SUSE-SU-2026:1142-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2026/suse-su-20261142-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1142-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2026:1142-1
Upstream
  • CVE-2025-62348
  • CVE-2025-62349
Related
Published
2026-03-30T09:16:26Z
Modified
2026-03-31T08:00:24.806787Z
Summary
Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools
Details

This update fixes the following issues:

mgr-push:

  • Version 5.2.3-0
    • Disable build for SLES 16

rhnlib:

  • Version 5.2.4-0
    • Disable build for SLES 16

spacecmd:

  • Version 5.2.6-0
    • Update translation strings

spacewalk-client-tools:

  • Version 5.2.4-0
    • Disable build for SLES 16

uyuni-common-libs:

  • Version 5.2.3-0
    • Disable build for SLES 16

venv-salt-minion:

  • Fix the typo causing buiding EL9 bundle without binary dependencies
  • Backport security patches for Salt vendored tornado:
    • CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
    • CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
    • CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
  • CVE-2025-62349: Add minimumauthversion to enforce security (bsc#1254257)
  • CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
References

Affected packages

SUSE:Multi Linux Manager Tools Beta RES-7
golang-github-prometheus-node_exporter

Package

Name
golang-github-prometheus-node_exporter
Purl
pkg:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20Beta%20RES-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.9.1-70052.5.2.1

Ecosystem specific 

{
    "binaries": [
        {
            "mgr-push": "5.2.3-70052.3.3.1",
            "golang-github-prometheus-node_exporter": "1.9.1-70052.5.2.1",
            "python2-mgr-push": "5.2.3-70052.3.3.1",
            "spacewalk-client-tools": "5.2.4-70052.3.3.1",
            "spacecmd": "5.2.6-70052.3.3.1",
            "python2-uyuni-common-libs": "5.2.3-70052.3.3.1",
            "python2-spacewalk-client-tools": "5.2.4-70052.3.3.1",
            "python2-rhnlib": "5.2.4-70052.3.3.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1142-1.json"
mgr-push

Package

Name
mgr-push
Purl
pkg:rpm/suse/mgr-push&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20Beta%20RES-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.2.3-70052.3.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "mgr-push": "5.2.3-70052.3.3.1",
            "golang-github-prometheus-node_exporter": "1.9.1-70052.5.2.1",
            "python2-mgr-push": "5.2.3-70052.3.3.1",
            "spacewalk-client-tools": "5.2.4-70052.3.3.1",
            "spacecmd": "5.2.6-70052.3.3.1",
            "python2-uyuni-common-libs": "5.2.3-70052.3.3.1",
            "python2-spacewalk-client-tools": "5.2.4-70052.3.3.1",
            "python2-rhnlib": "5.2.4-70052.3.3.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1142-1.json"
rhnlib

Package

Name
rhnlib
Purl
pkg:rpm/suse/rhnlib&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20Beta%20RES-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.2.4-70052.3.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "mgr-push": "5.2.3-70052.3.3.1",
            "golang-github-prometheus-node_exporter": "1.9.1-70052.5.2.1",
            "python2-mgr-push": "5.2.3-70052.3.3.1",
            "spacewalk-client-tools": "5.2.4-70052.3.3.1",
            "spacecmd": "5.2.6-70052.3.3.1",
            "python2-uyuni-common-libs": "5.2.3-70052.3.3.1",
            "python2-spacewalk-client-tools": "5.2.4-70052.3.3.1",
            "python2-rhnlib": "5.2.4-70052.3.3.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1142-1.json"
spacecmd

Package

Name
spacecmd
Purl
pkg:rpm/suse/spacecmd&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20Beta%20RES-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.2.6-70052.3.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "mgr-push": "5.2.3-70052.3.3.1",
            "golang-github-prometheus-node_exporter": "1.9.1-70052.5.2.1",
            "python2-mgr-push": "5.2.3-70052.3.3.1",
            "spacewalk-client-tools": "5.2.4-70052.3.3.1",
            "spacecmd": "5.2.6-70052.3.3.1",
            "python2-uyuni-common-libs": "5.2.3-70052.3.3.1",
            "python2-spacewalk-client-tools": "5.2.4-70052.3.3.1",
            "python2-rhnlib": "5.2.4-70052.3.3.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1142-1.json"
spacewalk-client-tools

Package

Name
spacewalk-client-tools
Purl
pkg:rpm/suse/spacewalk-client-tools&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20Beta%20RES-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.2.4-70052.3.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "mgr-push": "5.2.3-70052.3.3.1",
            "golang-github-prometheus-node_exporter": "1.9.1-70052.5.2.1",
            "python2-mgr-push": "5.2.3-70052.3.3.1",
            "spacewalk-client-tools": "5.2.4-70052.3.3.1",
            "spacecmd": "5.2.6-70052.3.3.1",
            "python2-uyuni-common-libs": "5.2.3-70052.3.3.1",
            "python2-spacewalk-client-tools": "5.2.4-70052.3.3.1",
            "python2-rhnlib": "5.2.4-70052.3.3.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1142-1.json"
uyuni-common-libs

