Security update 5.1.5 for Multi-Linux Manager Server

This update fixes the following issues:

Release Notes Highlights:

- Update to SUSE Multi-Linux Manager 5.1.5
* Added known issue for missing BasicConstraints Critical flag
* Added a note about disk-check parameters semantics change
* Added a note about enabling FIPS mode after installing
SUSE Multi-Linux Manager.
* Monitoring: Upgrade Grafana to 12.4.5
* Enabled the support on FIPS enabled host
* Security Fixes:
CVE-2026-33382, CVE-2025-12141, CVE-2026-41607, CVE-2026-39821
CVE-2026-39882, CVE-2026-33244, CVE-2026-13149, CVE-2026-33814
CVE-2026-39821
* Bugs mentioned:
bsc#1243168, bsc#1244141, bsc#1245944, bsc#1247004, bsc#1253505
bsc#1254201, bsc#1257102, bsc#1257295, bsc#1258500, bsc#1258567
bsc#1259225, bsc#1259254, bsc#1259594, bsc#1259720, bsc#1260342
bsc#1260396, bsc#1261195, bsc#1262012, bsc#1262168, bsc#1262664
bsc#1263822, bsc#1263823, bsc#1265334, bsc#1266481, bsc#1267619
bsc#1267871, bsc#1268006, bsc#1268151, bsc#1268229, bsc#1268309
bsc#1268325, bsc#1268567, bsc#1268570, bsc#1268673, bsc#1269192
bsc#1269267, bsc#1269408, bsc#1265827, bsc#1270040, bsc#1271331
bsc#1262187, bsc#1263272, bsc#1266615, bsc#1267416, bsc#1269917
bsc#1274571

Container images and uyuni-tools changes:

server-attestation-image:

- Version 5.1.16
* Add org.uyuni.version LABEL to the image

server-hub-xmlrpc-api-image:

- Version 5.1.15
* Image rebuilt to the newest version with updated dependencies
for SUSE Multi-Linux Manager 5.1.5

server-image:

- Version 5.1.16
* Configure Java strong SecureRandom to use the NSS FIPS
provider on FIPS-enabled hosts so DB connections (SCRAM-SHA-256)
work under FIPS

server-migration-14-16-image:

- Version 5.1.15
* Image rebuilt to the newest version with updated dependencies
for SUSE Multi-Linux Manager 5.1.5

server-postgresql-image:

- Version 5.1.15
* Automatically set the log timezone for TZ env (bsc#1267871)
* Grant access to uyuni-server-attestation container (bsc#1269267)
* Enable hostname filtering in pg_hba.conf

server-saline-image:

- Version 5.1.15
* Add org.uyuni.version LABEL to the image

uyuni-tools:

Security issues fixed:

- Version 5.1.31-0:
* CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481)

Other bugs fixed and changes:

- Version 5.1.32-0:
* Use common container name to prevent pg auth errors (bsc#1275217)
- Version 5.1.30-0
* Strip text from x509 certs before creating the secret
(bsc#1259720)
* Fix the traefik enpoints names (bsc#1267619)
* Set the timezone on the database container too (bsc#1267871)
* Disable SSL on internal DB connection
* Internal SANs for db and reportdb are no longer required
* Generate the same certificate for server and reportdb
* Make uyuni-server service dependent on uyuni-db
(bsc#1263823)

The following packages are underlying build dependencies
and system components used by the containers:

salt:

- Use AsyncHTTPClient in salt.utils.http (bsc#1268325)
- Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822)

spacewalk-admin:

- Version 5.1.9-0
* Use db_ssl_enabled value consistently

spacewalk-backend:

- Version 5.1.18-0
* Use db_ssl_enabled value consistently

spacewalk-certs-tools:

- Version 5.1.12-0
* Set Basic Constraints extension as 'critical' according to
RFC 5280 for self signed CA certificates (bsc#1274571)

spacewalk-java:

- Version 5.1.30-0
* Add Ubuntu 26.04 LTS
- Version 5.1.29-0
* Fix mainframe foreign systems showing wrong OS (bsc#1260342)
* Make setting of column filters in ListTag idempotent
(bsc#1269192)
* Optimized channel model generation logic to improve page load
performance during peripheral channel selection (bsc#1259225)
* Do not attempt to delete a certificate that does not exist
(bsc#1268151)
* Remote Report DB connection should always use SSL (bsc#1268229)
* Make sure the image upload directory exists
* Add primary FQDN to pillar (bsc#1247004)
* Use db_ssl_enabled value consistently
* Fix user role selection when org admin
role is enabled (bsc#1259254)
* Fix inventory refresh triggering from unrelated
inotify events (bsc#1268309)
* Prevent inventory refresh before ansible package
is installed (bsc#1244141)
* Fix CLM not propagating new AppStream module
versions to cloned channels (bsc#1254201)
* Fix hubsync package download checksum lookup (bsc#1270040)
* Add delay to package clean to not interfere with repo-sync
(bsc#1258500)

spacewalk-search:

- Version 5.1.8-0
* Use db_ssl_enabled value consistently
* Fix Fine Grained search for hyphenated hostnames (bsc#1257102)

spacewalk-utils:

- Version 5.1.11-0
* Add Ubuntu 26.04 LTS
- Version 5.1.10-0
* Taskotop now handles timezone (bsc#1267871)

spacewalk-web:

- Version 5.1.22-0
* Improve product selection checkboxes in the setup UI
* Show partial selection state for product trees more accurately
* Use db_ssl_enabled value consistently

susemanager:

- Version 5.1.19-0
* Add Ubuntu 26.04 LTS
- Version 5.1.18-0
* Add bootstrap repository definition for SLE and Leap 16.1

susemanager-build-keys:

- Add Liberty v3 backup / reserve key
Added: RPM-GPG-KEY-SUSE_Liberty_Linux_v3 (BB9FD340DA090344)

susemanager-docs_en:

- Documented SLES 15 SP7 to SLES 16.0 major upgrade via product
migration in Client Configuration Guide
- Added a common workflow to setup crypto policies in the server
container (bsc#1253505)
- Added mass migration using UI to Client Configuration Guide
(bsc#1259594)
- Enhanced proxy migration procedure (bsc#1269408)
- Added procedure for allowing uploading of large files to
Specialized Guides (bsc#1268673)
- Enhanced Prometheus formula with command to generate password hash
in Specialized Guides (bsc#1268570)
- Document Ansible Playbook variable editing (bsc#1260396)
- Convert broken `[role]``text`` double-backtick literals in
`en/modules` to