{"schema_version":"1.7.5","id":"SUSE-SU-2026:1140-1","published":"2026-03-30T09:15:49Z","modified":"2026-03-31T08:00:18.672131Z","related":["CVE-2025-62348","CVE-2025-62349","CVE-2025-67724","CVE-2025-67725","CVE-2025-67726"],"upstream":["CVE-2025-62348","CVE-2025-62349","CVE-2025-67724","CVE-2025-67725","CVE-2025-67726"],"summary":"Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools","details":"This update fixes the following issues:\n    \nspacecmd:\n\n- Version 5.2.6-0\n  * Update translation strings\n\nuyuni-tools:\n\n- Version 5.2.5-0\n  * Remove migrate command\n  * Remove template script from mgradm: use the one in the image\n  * Split the TFTP server into a separate container\n  * Explicitly start proxy pods after operations\n    (bsc#1258015)\n  * Adjust mgrctl server filter to work with the new helm chart\n    labels\n  * Remove hub register command\n  * Remove the Kubernetes install and upgrade from mgrpxy\n  * Optimize postgres migration disk space usage (bsc#1257447)\n\nvenv-salt-minion:\n\n- Fix the typo causing buiding EL9 bundle without binary dependencies\n- Backport security patches for Salt vendored tornado:\n  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)\n  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)\n  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)\n- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)\n- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)\n\n","affected":[{"package":{"name":"golang-github-prometheus-node_exporter","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update","purl":"pkg:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-90052.3.2.1"}]}],"ecosystem_specific":{"binaries":[{"golang-github-prometheus-node_exporter":"1.9.1-90052.3.2.1","mgrctl":"5.2.5-90052.4.3.1","mgrctl-bash-completion":"5.2.5-90052.4.3.1","mgrctl-zsh-completion":"5.2.5-90052.4.3.1","python3-rhnlib":"5.2.4-90052.3.3.1","python3-spacewalk-client-tools":"5.2.4-90052.3.3.1","python3-uyuni-common-libs":"5.2.3-90052.3.3.1","saltbundlepy-m2crypto":"0.45.1-90052.4.3.1","saltbundlepy-m2crypto-doc":"0.45.1-90052.4.3.1","scap-security-guide":"0.1.79-90052.4.2.1","scap-security-guide-debian":"0.1.79-90052.4.2.1","scap-security-guide-redhat":"0.1.79-90052.4.2.1","scap-security-guide-ubuntu":"0.1.79-90052.4.2.1","spacecmd":"5.2.6-90052.4.3.1","spacewalk-client-tools":"5.2.4-90052.3.3.1","venv-salt-minion":"3006.0-90052.6.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1140-1.json"}},{"package":{"name":"rhnlib","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update","purl":"pkg:rpm/suse/rhnlib&distro=SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.4-90052.3.3.1"}]}],"ecosystem_specific":{"binaries":[{"golang-github-prometheus-node_exporter":"1.9.1-90052.3.2.1","mgrctl":"5.2.5-90052.4.3.1","mgrctl-bash-completion":"5.2.5-90052.4.3.1","mgrctl-zsh-completion":"5.2.5-90052.4.3.1","python3-rhnlib":"5.2.4-90052.3.3.1","python3-spacewalk-client-tools":"5.2.4-90052.3.3.1","python3-uyuni-common-libs":"5.2.3-90052.3.3.1","saltbundlepy-m2crypto":"0.45.1-90052.4.3.1","saltbundlepy-m2crypto-doc":"0.45.1-90052.4.3.1","scap-security-guide":"0.1.79-90052.4.2.1","scap-security-guide-debian":"0.1.79-90052.4.2.1","scap-security-guide-redhat":"0.1.79-90052.4.2.1","scap-security-guide-ubuntu":"0.1.79-90052.4.2.1","spacecmd":"5.2.6-90052.4.3.1","spacewalk-client-tools":"5.2.4-90052.3.3.1","venv-salt-minion":"3006.0-90052.6.