Package

Name
uyuni-common-libs
Purl
pkg:rpm/suse/uyuni-common-libs&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20Beta%20RES-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.2.3-70052.3.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "mgr-push": "5.2.3-70052.3.3.1",
            "golang-github-prometheus-node_exporter": "1.9.1-70052.5.2.1",
            "python2-mgr-push": "5.2.3-70052.3.3.1",
            "spacewalk-client-tools": "5.2.4-70052.3.3.1",
            "spacecmd": "5.2.6-70052.3.3.1",
            "python2-uyuni-common-libs": "5.2.3-70052.3.3.1",
            "python2-spacewalk-client-tools": "5.2.4-70052.3.3.1",
            "python2-rhnlib": "5.2.4-70052.3.3.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1142-1.json"
SUSE:RES-7:Update:Products:MultiLinuxManagerToolsBeta:Update
golang-github-prometheus-node_exporter

Package

Name
golang-github-prometheus-node_exporter
Purl
pkg:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerToolsBeta:Update

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.9.1-70052.5.2.1

Ecosystem specific 

{
    "binaries": [
        {
            "mgr-push": "5.2.3-70052.3.3.1",
            "golang-github-prometheus-node_exporter": "1.9.1-70052.5.2.1",
            "python2-mgr-push": "5.2.3-70052.3.3.1",
            "spacewalk-client-tools": "5.2.4-70052.3.3.1",
            "saltbundlepy-m2crypto-doc": "0.45.1-70052.4.3.1",
            "python2-uyuni-common-libs": "5.2.3-70052.3.3.1",
            "spacecmd": "5.2.6-70052.3.3.1",
            "python2-rhnlib": "5.2.4-70052.3.3.1",
            "python2-spacewalk-client-tools": "5.2.4-70052.3.3.1",
            "venv-salt-minion": "3006.0-70052.5.3.1",
            "saltbundlepy-m2crypto": "0.45.1-70052.4.3.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1142-1.json"
mgr-push

Package

Name
mgr-push
Purl
pkg:rpm/suse/mgr-push&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerToolsBeta:Update

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.2.3-70052.3.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "mgr-push": "5.2.3-70052.3.3.1",
            "golang-github-prometheus-node_exporter": "1.9.1-70052.5.2.1",
            "python2-mgr-push": "5.2.3-70052.3.3.1",
            "spacewalk-client-tools": "5.2.4-70052.3.3.1",
            "saltbundlepy-m2crypto-doc": "0.45.1-70052.4.3.1",
            "python2-uyuni-common-libs": "5.2.3-70052.3.3.1",
            "spacecmd": "5.2.6-70052.3.3.1",
            "python2-rhnlib": "5.2.4-70052.3.3.1",
            "python2-spacewalk-client-tools": "5.2.4-70052.3.3.1",
            "venv-salt-minion": "3006.0-70052.5.3.1",
            "saltbundlepy-m2crypto": "0.45.1-70052.4.3.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1142-1.json"
rhnlib

Package

Name
rhnlib
Purl
pkg:rpm/suse/rhnlib&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerToolsBeta:Update

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.2.4-70052.3.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "mgr-push": "5.2.3-70052.3.3.1",
            "golang-github-prometheus-node_exporter": "1.9.1-70052.5.2.1",
            "python2-mgr-push": "5.2.3-70052.3.3.1",
            "spacewalk-client-tools": "5.2.4-70052.3.3.1",
            "saltbundlepy-m2crypto-doc": "0.45.1-70052.4.3.1",
            "python2-uyuni-common-libs": "5.2.3-70052.3.3.1",
            "spacecmd": "5.2.6-70052.3.3.1",
            "python2-rhnlib": "5.2.4-70052.3.3.1",
            "python2-spacewalk-client-tools": "5.2.4-70052.3.3.1",
            "venv-salt-minion": "3006.0-70052.5.3.1",
            "saltbundlepy-m2crypto": "0.45.1-70052.4.3.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1142-1.json"
saltbundlepy-m2crypto

Package

Name
saltbundlepy-m2crypto
Purl
pkg:rpm/suse/saltbundlepy-m2crypto&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerToolsBeta:Update

