>
<tr>
<th>Affected Products:</th>
<td>
<ul class="list-group">
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP7</li>
<li class="list-group-item">SUSE Multi-Linux Manager Proxy 5.1 Extension for SLE</li>
<li class="list-group-item">SUSE Multi-Linux Manager Retail Branch Server 5.1 Extension for SLE</li>
<li class="list-group-item">SUSE Multi-Linux Manager Server 5.1 Extension for SLE</li>
</ul>
</td>
</tr>
</tbody>
</table>
<p>An update that solves one vulnerability, contains one feature and has 40 recommended fixes can now be installed.</p>
<h2>Recommended update 5.1.5 for Multi-Linux Manager Proxy</h2>
<h3>Description:</h3>
<p>This update fixes the following issues:</p>
<p>Release Notes Highlights:</p>
<ul>
<li>Update to SUSE Multi-Linux Manager 5.1.5</li>
<li>Bugs mentioned:
bsc#1259720, bsc#1263822, bsc#1263823, bsc#1266481, bsc#1267619
bsc#1267871, bsc#1268325</li>
</ul>
<p>Container images and uyuni-tools changes:</p>
<p>proxy-httpd-image:</p>
<ul>
<li>Version 5.1.17</li>
<li>Image rebuilt to the newest version with updated dependencies
for SUSE Multi-Linux Manager 5.1.5</li>
</ul>
<p>proxy-salt-broker-image:</p>
<ul>
<li>Version 5.1.16</li>
<li>Image rebuilt to the newest version with updated dependencies
for SUSE Multi-Linux Manager 5.1.5</li>
</ul>
<p>proxy-squid-image:</p>
<ul>
<li>Version 5.1.15</li>
<li>Image rebuilt to the newest version with updated dependencies
for SUSE Multi-Linux Manager 5.1.5</li>
</ul>
<p>proxy-ssh-image:</p>
<ul>
<li>Version 5.1.15</li>
<li>Image rebuilt to the newest version with updated dependencies
for SUSE Multi-Linux Manager 5.1.5</li>
</ul>
<p>proxy-tftpd-image:</p>
<ul>
<li>Version 5.1.15</li>
<li>Image rebuilt to the newest version with updated dependencies
for SUSE Multi-Linux Manager 5.1.5</li>
</ul>
<p>uyuni-tools:</p>
<p>Security issues fixed:</p>
<ul>
<li>Version 5.1.31-0:</li>
<li>CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481)</li>
</ul>
<p>Other bugs fixed and changes:</p>
<ul>
<li>Version 5.1.32-0:</li>
<li>Use common container name to prevent pg auth errors (bsc#1275217)</li>
<li>Version 5.1.30-0</li>
<li>Strip text from x509 certs before creating the secret
(bsc#1259720)</li>
<li>Fix the traefik enpoints names (bsc#1267619)</li>
<li>Set the timezone on the database container too (bsc#1267871)</li>
<li>Disable SSL on internal DB connection</li>
<li>Internal SANs for db and reportdb are no longer required</li>
<li>Generate the same certificate for server and reportdb</li>
<li>Make uyuni-server service dependent on uyuni-db
(bsc#1263823)</li>
</ul>
<p>The following packages are underlying build dependencies
and system components used by the containers:</p>
<p>salt:</p>
<ul>
<li>Use AsyncHTTPClient in salt.utils.http (bsc#1268325)</li>
<li>Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822)</li>
</ul>
<p>spacewalk-backend:</p>
<ul>
<li>Version 5.1.18-0</li>
<li>Use db_ssl_enabled value consistently</li>
</ul>
<p>spacewalk-web:</p>
<ul>
<li>Version 5.1.22-0</li>
<li>Improve product selection checkboxes in the setup UI</li>
<li>Show partial selection state for product trees more accurately</li>
<li>Use db_ssl_enabled value consistently</li>
</ul>
<p>susemanager-build-keys:</p>
<ul>
<li>Add Liberty v3 backup / reserve key
Added: RPM-GPG-KEY-SUSE_Liberty_Linux_v3 (BB9FD340DA090344)</li>
</ul>
<p>How to apply this update:</p>
<ol>
<li>Log in as root user to the SUSE Multi-Linux Manager Proxy.</li>
<li>Upgrade mgrpxy.</li>
<li>If you are in a disconnected environment, upgrade the image packages.</li>
<li>Reboot the system.</li>
<li>Run <code>mgrpxy upgrade podman</code> which will use the default image tags.</li>
</ol>
