{"schema_version":"1.7.5","id":"SUSE-SU-2026:1149-1","published":"2026-03-30T13:44:05Z","modified":"2026-03-31T08:00:22.041756Z","related":["CVE-2025-62348","CVE-2025-62349","CVE-2025-67724","CVE-2025-67725","CVE-2025-67726"],"upstream":["CVE-2025-62348","CVE-2025-62349","CVE-2025-67724","CVE-2025-67725","CVE-2025-67726"],"summary":"Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools","details":"This update fixes the following issues:\n\nspacecmd:\n\n- Version 5.2.6-0\n  * Update translation strings\n\nvenv-salt-minion:\n\n- Fix the typo causing buiding EL9 bundle without binary dependencies\n- Backport security patches for Salt vendored tornado:\n  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)\n  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)\n  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)\n- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)\n- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)\n\n","affected":[{"package":{"name":"rhnlib","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerToolsBeta:Update","purl":"pkg:rpm/suse/rhnlib&distro=SUSE:EL-10:Update:Products:MultiLinuxManagerToolsBeta:Update"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.4-100052.3.3.1"}]}],"ecosystem_specific":{"binaries":[{"python3-rhnlib":"5.2.4-100052.3.3.1","python3-spacewalk-client-tools":"5.2.4-100052.3.3.1","python3-uyuni-common-libs":"5.2.3-100052.3.3.1","saltbundlepy-m2crypto":"0.45.1-100052.3.3.1","saltbundlepy-m2crypto-doc":"0.45.1-100052.3.3.1","spacecmd":"5.2.6-100052.3.3.1","spacewalk-client-tools":"5.2.4-100052.3.3.1","venv-salt-minion":"3006.0-100052.3.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1149-1.json"}},{"package":{"name":"saltbundlepy-m2crypto","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerToolsBeta:Update","purl":"pkg:rpm/suse/saltbundlepy-m2crypto&distro=SUSE:EL-10:Update:Products:MultiLinuxManagerToolsBeta:Update"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.45.1-100052.3.3.1"}]}],"ecosystem_specific":{"binaries":[{"python3-rhnlib":"5.2.4-100052.3.3.1","python3-spacewalk-client-tools":"5.2.4-100052.3.3.1","python3-uyuni-common-libs":"5.2.3-100052.3.3.1","saltbundlepy-m2crypto":"0.45.1-100052.3.3.1","saltbundlepy-m2crypto-doc":"0.45.1-100052.3.3.1","spacecmd":"5.2.6-100052.3.3.1","spacewalk-client-tools":"5.2.4-100052.3.3.1","venv-salt-minion":"3006.0-100052.3.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1149-1.json"}},{"package":{"name":"spacecmd","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerToolsBeta:Update","purl":"pkg:rpm/suse/spacecmd&distro=SUSE:EL-10:Update:Products:MultiLinuxManagerToolsBeta:Update"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.6-100052.3.3.1"}]}],"ecosystem_specific":{"binaries":[{"python3-rhnlib":"5.2.4-100052.3.3.1","python3-spacewalk-client-tools":"5.2.4-100052.3.3.1","python3-uyuni-common-libs":"5.2.3-100052.3.3.1","saltbundlepy-m2crypto":"0.45.1-100052.3.3.1","saltbundlepy-m2crypto-doc":"0.45.1-100052.3.3.1","spacecmd":"5.2.6-100052.3.3.1","spacewalk-client-tools":"5.2.4-100052.3.3.1","venv-salt-minion":"3006.0-100052.3.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1149-1.json"}},{"package":{"name":"spacewalk-client-tools","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerToolsBeta:Update","purl":"pkg:rpm/suse/spacewalk-client-tools&distro=SUSE:EL-10:Update:Products:MultiLinuxManagerToolsBeta:Update"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.4-100052.3.3.1"}]}],"ecosystem_specific":{"binaries":[{"python3-rhnlib":"5.2.4-100052.3.3.1","python3-spacewalk-client-tools":"5.2.4-100052.3.3.1","python3-uyuni-common-libs":"5.2.3-100052.3.3.1","saltbundlepy-m2crypto":"0.45.1-100052.3.3.1","saltbundlepy-m2crypto-doc":"0.45.1-100052.3.3.1","spacecmd":"5.2.6-100052.3.3.1","spacewalk-client-tools":"5.2.4-100052.3.3.1","venv-salt-minion":"3006.0-100052.3.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1149-1.json"}},{"package":{"name":"uyuni-common-libs","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerToolsBeta:Update","purl":"pkg:rpm/suse/uyuni-common-libs&distro=SUSE:EL-10:Update:Products:MultiLinuxManagerToolsBeta:Update"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.3-100052.3.3.1"}]}],"ecosystem_specific":{"binaries":[{"python3-rhnlib":"5.2.4-100052.3.3.1","python3-spacewalk-client-tools":"5.2.4-100052.3.3.1","python3-uyuni-common-libs":"5.2.3-100052.3.3.1","saltbundlepy-m2crypto":"0.45.1-100052.3.3.1","saltbundlepy-m2crypto-doc":"0.45.1-100052.3.3.1","spacecmd":"5.2.6-100052.3.3.1","spacewalk-client-tools":"5.2.4-100052.3.3.1","venv-salt-minion":"3006.0-100052.3.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1149-1.json"}},{"package":{"name":"venv-salt-minion","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerToolsBeta:Update","purl":"pkg:rpm/suse/venv-salt-minion&distro=SUSE:EL-10:Update:Products:MultiLinuxManagerToolsBeta:Update"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-100052.3.3.1"}]}],"ecosystem_specific":{"binaries":[{"python3-rhnlib":"5.2.4-100052.3.3.1","python3-spacewalk-client-tools":"5.2.4-100052.3.3.1","python3-uyuni-common-libs":"5.2.3-100052.3.3.1","saltbundlepy-m2crypto":"0.45.1-100052.3.3.1","saltbundlepy-m2crypto-doc":"0.45.1-100052.3.3.1","spacecmd":"5.2.6-100052.3.3.1","spacewalk-client-tools":"5.2.4-100052.3.3.1","venv-salt-minion":"3006.0-100052.3.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1149-1.json"}},{"package":{"name":"spacecmd","ecosystem":"SUSE:Multi Linux Manager Tools Beta EL-10","purl":"pkg:rpm/suse/spacecmd&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20Beta%20EL-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.6-100052.3.3.1"}]}],"ecosystem_specific":{"binaries":[{"spacecmd":"5.2.6-100052.3.3.1","venv-salt-minion":"3006.0-100052.3.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1149-1.json"}},{"package":{"name":"venv-salt-minion","ecosystem":"SUSE:Multi Linux Manager Tools Beta EL-10","purl":"pkg:rpm/suse/venv-salt-minion&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20Beta%20EL-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-100052.3.3.1"}]}],"ecosystem_specific":{"binaries":[{"spacecmd":"5.2.6-100052.3.3.1","venv-salt-minion":"3006.0-100052.3.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1149-1.json"}}],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261149-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1254256"},{"type":"REPORT","url":"https://bugzilla.suse.com/1254257"},{"type":"REPORT","url":"https://bugzilla.suse.com/1254903"},{"type":"REPORT","url":"https://bugzilla.suse.com/1254904"},{"type":"REPORT","url":"https://bugzilla.suse.com/1254905"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-62348"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-62349"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-67724"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-67725"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-67726"}]}