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.45.1-70052.4.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "mgr-push": "5.2.3-70052.3.3.1",
            "golang-github-prometheus-node_exporter": "1.9.1-70052.5.2.1",
            "python2-mgr-push": "5.2.3-70052.3.3.1",
            "spacewalk-client-tools": "5.2.4-70052.3.3.1",
            "saltbundlepy-m2crypto-doc": "0.45.1-70052.4.3.1",
            "python2-uyuni-common-libs": "5.2.3-70052.3.3.1",
            "spacecmd": "5.2.6-70052.3.3.1",
            "python2-rhnlib": "5.2.4-70052.3.3.1",
            "python2-spacewalk-client-tools": "5.2.4-70052.3.3.1",
            "venv-salt-minion": "3006.0-70052.5.3.1",
            "saltbundlepy-m2crypto": "0.45.1-70052.4.3.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1142-1.json"
spacecmd

Package

Name
spacecmd
Purl
pkg:rpm/suse/spacecmd&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerToolsBeta:Update

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.2.6-70052.3.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "mgr-push": "5.2.3-70052.3.3.1",
            "golang-github-prometheus-node_exporter": "1.9.1-70052.5.2.1",
            "python2-mgr-push": "5.2.3-70052.3.3.1",
            "spacewalk-client-tools": "5.2.4-70052.3.3.1",
            "saltbundlepy-m2crypto-doc": "0.45.1-70052.4.3.1",
            "python2-uyuni-common-libs": "5.2.3-70052.3.3.1",
            "spacecmd": "5.2.6-70052.3.3.1",
            "python2-rhnlib": "5.2.4-70052.3.3.1",
            "python2-spacewalk-client-tools": "5.2.4-70052.3.3.1",
            "venv-salt-minion": "3006.0-70052.5.3.1",
            "saltbundlepy-m2crypto": "0.45.1-70052.4.3.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1142-1.json"
spacewalk-client-tools

Package

Name
spacewalk-client-tools
Purl
pkg:rpm/suse/spacewalk-client-tools&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerToolsBeta:Update

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.2.4-70052.3.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "mgr-push": "5.2.3-70052.3.3.1",
            "golang-github-prometheus-node_exporter": "1.9.1-70052.5.2.1",
            "python2-mgr-push": "5.2.3-70052.3.3.1",
            "spacewalk-client-tools": "5.2.4-70052.3.3.1",
            "saltbundlepy-m2crypto-doc": "0.45.1-70052.4.3.1",
            "python2-uyuni-common-libs": "5.2.3-70052.3.3.1",
            "spacecmd": "5.2.6-70052.3.3.1",
            "python2-rhnlib": "5.2.4-70052.3.3.1",
            "python2-spacewalk-client-tools": "5.2.4-70052.3.3.1",
            "venv-salt-minion": "3006.0-70052.5.3.1",
            "saltbundlepy-m2crypto": "0.45.1-70052.4.3.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1142-1.json"
uyuni-common-libs

Package

Name
uyuni-common-libs
Purl
pkg:rpm/suse/uyuni-common-libs&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerToolsBeta:Update

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.2.3-70052.3.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "mgr-push": "5.2.3-70052.3.3.1",
            "golang-github-prometheus-node_exporter": "1.9.1-70052.5.2.1",
            "python2-mgr-push": "5.2.3-70052.3.3.1",
            "spacewalk-client-tools": "5.2.4-70052.3.3.1",
            "saltbundlepy-m2crypto-doc": "0.45.1-70052.4.3.1",
            "python2-uyuni-common-libs": "5.2.3-70052.3.3.1",
            "spacecmd": "5.2.6-70052.3.3.1",
            "python2-rhnlib": "5.2.4-70052.3.3.1",
            "python2-spacewalk-client-tools": "5.2.4-70052.3.3.1",
            "venv-salt-minion": "3006.0-70052.5.3.1",
            "saltbundlepy-m2crypto": "0.45.1-70052.4.3.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1142-1.json"
venv-salt-minion

Package

Name
venv-salt-minion
Purl
pkg:rpm/suse/venv-salt-minion&distro=SUSE:RES-7:Update:Products:MultiLinuxManagerToolsBeta:Update

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3006.0-70052.5.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "mgr-push": "5.2.3-70052.3.3.1",
            "golang-github-prometheus-node_exporter": "1.9.1-70052.5.2.1",
            "python2-mgr-push": "5.2.3-70052.3.3.1",
            "spacewalk-client-tools": "5.2.4-70052.3.3.1",
            "saltbundlepy-m2crypto-doc": "0.45.1-70052.4.3.1",
            "python2-uyuni-common-libs": "5.2.3-70052.3.3.1",
            "spacecmd": "5.2.6-70052.3.3.1",
            "python2-rhnlib": "5.2.4-70052.3.3.1",
            "python2-spacewalk-client-tools": "5.2.4-70052.3.3.1",
            "venv-salt-minion": "3006.0-70052.5.3.1",
            "saltbundlepy-m2crypto": "0.45.1-70052.4.3.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1142-1.json"