<h2>Recommended update 5.1.5 for Multi-Linux Manager Retail Branch Server</h2>
<h3>Description:</h3>
<p>This update fixes the following issues:</p>
<p>Release Notes Highlights:</p>
<ul>
<li>Update to SUSE Multi-Linux Manager 5.1.5</li>
<li>Bugs mentioned:
bsc#1259720, bsc#1263822, bsc#1263823, bsc#1266481, bsc#1267619
bsc#1267871, bsc#1268325</li>
</ul>
<p>Container images and uyuni-tools changes:</p>
<p>proxy-httpd-image:</p>
<ul>
<li>Version 5.1.17</li>
<li>Image rebuilt to the newest version with updated dependencies
for SUSE Multi-Linux Manager 5.1.5</li>
</ul>
<p>proxy-salt-broker-image:</p>
<ul>
<li>Version 5.1.16</li>
<li>Image rebuilt to the newest version with updated dependencies
for SUSE Multi-Linux Manager 5.1.5</li>
</ul>
<p>proxy-squid-image:</p>
<ul>
<li>Version 5.1.15</li>
<li>Image rebuilt to the newest version with updated dependencies
for SUSE Multi-Linux Manager 5.1.5</li>
</ul>
<p>proxy-ssh-image:</p>
<ul>
<li>Version 5.1.15</li>
<li>Image rebuilt to the newest version with updated dependencies
for SUSE Multi-Linux Manager 5.1.5</li>
</ul>
<p>proxy-tftpd-image:</p>
<ul>
<li>Version 5.1.15</li>
<li>Image rebuilt to the newest version with updated dependencies
for SUSE Multi-Linux Manager 5.1.5</li>
</ul>
<p>uyuni-tools: </p>
<p>Security issues fixed:</p>
<ul>
<li>Version 5.1.31-0:</li>
<li>CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481)</li>
</ul>
<p>Other bugs fixed and changes:</p>
<ul>
<li>Version 5.1.32-0:</li>
<li>Use common container name to prevent pg auth errors (bsc#1275217)</li>
<li>Version 5.1.30-0</li>
<li>Strip text from x509 certs before creating the secret
(bsc#1259720)</li>
<li>Fix the traefik enpoints names (bsc#1267619)</li>
<li>Set the timezone on the database container too (bsc#1267871)</li>
<li>Disable SSL on internal DB connection</li>
<li>Internal SANs for db and reportdb are no longer required</li>
<li>Generate the same certificate for server and reportdb</li>
<li>Make uyuni-server service dependent on uyuni-db
(bsc#1263823)</li>
</ul>
<p>The following packages are underlying build dependencies
and system components used by the containers:</p>
<p>salt:</p>
<ul>
<li>Use AsyncHTTPClient in salt.utils.http (bsc#1268325)</li>
<li>Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822)</li>
</ul>
<p>spacewalk-backend:</p>
<ul>
<li>Version 5.1.18-0</li>
<li>Use db_ssl_enabled value consistently</li>
</ul>
<p>spacewalk-web:</p>
<ul>
<li>Version 5.1.22-0</li>
<li>Improve product selection checkboxes in the setup UI</li>
<li>Show partial selection state for product trees more accurately</li>
<li>Use db_ssl_enabled value consistently</li>
</ul>
<p>susemanager-build-keys:</p>
<ul>
<li>Add Liberty v3 backup / reserve key
Added: RPM-GPG-KEY-SUSE_Liberty_Linux_v3 (BB9FD340DA090344)</li>
</ul>
<p>How to apply this update:</p>
<ol>
<li>Log in as root user to the SUSE Multi-Linux Manager Retail Branch Server.</li>
<li>Upgrade mgrpxy.</li>
<li>If you are in a disconnected environment, upgrade the image packages.</li>
<li>Reboot the system.</li>
<li>Run <code>mgrpxy upgrade podman</code> which will use the default image tags.</li>
</ol>
<h2>Security update 5.1.5 for Multi-Linux Manager Server</h2>
<h3>Description:</h3>
<p>This update fixes the following issues:</p>
<p>Release Notes Highlights:</p>
<ul>
<li>Update to SUSE Multi-Linux Manager 5.1.5</li>
<li>Added known issue for missing BasicConstraints Critical flag</li>
<li>Added a note about disk-check parameters semantics change</li>
<li>Added a note about enabling FIPS mode after installing
SUSE Multi-Linux Manager.</li>
<li>Monitoring: Upgrade Grafana to 12.4.5</li>
<li>Enabled the support on FIPS enabled host</li>
<li>Security Fixes:
CVE-2026-33382, CVE-2025-12141, CVE-2026-41607, CVE-2026-39821
