SUSE-SU-2026:1141-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2026/suse-su-20261141-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1141-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2026:1141-1

Upstream

CVE (5)

CVE-2025-62348
CVE-2025-62349
CVE-2025-67724
CVE-2025-67725
CVE-2025-67726

Related

CVE (5)

CVE-2025-62348
CVE-2025-62349
CVE-2025-67724
CVE-2025-67725
CVE-2025-67726

Published

2026-03-30T09:16:08Z

Modified

2026-03-31T08:00:27Z

Summary

Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools

Details

This update fixes the following issues:

spacecmd:

Version 5.2.6-0
- Update translation strings

uyuni-tools:

Version 5.2.5-0
- Remove migrate command
- Remove template script from mgradm: use the one in the image
- Split the TFTP server into a separate container
- Explicitly start proxy pods after operations (bsc#1258015)
- Adjust mgrctl server filter to work with the new helm chart labels
- Remove hub register command
- Remove the Kubernetes install and upgrade from mgrpxy
- Optimize postgres migration disk space usage (bsc#1257447)

venv-salt-minion:

Fix the typo causing buiding EL9 bundle without binary dependencies
Backport security patches for Salt vendored tornado:
- CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
- CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
- CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)

References

Affected packages

SUSE:Multi Linux Manager Tools Beta EL-8

golang-github-prometheus-node_exporter

Package

Name: golang-github-prometheus-node_exporter
Purl: pkg:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20Beta%20EL-8

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.9.1-80052.3.2.3

Ecosystem specific

{
    "binaries":  [
        {
            "golang-github-prometheus-node_exporter":  "1.9.1-80052.3.2.3",
            "mgrctl":  "5.2.5-80052.4.3.3",
            "mgrctl-bash-completion":  "5.2.5-80052.4.3.3",
            "mgrctl-zsh-completion":  "5.2.5-80052.4.3.3",
            "scap-security-guide-redhat":  "0.1.79-80052.4.2.3",
            "spacecmd":  "5.2.6-80052.4.3.2",
            "venv-salt-minion":  "3006.0-80052.6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1141-1.json"

scap-security-guide

Package

Name: scap-security-guide
Purl: pkg:rpm/suse/scap-security-guide&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20Beta%20EL-8

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.1.79-80052.4.2.3

Ecosystem specific

{
    "binaries":  [
        {
            "golang-github-prometheus-node_exporter":  "1.9.1-80052.3.2.3",
            "mgrctl":  "5.2.5-80052.4.3.3",
            "mgrctl-bash-completion":  "5.2.5-80052.4.3.3",
            "mgrctl-zsh-completion":  "5.2.5-80052.4.3.3",
            "scap-security-guide-redhat":  "0.1.79-80052.4.2.3",
            "spacecmd":  "5.2.6-80052.4.3.2",
            "venv-salt-minion":  "3006.0-80052.6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1141-1.json"

spacecmd

Package

Name: spacecmd
Purl: pkg:rpm/suse/spacecmd&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20Beta%20EL-8

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.2.6-80052.4.3.2

Ecosystem specific

{
    "binaries":  [
        {
            "golang-github-prometheus-node_exporter":  "1.9.1-80052.3.2.3",
            "mgrctl":  "5.2.5-80052.4.3.3",
            "mgrctl-bash-completion":  "5.2.5-80052.4.3.3",
            "mgrctl-zsh-completion":  "5.2.5-80052.4.3.3",
            "scap-security-guide-redhat":  "0.1.79-80052.4.2.3",
            "spacecmd":  "5.2.6-80052.4.3.2",
            "venv-salt-minion":  "3006.0-80052.6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1141-1.json"

uyuni-tools

Package

Name: uyuni-tools
Purl: pkg:rpm/suse/uyuni-tools&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20Beta%20EL-8