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1140-1.json"}},{"package":{"name":"saltbundlepy-m2crypto","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update","purl":"pkg:rpm/suse/saltbundlepy-m2crypto&distro=SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.45.1-90052.4.3.1"}]}],"ecosystem_specific":{"binaries":[{"golang-github-prometheus-node_exporter":"1.9.1-90052.3.2.1","mgrctl":"5.2.5-90052.4.3.1","mgrctl-bash-completion":"5.2.5-90052.4.3.1","mgrctl-zsh-completion":"5.2.5-90052.4.3.1","python3-rhnlib":"5.2.4-90052.3.3.1","python3-spacewalk-client-tools":"5.2.4-90052.3.3.1","python3-uyuni-common-libs":"5.2.3-90052.3.3.1","saltbundlepy-m2crypto":"0.45.1-90052.4.3.1","saltbundlepy-m2crypto-doc":"0.45.1-90052.4.3.1","scap-security-guide":"0.1.79-90052.4.2.1","scap-security-guide-debian":"0.1.79-90052.4.2.1","scap-security-guide-redhat":"0.1.79-90052.4.2.1","scap-security-guide-ubuntu":"0.1.79-90052.4.2.1","spacecmd":"5.2.6-90052.4.3.1","spacewalk-client-tools":"5.2.4-90052.3.3.1","venv-salt-minion":"3006.0-90052.6.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1140-1.json"}},{"package":{"name":"scap-security-guide","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update","purl":"pkg:rpm/suse/scap-security-guide&distro=SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.79-90052.4.2.1"}]}],"ecosystem_specific":{"binaries":[{"golang-github-prometheus-node_exporter":"1.9.1-90052.3.2.1","mgrctl":"5.2.5-90052.4.3.1","mgrctl-bash-completion":"5.2.5-90052.4.3.1","mgrctl-zsh-completion":"5.2.5-90052.4.3.1","python3-rhnlib":"5.2.4-90052.3.3.1","python3-spacewalk-client-tools":"5.2.4-90052.3.3.1","python3-uyuni-common-libs":"5.2.3-90052.3.3.1","saltbundlepy-m2crypto":"0.45.1-90052.4.3.1","saltbundlepy-m2crypto-doc":"0.45.1-90052.4.3.1","scap-security-guide":"0.1.79-90052.4.2.1","scap-security-guide-debian":"0.1.79-90052.4.2.1","scap-security-guide-redhat":"0.1.79-90052.4.2.1","scap-security-guide-ubuntu":"0.1.79-90052.4.2.1","spacecmd":"5.2.6-90052.4.3.1","spacewalk-client-tools":"5.2.4-90052.3.3.1","venv-salt-minion":"3006.0-90052.6.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1140-1.json"}},{"package":{"name":"spacecmd","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update","purl":"pkg:rpm/suse/spacecmd&distro=SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.6-90052.4.3.1"}]}],"ecosystem_specific":{"binaries":[{"golang-github-prometheus-node_exporter":"1.9.1-90052.3.2.1","mgrctl":"5.2.5-90052.4.3.1","mgrctl-bash-completion":"5.2.5-90052.4.3.1","mgrctl-zsh-completion":"5.2.5-90052.4.3.1","python3-rhnlib":"5.2.4-90052.3.3.1","python3-spacewalk-client-tools":"5.2.4-90052.3.3.1","python3-uyuni-common-libs":"5.2.3-90052.3.3.1","saltbundlepy-m2crypto":"0.45.1-90052.4.3.1","saltbundlepy-m2crypto-doc":"0.45.1-90052.4.3.1","scap-security-guide":"0.1.79-90052.4.2.1","scap-security-guide-debian":"0.1.79-90052.4.2.1","scap-security-guide-redhat":"0.1.79-90052.4.2.1","scap-security-guide-ubuntu":"0.1.79-90052.4.2.1","spacecmd":"5.2.6-90052.4.3.1","spacewalk-client-tools":"5.2.4-90052.3.3.1","venv-salt-minion":"3006.0-90052.6.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1140-1.json"}},{"package":{"name":"spacewalk-client-tools","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update","purl":"pkg:rpm/suse/spacewalk-client-tools&distro=SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.4-90052.3.3.1"}]}],"ecosystem_specific":{"binaries":[{"golang-github-prometheus-node_exporter":"1.9.1-90052.3.2.1","mgrctl":"5.2.5-90052.4.3.1","mgrctl-bash-completion":"5.2.5-90052.4.3.1","mgrctl-zsh-completion":"5.2.5-90052.4.3.1","python3-rhnlib":"5.2.4-90052.3.3.1","python3-spacewalk-client-tools":"5.2.4-90052.3.3.1","python3-uyuni-common-libs":"5.2.3-90052.3.3.1","saltbundlepy-m2crypto":"0.45.1-90052.4.3.1","saltbundlepy-m2crypto-doc":"0.45.1-90052.4.3.1","scap-security-guide":"0.1.79-90052.4.2.1","scap-security-guide-debian":"0.1.79-90052.4.2.1","scap-security-guide-redhat":"0.1.79-90052.4.2.1","scap-security-guide-ubuntu":"0.1.79-90052.4.2.1","spacecmd":"5.2.6-90052.4.3.1","spacewalk-client-tools":"5.2.4-90052.3.3.1","venv-salt-minion":"3006.0-90052.6.