CVE-2026-39882, CVE-2026-33244, CVE-2026-13149, CVE-2026-33814
CVE-2026-39821</li>
<li>Bugs mentioned:
bsc#1243168, bsc#1244141, bsc#1245944, bsc#1247004, bsc#1253505
bsc#1254201, bsc#1257102, bsc#1257295, bsc#1258500, bsc#1258567
bsc#1259225, bsc#1259254, bsc#1259594, bsc#1259720, bsc#1260342
bsc#1260396, bsc#1261195, bsc#1262012, bsc#1262168, bsc#1262664
bsc#1263822, bsc#1263823, bsc#1265334, bsc#1266481, bsc#1267619
bsc#1267871, bsc#1268006, bsc#1268151, bsc#1268229, bsc#1268309
bsc#1268325, bsc#1268567, bsc#1268570, bsc#1268673, bsc#1269192
bsc#1269267, bsc#1269408, bsc#1265827, bsc#1270040, bsc#1271331
bsc#1262187, bsc#1263272, bsc#1266615, bsc#1267416, bsc#1269917
bsc#1274571</li>
</ul>
<p>Container images and uyuni-tools changes:</p>
<p>server-attestation-image:</p>
<ul>
<li>Version 5.1.16</li>
<li>Add org.uyuni.version LABEL to the image</li>
</ul>
<p>server-hub-xmlrpc-api-image:</p>
<ul>
<li>Version 5.1.15</li>
<li>Image rebuilt to the newest version with updated dependencies
for SUSE Multi-Linux Manager 5.1.5</li>
</ul>
<p>server-image:</p>
<ul>
<li>Version 5.1.16</li>
<li>Configure Java strong SecureRandom to use the NSS FIPS
provider on FIPS-enabled hosts so DB connections (SCRAM-SHA-256)
work under FIPS</li>
</ul>
<p>server-migration-14-16-image:</p>
<ul>
<li>Version 5.1.15</li>
<li>Image rebuilt to the newest version with updated dependencies
for SUSE Multi-Linux Manager 5.1.5</li>
</ul>
<p>server-postgresql-image:</p>
<ul>
<li>Version 5.1.15</li>
<li>Automatically set the log timezone for TZ env (bsc#1267871)</li>
<li>Grant access to uyuni-server-attestation container (bsc#1269267)</li>
<li>Enable hostname filtering in pg_hba.conf</li>
</ul>
<p>server-saline-image:</p>
<ul>
<li>Version 5.1.15</li>
<li>Add org.uyuni.version LABEL to the image</li>
</ul>
<p>uyuni-tools:</p>
<p>Security issues fixed:</p>
<ul>
<li>Version 5.1.31-0:</li>
<li>CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) </li>
</ul>
<p>Other bugs fixed and changes:</p>
<ul>
<li>Version 5.1.32-0:</li>
<li>Use common container name to prevent pg auth errors (bsc#1275217)</li>
<li>Version 5.1.30-0</li>
<li>Strip text from x509 certs before creating the secret
(bsc#1259720)</li>
<li>Fix the traefik enpoints names (bsc#1267619)</li>
<li>Set the timezone on the database container too (bsc#1267871)</li>
<li>Disable SSL on internal DB connection</li>
<li>Internal SANs for db and reportdb are no longer required</li>
<li>Generate the same certificate for server and reportdb</li>
<li>Make uyuni-server service dependent on uyuni-db
(bsc#1263823)</li>
</ul>
<p>The following packages are underlying build dependencies
and system components used by the containers:</p>
<p>salt:</p>
<ul>
<li>Use AsyncHTTPClient in salt.utils.http (bsc#1268325)</li>
<li>Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822)</li>
</ul>
<p>spacewalk-admin:</p>
<ul>
<li>Version 5.1.9-0</li>
<li>Use db_ssl_enabled value consistently</li>
</ul>
<p>spacewalk-backend:</p>
<ul>
<li>Version 5.1.18-0</li>
<li>Use db_ssl_enabled value consistently</li>
</ul>
<p>spacewalk-certs-tools:</p>
<ul>
<li>Version 5.1.12-0</li>
<li>Set Basic Constraints extension as 'critical' according to
RFC 5280 for self signed CA certificates (bsc#1274571)</li>
</ul>
<p>spacewalk-java:</p>
<ul>
<li>Version 5.1.30-0</li>
<li>Add Ubuntu 26.04 LTS</li>
<li>Version 5.1.29-0</li>
<li>Fix mainframe foreign systems showing wrong OS (bsc#1260342)</li>
<li>Make setting of column filters in ListTag idempotent
(bsc#1269192)</li>
<li>Optimized channel model generation logic to improve page load
performance during peripheral channel selection (bsc#1259225)</li>