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.2.5-80052.4.3.3

Ecosystem specific

{
    "binaries":  [
        {
            "golang-github-prometheus-node_exporter":  "1.9.1-80052.3.2.3",
            "mgrctl":  "5.2.5-80052.4.3.3",
            "mgrctl-bash-completion":  "5.2.5-80052.4.3.3",
            "mgrctl-zsh-completion":  "5.2.5-80052.4.3.3",
            "scap-security-guide-redhat":  "0.1.79-80052.4.2.3",
            "spacecmd":  "5.2.6-80052.4.3.2",
            "venv-salt-minion":  "3006.0-80052.6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1141-1.json"

venv-salt-minion

Package

Name: venv-salt-minion
Purl: pkg:rpm/suse/venv-salt-minion&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20Beta%20EL-8

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3006.0-80052.6.3.2

Ecosystem specific

{
    "binaries":  [
        {
            "golang-github-prometheus-node_exporter":  "1.9.1-80052.3.2.3",
            "mgrctl":  "5.2.5-80052.4.3.3",
            "mgrctl-bash-completion":  "5.2.5-80052.4.3.3",
            "mgrctl-zsh-completion":  "5.2.5-80052.4.3.3",
            "scap-security-guide-redhat":  "0.1.79-80052.4.2.3",
            "spacecmd":  "5.2.6-80052.4.3.2",
            "venv-salt-minion":  "3006.0-80052.6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1141-1.json"

SUSE:RES-8:Update:Products:MultiLinuxManagerToolsBeta:Update

golang-github-prometheus-node_exporter

Package

Name: golang-github-prometheus-node_exporter
Purl: pkg:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE:RES-8:Update:Products:MultiLinuxManagerToolsBeta:Update

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.9.1-80052.3.2.3

Ecosystem specific

{
    "binaries":  [
        {
            "golang-github-prometheus-node_exporter":  "1.9.1-80052.3.2.3",
            "mgrctl":  "5.2.5-80052.4.3.3",
            "mgrctl-bash-completion":  "5.2.5-80052.4.3.3",
            "mgrctl-zsh-completion":  "5.2.5-80052.4.3.3",
            "python3-rhnlib":  "5.2.4-80052.3.3.2",
            "python3-spacewalk-client-tools":  "5.2.4-80052.3.3.3",
            "python3-uyuni-common-libs":  "5.2.3-80052.3.3.3",
            "saltbundlepy-m2crypto":  "0.45.1-80052.4.3.3",
            "saltbundlepy-m2crypto-doc":  "0.45.1-80052.4.3.3",
            "scap-security-guide":  "0.1.79-80052.4.2.3",
            "scap-security-guide-debian":  "0.1.79-80052.4.2.3",
            "scap-security-guide-redhat":  "0.1.79-80052.4.2.3",
            "scap-security-guide-ubuntu":  "0.1.79-80052.4.2.3",
            "spacecmd":  "5.2.6-80052.4.3.2",
            "spacewalk-client-tools":  "5.2.4-80052.3.3.3",
            "venv-salt-minion":  "3006.0-80052.6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1141-1.json"

rhnlib

Package

Name: rhnlib
Purl: pkg:rpm/suse/rhnlib&distro=SUSE:RES-8:Update:Products:MultiLinuxManagerToolsBeta:Update

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.2.4-80052.3.3.2

Ecosystem specific

{
    "binaries":  [
        {
            "golang-github-prometheus-node_exporter":  "1.9.1-80052.3.2.3",
            "mgrctl":  "5.2.5-80052.4.3.3",
            "mgrctl-bash-completion":  "5.2.5-80052.4.3.3",
            "mgrctl-zsh-completion":  "5.2.5-80052.4.3.3",
            "python3-rhnlib":  "5.2.4-80052.3.3.2",
            "python3-spacewalk-client-tools":  "5.2.4-80052.3.3.3",
            "python3-uyuni-common-libs":  "5.2.3-80052.3.3.3",
            "saltbundlepy-m2crypto":  "0.45.1-80052.4.3.3",
            "saltbundlepy-m2crypto-doc":  "0.45.1-80052.4.3.3",
            "scap-security-guide":  "0.1.79-80052.4.2.3",
            "scap-security-guide-debian":  "0.1.79-80052.4.2.3",
            "scap-security-guide-redhat":  "0.1.79-80052.4.2.3",
            "scap-security-guide-ubuntu":  "0.1.79-80052.4.2.3",
            "spacecmd":  "5.2.6-80052.4.3.2",
            "spacewalk-client-tools":  "5.2.4-80052.3.3.3",
            "venv-salt-minion":  "3006.0-80052.6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1141-1.json"