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1140-1.json"}},{"package":{"name":"uyuni-common-libs","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update","purl":"pkg:rpm/suse/uyuni-common-libs&distro=SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.3-90052.3.3.1"}]}],"ecosystem_specific":{"binaries":[{"golang-github-prometheus-node_exporter":"1.9.1-90052.3.2.1","mgrctl":"5.2.5-90052.4.3.1","mgrctl-bash-completion":"5.2.5-90052.4.3.1","mgrctl-zsh-completion":"5.2.5-90052.4.3.1","python3-rhnlib":"5.2.4-90052.3.3.1","python3-spacewalk-client-tools":"5.2.4-90052.3.3.1","python3-uyuni-common-libs":"5.2.3-90052.3.3.1","saltbundlepy-m2crypto":"0.45.1-90052.4.3.1","saltbundlepy-m2crypto-doc":"0.45.1-90052.4.3.1","scap-security-guide":"0.1.79-90052.4.2.1","scap-security-guide-debian":"0.1.79-90052.4.2.1","scap-security-guide-redhat":"0.1.79-90052.4.2.1","scap-security-guide-ubuntu":"0.1.79-90052.4.2.1","spacecmd":"5.2.6-90052.4.3.1","spacewalk-client-tools":"5.2.4-90052.3.3.1","venv-salt-minion":"3006.0-90052.6.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1140-1.json"}},{"package":{"name":"uyuni-tools","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update","purl":"pkg:rpm/suse/uyuni-tools&distro=SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.5-90052.4.3.1"}]}],"ecosystem_specific":{"binaries":[{"golang-github-prometheus-node_exporter":"1.9.1-90052.3.2.1","mgrctl":"5.2.5-90052.4.3.1","mgrctl-bash-completion":"5.2.5-90052.4.3.1","mgrctl-zsh-completion":"5.2.5-90052.4.3.1","python3-rhnlib":"5.2.4-90052.3.3.1","python3-spacewalk-client-tools":"5.2.4-90052.3.3.1","python3-uyuni-common-libs":"5.2.3-90052.3.3.1","saltbundlepy-m2crypto":"0.45.1-90052.4.3.1","saltbundlepy-m2crypto-doc":"0.45.1-90052.4.3.1","scap-security-guide":"0.1.79-90052.4.2.1","scap-security-guide-debian":"0.1.79-90052.4.2.1","scap-security-guide-redhat":"0.1.79-90052.4.2.1","scap-security-guide-ubuntu":"0.1.79-90052.4.2.1","spacecmd":"5.2.6-90052.4.3.1","spacewalk-client-tools":"5.2.4-90052.3.3.1","venv-salt-minion":"3006.0-90052.6.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1140-1.json"}},{"package":{"name":"venv-salt-minion","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update","purl":"pkg:rpm/suse/venv-salt-minion&distro=SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-90052.6.3.1"}]}],"ecosystem_specific":{"binaries":[{"golang-github-prometheus-node_exporter":"1.9.1-90052.3.2.1","mgrctl":"5.2.5-90052.4.3.1","mgrctl-bash-completion":"5.2.5-90052.4.3.1","mgrctl-zsh-completion":"5.2.5-90052.4.3.1","python3-rhnlib":"5.2.4-90052.3.3.1","python3-spacewalk-client-tools":"5.2.4-90052.3.3.1","python3-uyuni-common-libs":"5.2.3-90052.3.3.1","saltbundlepy-m2crypto":"0.45.1-90052.4.3.1","saltbundlepy-m2crypto-doc":"0.45.1-90052.4.3.1","scap-security-guide":"0.1.79-90052.4.2.1","scap-security-guide-debian":"0.1.79-90052.4.2.1","scap-security-guide-redhat":"0.1.79-90052.4.2.1","scap-security-guide-ubuntu":"0.1.79-90052.4.2.1","spacecmd":"5.2.6-90052.4.3.1","spacewalk-client-tools":"5.2.4-90052.3.3.1","venv-salt-minion":"3006.0-90052.6.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1140-1.json"}},{"package":{"name":"golang-github-prometheus-node_exporter","ecosystem":"SUSE:Multi Linux Manager Tools Beta EL-9","purl":"pkg:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20Beta%20EL-9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-90052.3.2.1"}]}],"ecosystem_specific":{"binaries":[{"golang-github-prometheus-node_exporter":"1.9.1-90052.3.2.1","mgrctl":"5.2.5-90052.4.3.1","mgrctl-bash-completion":"5.2.5-90052.4.3.1","mgrctl-zsh-completion":"5.2.5-90052.4.3.1","scap-security-guide-redhat":"0.1.79-90052.4.2.1","spacecmd":"5.2.6-90052.4.3.1","venv-salt-minion":"3006.0-90052.6.