<li>Do not attempt to delete a certificate that does not exist
(bsc#1268151)</li>
<li>Remote Report DB connection should always use SSL (bsc#1268229)</li>
<li>Make sure the image upload directory exists</li>
<li>Add primary FQDN to pillar (bsc#1247004)</li>
<li>Use db_ssl_enabled value consistently</li>
<li>Fix user role selection when org admin
role is enabled (bsc#1259254)</li>
<li>Fix inventory refresh triggering from unrelated
inotify events (bsc#1268309)</li>
<li>Prevent inventory refresh before ansible package
is installed (bsc#1244141)</li>
<li>Fix CLM not propagating new AppStream module
versions to cloned channels (bsc#1254201)</li>
<li>Fix hubsync package download checksum lookup (bsc#1270040)</li>
<li>Add delay to package clean to not interfere with repo-sync
(bsc#1258500)</li>
</ul>
<p>spacewalk-search:</p>
<ul>
<li>Version 5.1.8-0</li>
<li>Use db_ssl_enabled value consistently</li>
<li>Fix Fine Grained search for hyphenated hostnames (bsc#1257102)</li>
</ul>
<p>spacewalk-utils:</p>
<ul>
<li>Version 5.1.11-0</li>
<li>Add Ubuntu 26.04 LTS</li>
<li>Version 5.1.10-0</li>
<li>Taskotop now handles timezone (bsc#1267871)</li>
</ul>
<p>spacewalk-web:</p>
<ul>
<li>Version 5.1.22-0</li>
<li>Improve product selection checkboxes in the setup UI</li>
<li>Show partial selection state for product trees more accurately</li>
<li>Use db_ssl_enabled value consistently</li>
</ul>
<p>susemanager:</p>
<ul>
<li>Version 5.1.19-0</li>
<li>Add Ubuntu 26.04 LTS</li>
<li>Version 5.1.18-0</li>
<li>Add bootstrap repository definition for SLE and Leap 16.1</li>
</ul>
<p>susemanager-build-keys:</p>
<ul>
<li>Add Liberty v3 backup / reserve key
Added: RPM-GPG-KEY-SUSE_Liberty_Linux_v3 (BB9FD340DA090344)</li>
</ul>
<p>susemanager-docs_en:</p>
<ul>
<li>Documented SLES 15 SP7 to SLES 16.0 major upgrade via product
migration in Client Configuration Guide</li>
<li>Added a common workflow to setup crypto policies in the server
container (bsc#1253505)</li>
<li>Added mass migration using UI to Client Configuration Guide
(bsc#1259594)</li>
<li>Enhanced proxy migration procedure (bsc#1269408)</li>
<li>Added procedure for allowing uploading of large files to
Specialized Guides (bsc#1268673)</li>
<li>Enhanced Prometheus formula with command to generate password hash
in Specialized Guides (bsc#1268570)</li>
<li>Document Ansible Playbook variable editing (bsc#1260396)</li>
<li>Convert broken <code>[role]``text`` double-backtick literals in</code>en/modules` to standard single-backtick literals for Weblate AI
translation compatibility</li>
<li>Document use_bundle_build custom info key for KIWI builds
(bsc#1243168)</li>
<li>Updated SSO / SAML integration with Keycloak in Administration Guide
(bsc#1261195)</li>
<li>Move Prometheus as the first section in Monitoring Formulas</li>
<li>Add information about optional TLS Grafana configuration (bsc#1268567)</li>
<li>Reorganized the documentation around reporting database</li>
<li>Adjusted the note about <em>.rpmnew and </em>.rpmsave files usage
(bsc#1245944)</li>
<li>Removed obsolete file from Salt guide (bsc#1268006)</li>
<li>Added OS versions currently suported with OVAL in the product
(bsc#1262664)</li>
<li>Added instructions to migrate from wicked to NetworkManager to
Administration Guide (bsc#1257295)</li>
<li>Added migration steps for SL Micro 6.1 as base OS
to Retail Branch Server 4.3 migration guide (bsc#1262168)</li>
<li>Clarified Jinja templating in Client Configuration Guide
(bsc#1262012)</li>
<li>Added information about recreating missing Cobbler entries by
resaving the Saltboot Group formula to Retail Guide (bsc#1265334)</li>
<li>Updated Hub online synchronization documentation in Specialized
Guides</li>