saltbundlepy-m2crypto

Package

Name: saltbundlepy-m2crypto
Purl: pkg:rpm/suse/saltbundlepy-m2crypto&distro=SUSE:RES-8:Update:Products:MultiLinuxManagerToolsBeta:Update

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.45.1-80052.4.3.3

Ecosystem specific

{
    "binaries":  [
        {
            "golang-github-prometheus-node_exporter":  "1.9.1-80052.3.2.3",
            "mgrctl":  "5.2.5-80052.4.3.3",
            "mgrctl-bash-completion":  "5.2.5-80052.4.3.3",
            "mgrctl-zsh-completion":  "5.2.5-80052.4.3.3",
            "python3-rhnlib":  "5.2.4-80052.3.3.2",
            "python3-spacewalk-client-tools":  "5.2.4-80052.3.3.3",
            "python3-uyuni-common-libs":  "5.2.3-80052.3.3.3",
            "saltbundlepy-m2crypto":  "0.45.1-80052.4.3.3",
            "saltbundlepy-m2crypto-doc":  "0.45.1-80052.4.3.3",
            "scap-security-guide":  "0.1.79-80052.4.2.3",
            "scap-security-guide-debian":  "0.1.79-80052.4.2.3",
            "scap-security-guide-redhat":  "0.1.79-80052.4.2.3",
            "scap-security-guide-ubuntu":  "0.1.79-80052.4.2.3",
            "spacecmd":  "5.2.6-80052.4.3.2",
            "spacewalk-client-tools":  "5.2.4-80052.3.3.3",
            "venv-salt-minion":  "3006.0-80052.6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1141-1.json"

scap-security-guide

Package

Name: scap-security-guide
Purl: pkg:rpm/suse/scap-security-guide&distro=SUSE:RES-8:Update:Products:MultiLinuxManagerToolsBeta:Update

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.1.79-80052.4.2.3

Ecosystem specific

{
    "binaries":  [
        {
            "golang-github-prometheus-node_exporter":  "1.9.1-80052.3.2.3",
            "mgrctl":  "5.2.5-80052.4.3.3",
            "mgrctl-bash-completion":  "5.2.5-80052.4.3.3",
            "mgrctl-zsh-completion":  "5.2.5-80052.4.3.3",
            "python3-rhnlib":  "5.2.4-80052.3.3.2",
            "python3-spacewalk-client-tools":  "5.2.4-80052.3.3.3",
            "python3-uyuni-common-libs":  "5.2.3-80052.3.3.3",
            "saltbundlepy-m2crypto":  "0.45.1-80052.4.3.3",
            "saltbundlepy-m2crypto-doc":  "0.45.1-80052.4.3.3",
            "scap-security-guide":  "0.1.79-80052.4.2.3",
            "scap-security-guide-debian":  "0.1.79-80052.4.2.3",
            "scap-security-guide-redhat":  "0.1.79-80052.4.2.3",
            "scap-security-guide-ubuntu":  "0.1.79-80052.4.2.3",
            "spacecmd":  "5.2.6-80052.4.3.2",
            "spacewalk-client-tools":  "5.2.4-80052.3.3.3",
            "venv-salt-minion":  "3006.0-80052.6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1141-1.json"

spacecmd

Package

Name: spacecmd
Purl: pkg:rpm/suse/spacecmd&distro=SUSE:RES-8:Update:Products:MultiLinuxManagerToolsBeta:Update

