🛡️ SUSE-SU-2025:3839-1 — multi-linux-manager-proxy-sle-release (CVE-2025-53192)

Security update 5.1.1 for Multi-Linux Manager Server

This update fixes the following issues:

Multi-Linux-Manager-Server-SLE-release:

• Update for the release packages for fixing the EOL
• Fixed migration issue (bsc#1243486)

server-attestation-image was updated from version 5.1.7 to 5.1.10:

• CVE-2025-53192: Do not use apache-commons-ognl but its successor

ognl (bsc#1248252)

• Image rebuilt to the newest version with updated dependencies

server-hub-xmlrpc-api-image was updated from version 5.1.7 to 5.1.9:

• Image rebuilt to the newest version with updated dependencies

server-image was updated from version 5.1.7 to 5.1.9::

• Version 5.1.9
• Install python311-ldap into the server-image (bsc#1245702)
• Version 5.1.8
• Move jmx configuration to a persisting folder (bsc#1244219)

server-migration-14-16-image was updated from version 5.1.7 to 5.1.9:

• Image rebuilt to the newest version with updated dependencies

server-postgresql-image was updated from version 5.1.5 to 5.1.7:

• Image rebuilt to the newest version with updated dependencies

server-saline-image was updated from version 5.1.7 to 5.1.9:

• Image rebuilt to the newest version with updated dependencies

uyuni-tools was updated from version 5.1.18-0 to 5.1.22-0:

• Version 5.1.22-0
• Fixed cobbler config migration to standalone files
• Fixed generated DB certificate subject alternate names
• Version 5.1.21-0
• Removed extraneous quotes when getting the running image (bsc#1249434)
• Version 5.1.20-0
• Added migration for server monitoring configuration (bsc#1247688)
• Version 5.1.19-0
• Added a lowercase version of --logLevel (bsc#1243611)
• Stop executing scripts in temporary folder (bsc#1243704)
• support config: collect podman inspect for hub container (bsc#1245099)
• Use a new dedicated path for Cobbler settings (bsc#1244027)
• Migrated custom auto installation snippets (bsc#1246320)
• Added SUSE Linux Enterprise 15 SP7 to buildin productmap
• Fixed loading product map from mgradm configuration file (bsc#1246068)
• Fixed channel override for distro copy
• Do not use sudo when running as a root user (bsc#1246882)
• Do not require backups to be at the same location for restoring (bsc#1246906)
• Fixed recomputing proxy images when installing a PTF or TEST (bsc#1246553)
• Added mgradm server rename to change the server FQDN (bsc#1229825)
• If no DB SSL CA parameter is given, use the other one (bsc#1245120)
• Made mgradm stop more fault tolerant (bsc#1243331)
• Backup systemd dropin directory too and create if missing
• Added 3rd party SSL options for upgrade and migration scenarios
• Do not consider stderr output of podman as an error (bsc#1247836)
• Restored SELinux contexts for restored backup volumes (bsc#1244127)
• Automatically get up-to-date systemid file on salt based proxy hosts (bsc#1246789)
• Bumped the default image tag to 5.1.1

How to apply this update:

1. Log in as root user to the SUSE Multi-Linux Manager Server.

2. Upgrade mgradm and mgrctl.

3. If you are in a disconnected environment, upgrade the image packages.

4. Reboot the system.

5. Run mgradm upgrade podman which will use the default image tags.