<li>Added documentation on space usage percentage on the server and db
container which can be set using DISKCHECKALERT and DISKTHRESHOLD </li>
</ul>
<p>susemanager-schema:</p>
<ul>
<li>Version 5.1.20-0</li>
<li>Use db_ssl_enabled value consistently</li>
<li>Fix user role selection when org admin
role is enabled (bsc#1259254)</li>
<li>Make inventory path not nullable in
rhnActionInventory (bsc1268309)</li>
<li>Make clone channel appstreams idempotent (bsc#1254201)</li>
</ul>
<p>susemanager-sls:</p>
<ul>
<li>Version 5.1.26-0</li>
<li>Install ansible and ansible-core depending on their availability</li>
<li>Handle release package for SLE16 correctly depending on the
transactional flag</li>
<li>Fix cleanup timeout when deleting minions (bsc#1258567)</li>
<li>Use primary FQDN to contact Build Host (bsc#1247004)</li>
<li>Use db_ssl_enabled value consistently</li>
<li>Prevent inventory refresh before ansible package
is installed (bsc#1244141)</li>
</ul>
<p>susemanager-sync-data:</p>
<ul>
<li>Version 5.1.11-0</li>
<li>Add Ubuntu 26.04 LTS</li>
</ul>
<p>How to apply this update:</p>
<ol>
<li>Log in as root user to the SUSE Multi-Linux Manager Server.</li>
<li>Upgrade mgradm and mgrctl.</li>
<li>If you are in a disconnected environment, upgrade the image packages.</li>
<li>Reboot the system.</li>
<li>Run <code>mgradm upgrade podman</code> which will use the default image tags.</li>
</ol>
<h2>Patch Instructions:</h2>
<p>
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".<br/>
Alternatively you can run the command listed for your product:
</p>
<ul class="list-group">
<li class="list-group-item">
SUSE Multi-Linux Manager Retail Branch Server 5.1 Extension for SLE
<br/>
<code>zypper in -t patch SUSE-Multi-Linux-Manager-Retail-Branch-Server-SLE-5.1-2026-3712=1</code>
</li>
<li class="list-group-item">
SUSE Multi-Linux Manager Server 5.1 Extension for SLE
<br/>
<code>zypper in -t patch SUSE-Multi-Linux-Manager-Server-SLE-5.1-2026-3712=1</code>
</li>
<li class="list-group-item">
SUSE Multi-Linux Manager Proxy 5.1 Extension for SLE
<br/>
<code>zypper in -t patch SUSE-Multi-Linux-Manager-Proxy-SLE-5.1-2026-3712=1</code>
</li>
</ul>
<h2>Package List:</h2>
<ul>
<li>
SUSE Multi-Linux Manager Server 5.1 Extension for SLE (noarch)
<ul>
<li>mgrctl-lang-5.1.32-150700.3.33.2</li>
<li>mgradm-bash-completion-5.1.32-150700.3.33.2</li>
<li>mgradm-lang-5.1.32-150700.3.33.2</li>
<li>mgrctl-bash-completion-5.1.32-150700.3.33.2</li>
<li>mgradm-zsh-completion-5.1.32-150700.3.33.2</li>
<li>mgrctl-zsh-completion-5.1.32-150700.3.33.2</li>
</ul>
</li>
<li>
SUSE Multi-Linux Manager Server 5.1 Extension for SLE (aarch64)
<ul>
<li>suse-multi-linux-manager-5.1-aarch64-server-attestation-image-5.1.5-8.25.23</li>
<li>suse-multi-linux-manager-5.1-aarch64-server-image-5.1.5-8.23.61</li>
<li>suse-multi-linux-manager-5.1-aarch64-server-migration-14-16-image-5.1.5-8.23.23</li>
<li>suse-multi-linux-manager-5.1-aarch64-server-saline-image-5.1.5-9.23.41</li>
<li>suse-multi-linux-manager-5.1-aarch64-server-hub-xmlrpc-api-image-5.1.5-8.23.24</li>
<li>suse-multi-linux-manager-5.1-aarch64-server-postgresql-image-5.1.5-6.27.22</li>
</ul>
</li>
<li>
SUSE Multi-Linux Manager Server 5.1 Extension for SLE (s390x)
<ul>
<li>suse-multi-linux-manager-5.1-s390x-server-image-5.1.5-8.23.61</li>
<li>suse-multi-linux-manager-5.1-s390x-server-migration-14-16-image-5.1.5-8.23.23</li>
<li>suse-multi-linux-manager-5.1-s390x-server-hub-xmlrpc-api-image-5.1.5-8.23.24</li>
<li>suse-multi-linux-manager-5.1-s390x-server-postgresql-image-5.1.5-6.27.22</li>
<li>suse-multi-linux-manager-5.1-s390x-server-attestation-image-5.1.5-8.25.23</li>
<li>suse-multi-linux-manager-5.1-s390x-server-saline-image-5.1.5-9.23.41</li>
</ul>
</li>