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.2.6-80052.4.3.2

Ecosystem specific

{
    "binaries":  [
        {
            "golang-github-prometheus-node_exporter":  "1.9.1-80052.3.2.3",
            "mgrctl":  "5.2.5-80052.4.3.3",
            "mgrctl-bash-completion":  "5.2.5-80052.4.3.3",
            "mgrctl-zsh-completion":  "5.2.5-80052.4.3.3",
            "python3-rhnlib":  "5.2.4-80052.3.3.2",
            "python3-spacewalk-client-tools":  "5.2.4-80052.3.3.3",
            "python3-uyuni-common-libs":  "5.2.3-80052.3.3.3",
            "saltbundlepy-m2crypto":  "0.45.1-80052.4.3.3",
            "saltbundlepy-m2crypto-doc":  "0.45.1-80052.4.3.3",
            "scap-security-guide":  "0.1.79-80052.4.2.3",
            "scap-security-guide-debian":  "0.1.79-80052.4.2.3",
            "scap-security-guide-redhat":  "0.1.79-80052.4.2.3",
            "scap-security-guide-ubuntu":  "0.1.79-80052.4.2.3",
            "spacecmd":  "5.2.6-80052.4.3.2",
            "spacewalk-client-tools":  "5.2.4-80052.3.3.3",
            "venv-salt-minion":  "3006.0-80052.6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1141-1.json"

spacewalk-client-tools

Package

Name: spacewalk-client-tools
Purl: pkg:rpm/suse/spacewalk-client-tools&distro=SUSE:RES-8:Update:Products:MultiLinuxManagerToolsBeta:Update

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.2.4-80052.3.3.3

Ecosystem specific

{
    "binaries":  [
        {
            "golang-github-prometheus-node_exporter":  "1.9.1-80052.3.2.3",
            "mgrctl":  "5.2.5-80052.4.3.3",
            "mgrctl-bash-completion":  "5.2.5-80052.4.3.3",
            "mgrctl-zsh-completion":  "5.2.5-80052.4.3.3",
            "python3-rhnlib":  "5.2.4-80052.3.3.2",
            "python3-spacewalk-client-tools":  "5.2.4-80052.3.3.3",
            "python3-uyuni-common-libs":  "5.2.3-80052.3.3.3",
            "saltbundlepy-m2crypto":  "0.45.1-80052.4.3.3",
            "saltbundlepy-m2crypto-doc":  "0.45.1-80052.4.3.3",
            "scap-security-guide":  "0.1.79-80052.4.2.3",
            "scap-security-guide-debian":  "0.1.79-80052.4.2.3",
            "scap-security-guide-redhat":  "0.1.79-80052.4.2.3",
            "scap-security-guide-ubuntu":  "0.1.79-80052.4.2.3",
            "spacecmd":  "5.2.6-80052.4.3.2",
            "spacewalk-client-tools":  "5.2.4-80052.3.3.3",
            "venv-salt-minion":  "3006.0-80052.6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1141-1.json"

uyuni-common-libs

Package

Name: uyuni-common-libs
Purl: pkg:rpm/suse/uyuni-common-libs&distro=SUSE:RES-8:Update:Products:MultiLinuxManagerToolsBeta:Update