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1140-1.json"}},{"package":{"name":"scap-security-guide","ecosystem":"SUSE:Multi Linux Manager Tools Beta EL-9","purl":"pkg:rpm/suse/scap-security-guide&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20Beta%20EL-9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.79-90052.4.2.1"}]}],"ecosystem_specific":{"binaries":[{"golang-github-prometheus-node_exporter":"1.9.1-90052.3.2.1","mgrctl":"5.2.5-90052.4.3.1","mgrctl-bash-completion":"5.2.5-90052.4.3.1","mgrctl-zsh-completion":"5.2.5-90052.4.3.1","scap-security-guide-redhat":"0.1.79-90052.4.2.1","spacecmd":"5.2.6-90052.4.3.1","venv-salt-minion":"3006.0-90052.6.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1140-1.json"}},{"package":{"name":"spacecmd","ecosystem":"SUSE:Multi Linux Manager Tools Beta EL-9","purl":"pkg:rpm/suse/spacecmd&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20Beta%20EL-9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.6-90052.4.3.1"}]}],"ecosystem_specific":{"binaries":[{"golang-github-prometheus-node_exporter":"1.9.1-90052.3.2.1","mgrctl":"5.2.5-90052.4.3.1","mgrctl-bash-completion":"5.2.5-90052.4.3.1","mgrctl-zsh-completion":"5.2.5-90052.4.3.1","scap-security-guide-redhat":"0.1.79-90052.4.2.1","spacecmd":"5.2.6-90052.4.3.1","venv-salt-minion":"3006.0-90052.6.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1140-1.json"}},{"package":{"name":"uyuni-tools","ecosystem":"SUSE:Multi Linux Manager Tools Beta EL-9","purl":"pkg:rpm/suse/uyuni-tools&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20Beta%20EL-9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.5-90052.4.3.1"}]}],"ecosystem_specific":{"binaries":[{"golang-github-prometheus-node_exporter":"1.9.1-90052.3.2.1","mgrctl":"5.2.5-90052.4.3.1","mgrctl-bash-completion":"5.2.5-90052.4.3.1","mgrctl-zsh-completion":"5.2.5-90052.4.3.1","scap-security-guide-redhat":"0.1.79-90052.4.2.1","spacecmd":"5.2.6-90052.4.3.1","venv-salt-minion":"3006.0-90052.6.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1140-1.json"}},{"package":{"name":"venv-salt-minion","ecosystem":"SUSE:Multi Linux Manager Tools Beta EL-9","purl":"pkg:rpm/suse/venv-salt-minion&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20Beta%20EL-9"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-90052.6.3.1"}]}],"ecosystem_specific":{"binaries":[{"golang-github-prometheus-node_exporter":"1.9.1-90052.3.2.1","mgrctl":"5.2.5-90052.4.3.1","mgrctl-bash-completion":"5.2.5-90052.4.3.1","mgrctl-zsh-completion":"5.2.5-90052.4.3.1","scap-security-guide-redhat":"0.1.79-90052.4.2.1","spacecmd":"5.2.6-90052.4.3.1","venv-salt-minion":"3006.0-90052.6.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1140-1.json"}}],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261140-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1254256"},{"type":"REPORT","url":"https://bugzilla.suse.com/1254257"},{"type":"REPORT","url":"https://bugzilla.suse.com/1254903"},{"type":"REPORT","url":"https://bugzilla.suse.com/1254904"},{"type":"REPORT","url":"https://bugzilla.suse.com/1254905"},{"type":"REPORT","url":"https://bugzilla.suse.com/1257447"},{"type":"REPORT","url":"https://bugzilla.suse.com/1258015"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-62348"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-62349"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-67724"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-67725"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-67726"}]}