<li>
SUSE Multi-Linux Manager Server 5.1 Extension for SLE (aarch64 ppc64le s390x x86_64)
<ul>
<li>mgradm-debuginfo-5.1.32-150700.3.33.2</li>
<li>mgrctl-5.1.32-150700.3.33.2</li>
<li>mgrctl-debuginfo-5.1.32-150700.3.33.2</li>
<li>mgradm-5.1.32-150700.3.33.2</li>
</ul>
</li>
<li>
SUSE Multi-Linux Manager Server 5.1 Extension for SLE (x86_64)
<ul>
<li>suse-multi-linux-manager-5.1-x86_64-server-postgresql-image-5.1.5-6.27.22</li>
<li>suse-multi-linux-manager-5.1-x86_64-server-attestation-image-5.1.5-8.25.23</li>
<li>suse-multi-linux-manager-5.1-x86_64-server-migration-14-16-image-5.1.5-8.23.23</li>
<li>suse-multi-linux-manager-5.1-x86_64-server-image-5.1.5-8.23.61</li>
<li>suse-multi-linux-manager-5.1-x86_64-server-saline-image-5.1.5-9.23.41</li>
<li>suse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-image-5.1.5-8.23.24</li>
</ul>
</li>
<li>
SUSE Multi-Linux Manager Server 5.1 Extension for SLE (ppc64le)
<ul>
<li>suse-multi-linux-manager-5.1-ppc64le-server-saline-image-5.1.5-9.23.41</li>
<li>suse-multi-linux-manager-5.1-ppc64le-server-hub-xmlrpc-api-image-5.1.5-8.23.24</li>
<li>suse-multi-linux-manager-5.1-ppc64le-server-attestation-image-5.1.5-8.25.23</li>
<li>suse-multi-linux-manager-5.1-ppc64le-server-postgresql-image-5.1.5-6.27.22</li>
<li>suse-multi-linux-manager-5.1-ppc64le-server-image-5.1.5-8.23.61</li>
<li>suse-multi-linux-manager-5.1-ppc64le-server-migration-14-16-image-5.1.5-8.23.23</li>
</ul>
</li>
<li>
SUSE Multi-Linux Manager Retail Branch Server 5.1 Extension for SLE (noarch)
<ul>
<li>mgrpxy-zsh-completion-5.1.32-150700.3.33.2</li>
<li>mgrpxy-lang-5.1.32-150700.3.33.2</li>
<li>mgrpxy-bash-completion-5.1.32-150700.3.33.2</li>
</ul>
</li>
<li>
SUSE Multi-Linux Manager Retail Branch Server 5.1 Extension for SLE (aarch64 ppc64le s390x x86_64)
<ul>
<li>mgrpxy-5.1.32-150700.3.33.2</li>
<li>mgrpxy-debuginfo-5.1.32-150700.3.33.2</li>
</ul>
</li>
<li>
SUSE Multi-Linux Manager Retail Branch Server 5.1 Extension for SLE (aarch64)
<ul>
<li>suse-multi-linux-manager-5.1-aarch64-proxy-ssh-image-5.1.5-8.23.20</li>
<li>suse-multi-linux-manager-5.1-aarch64-proxy-squid-image-5.1.5-8.23.20</li>
<li>suse-multi-linux-manager-5.1-aarch64-proxy-salt-broker-image-5.1.5-9.23.49</li>
<li>suse-multi-linux-manager-5.1-aarch64-proxy-httpd-image-5.1.5-8.25.42</li>
<li>suse-multi-linux-manager-5.1-aarch64-proxy-tftpd-image-5.1.5-8.23.18</li>
</ul>
</li>
<li>
SUSE Multi-Linux Manager Retail Branch Server 5.1 Extension for SLE (s390x)
<ul>
<li>suse-multi-linux-manager-5.1-s390x-proxy-salt-broker-image-5.1.5-9.23.49</li>
<li>suse-multi-linux-manager-5.1-s390x-proxy-tftpd-image-5.1.5-8.23.18</li>
<li>suse-multi-linux-manager-5.1-s390x-proxy-squid-image-5.1.5-8.23.20</li>
<li>suse-multi-linux-manager-5.1-s390x-proxy-ssh-image-5.1.5-8.23.20</li>
<li>suse-multi-linux-manager-5.1-s390x-proxy-httpd-image-5.1.5-8.25.42</li>
</ul>
</li>
<li>
SUSE Multi-Linux Manager Retail Branch Server 5.1 Extension for SLE (ppc64le)
<ul>
<li>suse-multi-linux-manager-5.1-ppc64le-proxy-tftpd-image-5.1.5-8.23.18</li>
<li>suse-multi-linux-manager-5.1-ppc64le-proxy-ssh-image-5.1.5-8.23.20</li>
<li>suse-multi-linux-manager-5.1-ppc64le-proxy-squid-image-5.1.5-8.23.20</li>
<li>suse-multi-linux-manager-5.1-ppc64le-proxy-httpd-image-5.1.5-8.25.42</li>
<li>suse-multi-linux-manager-5.1-ppc64le-proxy-salt-broker-image-5.1.5-9.23.49</li>
</ul>
</li>
<li>
SUSE Multi-Linux Manager Retail Branch Server 5.1 Extension for SLE (x86_64)
<ul>
<li>suse-multi-linux-manager-5.1-x86_64-proxy-tftpd-image-5.1.5-8.23.18</li>
<li>suse-multi-linux-manager-5.1-x86_64-proxy-httpd-image-5.1.5-8.25.42</li>
<li>suse-multi-linux-manager-5.1-x86_64-proxy-ssh-image-5.1.5-8.23.20</li>