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.2.3-80052.3.3.3

Ecosystem specific

{
    "binaries":  [
        {
            "golang-github-prometheus-node_exporter":  "1.9.1-80052.3.2.3",
            "mgrctl":  "5.2.5-80052.4.3.3",
            "mgrctl-bash-completion":  "5.2.5-80052.4.3.3",
            "mgrctl-zsh-completion":  "5.2.5-80052.4.3.3",
            "python3-rhnlib":  "5.2.4-80052.3.3.2",
            "python3-spacewalk-client-tools":  "5.2.4-80052.3.3.3",
            "python3-uyuni-common-libs":  "5.2.3-80052.3.3.3",
            "saltbundlepy-m2crypto":  "0.45.1-80052.4.3.3",
            "saltbundlepy-m2crypto-doc":  "0.45.1-80052.4.3.3",
            "scap-security-guide":  "0.1.79-80052.4.2.3",
            "scap-security-guide-debian":  "0.1.79-80052.4.2.3",
            "scap-security-guide-redhat":  "0.1.79-80052.4.2.3",
            "scap-security-guide-ubuntu":  "0.1.79-80052.4.2.3",
            "spacecmd":  "5.2.6-80052.4.3.2",
            "spacewalk-client-tools":  "5.2.4-80052.3.3.3",
            "venv-salt-minion":  "3006.0-80052.6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1141-1.json"

uyuni-tools

Package

Name: uyuni-tools
Purl: pkg:rpm/suse/uyuni-tools&distro=SUSE:RES-8:Update:Products:MultiLinuxManagerToolsBeta:Update

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.2.5-80052.4.3.3

Ecosystem specific

{
    "binaries":  [
        {
            "golang-github-prometheus-node_exporter":  "1.9.1-80052.3.2.3",
            "mgrctl":  "5.2.5-80052.4.3.3",
            "mgrctl-bash-completion":  "5.2.5-80052.4.3.3",
            "mgrctl-zsh-completion":  "5.2.5-80052.4.3.3",
            "python3-rhnlib":  "5.2.4-80052.3.3.2",
            "python3-spacewalk-client-tools":  "5.2.4-80052.3.3.3",
            "python3-uyuni-common-libs":  "5.2.3-80052.3.3.3",
            "saltbundlepy-m2crypto":  "0.45.1-80052.4.3.3",
            "saltbundlepy-m2crypto-doc":  "0.45.1-80052.4.3.3",
            "scap-security-guide":  "0.1.79-80052.4.2.3",
            "scap-security-guide-debian":  "0.1.79-80052.4.2.3",
            "scap-security-guide-redhat":  "0.1.79-80052.4.2.3",
            "scap-security-guide-ubuntu":  "0.1.79-80052.4.2.3",
            "spacecmd":  "5.2.6-80052.4.3.2",
            "spacewalk-client-tools":  "5.2.4-80052.3.3.3",
            "venv-salt-minion":  "3006.0-80052.6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1141-1.json"

venv-salt-minion

Package

Name: venv-salt-minion
Purl: pkg:rpm/suse/venv-salt-minion&distro=SUSE:RES-8:Update:Products:MultiLinuxManagerToolsBeta:Update

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3006.0-80052.6.3.2

Ecosystem specific

{
    "binaries":  [
        {
            "golang-github-prometheus-node_exporter":  "1.9.1-80052.3.2.3",
            "mgrctl":  "5.2.5-80052.4.3.3",
            "mgrctl-bash-completion":  "5.2.5-80052.4.3.3",
            "mgrctl-zsh-completion":  "5.2.5-80052.4.3.3",
            "python3-rhnlib":  "5.2.4-80052.3.3.2",
            "python3-spacewalk-client-tools":  "5.2.4-80052.3.3.3",
            "python3-uyuni-common-libs":  "5.2.3-80052.3.3.3",
            "saltbundlepy-m2crypto":  "0.45.1-80052.4.3.3",
            "saltbundlepy-m2crypto-doc":  "0.45.1-80052.4.3.3",
            "scap-security-guide":  "0.1.79-80052.4.2.3",
            "scap-security-guide-debian":  "0.1.79-80052.4.2.3",
            "scap-security-guide-redhat":  "0.1.79-80052.4.2.3",
            "scap-security-guide-ubuntu":  "0.1.79-80052.4.2.3",
            "spacecmd":  "5.2.6-80052.4.3.2",
            "spacewalk-client-tools":  "5.2.4-80052.3.3.3",
            "venv-salt-minion":  "3006.0-80052.6.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1141-1.json"