<li>suse-multi-linux-manager-5.1-x86_64-proxy-salt-broker-image-5.1.5-9.23.49</li>
<li>suse-multi-linux-manager-5.1-x86_64-proxy-squid-image-5.1.5-8.23.20</li>
</ul>
</li>
<li>
SUSE Multi-Linux Manager Proxy 5.1 Extension for SLE (noarch)
<ul>
<li>mgrpxy-zsh-completion-5.1.32-150700.3.33.2</li>
<li>mgrpxy-lang-5.1.32-150700.3.33.2</li>
<li>mgrpxy-bash-completion-5.1.32-150700.3.33.2</li>
</ul>
</li>
<li>
SUSE Multi-Linux Manager Proxy 5.1 Extension for SLE (ppc64le)
<ul>
<li>suse-multi-linux-manager-5.1-ppc64le-proxy-tftpd-image-5.1.5-8.23.18</li>
<li>suse-multi-linux-manager-5.1-ppc64le-proxy-ssh-image-5.1.5-8.23.20</li>
<li>suse-multi-linux-manager-5.1-ppc64le-proxy-squid-image-5.1.5-8.23.20</li>
<li>suse-multi-linux-manager-5.1-ppc64le-proxy-httpd-image-5.1.5-8.25.42</li>
<li>suse-multi-linux-manager-5.1-ppc64le-proxy-salt-broker-image-5.1.5-9.23.49</li>
</ul>
</li>
<li>
SUSE Multi-Linux Manager Proxy 5.1 Extension for SLE (aarch64 ppc64le s390x x86_64)
<ul>
<li>mgrpxy-5.1.32-150700.3.33.2</li>
<li>mgrpxy-debuginfo-5.1.32-150700.3.33.2</li>
</ul>
</li>
<li>
SUSE Multi-Linux Manager Proxy 5.1 Extension for SLE (x86_64)
<ul>
<li>suse-multi-linux-manager-5.1-x86_64-proxy-tftpd-image-5.1.5-8.23.18</li>
<li>suse-multi-linux-manager-5.1-x86_64-proxy-httpd-image-5.1.5-8.25.42</li>
<li>suse-multi-linux-manager-5.1-x86_64-proxy-ssh-image-5.1.5-8.23.20</li>
<li>suse-multi-linux-manager-5.1-x86_64-proxy-salt-broker-image-5.1.5-9.23.49</li>
<li>suse-multi-linux-manager-5.1-x86_64-proxy-squid-image-5.1.5-8.23.20</li>
</ul>
</li>
<li>
SUSE Multi-Linux Manager Proxy 5.1 Extension for SLE (aarch64)
<ul>
<li>suse-multi-linux-manager-5.1-aarch64-proxy-ssh-image-5.1.5-8.23.20</li>
<li>suse-multi-linux-manager-5.1-aarch64-proxy-squid-image-5.1.5-8.23.20</li>
<li>suse-multi-linux-manager-5.1-aarch64-proxy-salt-broker-image-5.1.5-9.23.49</li>
<li>suse-multi-linux-manager-5.1-aarch64-proxy-httpd-image-5.1.5-8.25.42</li>
<li>suse-multi-linux-manager-5.1-aarch64-proxy-tftpd-image-5.1.5-8.23.18</li>
</ul>
</li>
<li>
SUSE Multi-Linux Manager Proxy 5.1 Extension for SLE (s390x)
<ul>
<li>suse-multi-linux-manager-5.1-s390x-proxy-salt-broker-image-5.1.5-9.23.49</li>
<li>suse-multi-linux-manager-5.1-s390x-proxy-tftpd-image-5.1.5-8.23.18</li>
<li>suse-multi-linux-manager-5.1-s390x-proxy-squid-image-5.1.5-8.23.20</li>
<li>suse-multi-linux-manager-5.1-s390x-proxy-ssh-image-5.1.5-8.23.20</li>
<li>suse-multi-linux-manager-5.1-s390x-proxy-httpd-image-5.1.5-8.25.42</li>
</ul>
</li>
</ul>
<h2>References:</h2>
<ul>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-39821.html">https://www.suse.com/security/cve/CVE-2026-39821.html</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1243168">https://bugzilla.suse.com/show_bug.cgi?id=1243168</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1244141">https://bugzilla.suse.com/show_bug.cgi?id=1244141</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1245944">https://bugzilla.suse.com/show_bug.cgi?id=1245944</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1247004">https://bugzilla.suse.com/show_bug.cgi?id=1247004</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1253505">https://bugzilla.suse.com/show_bug.cgi?id=1253505</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1254201">https://bugzilla.suse.com/show_bug.cgi?id=1254201</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1257102">https://bugzilla.suse.com/show_bug.cgi?id=1257102</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1257295">https://bugzilla.suse.com/show_bug.cgi?id=1257295</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1258500">https://bugzilla.suse.com/show_bug.cgi?id=1258500</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1258567">https://bugzilla.suse.com/show_bug.cgi?id=1258567</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1259225">https://bugzilla.suse.com/show_bug.cgi?id=1259225</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1259254">https://bugzilla.suse.com/show_bug.cgi?id=1259254</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1259594">https://bugzilla.suse.com/show_bug.cgi?id=1259594</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1259720">https://bugzilla.suse.com/show_bug.cgi?id=1259720</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1260342">https://bugzilla.suse.com/show_bug.cgi?id=1260342</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1260396">https://bugzilla.suse.com/show_bug.cgi?id=1260396</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1261195">https://bugzilla.suse.com/show_bug.cgi?id=1261195</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1262012">https://bugzilla.suse.com/show_bug.cgi?id=1262012</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1262168">https://bugzilla.suse.com/show_bug.cgi?id=1262168</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1262664">https://bugzilla.suse.com/show_bug.cgi?id=1262664</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1263822">https://bugzilla.suse.com/show_bug.cgi?id=1263822</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1263823">https://bugzilla.suse.com/show_bug.cgi?id=1263823</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1265334">https://bugzilla.suse.com/show_bug.cgi?id=1265334</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1266481">https://bugzilla.suse.com/show_bug.cgi?id=1266481</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1267619">https://bugzilla.suse.com/show_bug.cgi?id=1267619</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1267871">https://bugzilla.suse.com/show_bug.cgi?id=1267871</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1268006">https://bugzilla.suse.com/show_bug.cgi?id=1268006</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1268151">https://bugzilla.suse.com/show_bug.cgi?id=1268151</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1268229">https://bugzilla.suse.com/show_bug.cgi?id=1268229</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1268309">https://bugzilla.suse.com/show_bug.cgi?id=1268309</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1268325">https://bugzilla.suse.com/show_bug.cgi?id=1268325</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1268567">https://bugzilla.suse.com/show_bug.cgi?id=1268567</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1268570">https://bugzilla.suse.com/show_bug.cgi?id=1268570</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1268673">https://bugzilla.suse.com/show_bug.cgi?id=1268673</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1269192">https://bugzilla.suse.com/show_bug.cgi?id=1269192</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1269267">https://bugzilla.suse.com/show_bug.cgi?id=1269267</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1269408">https://bugzilla.suse.com/show_bug.cgi?id=1269408</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1270040">https://bugzilla.suse.com/show_bug.cgi?id=1270040</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1274571">https://bugzilla.suse.com/show_bug.cgi?id=1274571</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1274984">https://bugzilla.suse.com/show_bug.cgi?id=1274984</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1275217">https://bugzilla.suse.com/show_bug.cgi?id=1275217</a>
</li>
<li>
<a href="https://jira.suse.com/browse/MSQA-1059">https://jira.suse.com/browse/MSQA-1059</a>
</li>
</ul>
</div>