SUSE-SU-2026:1149-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2026/suse-su-20261149-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1149-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2026:1149-1
Upstream
CVE (5)
Related
CVE (5)
Published
2026-03-30T13:44:05Z
Modified
2026-03-31T08:00:21Z
Summary
Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools
Details

This update fixes the following issues:

spacecmd:

  • Version 5.2.6-0
    • Update translation strings

venv-salt-minion:

  • Fix the typo causing buiding EL9 bundle without binary dependencies
  • Backport security patches for Salt vendored tornado:
    • CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
    • CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
    • CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
  • CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
  • CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
References

Affected packages

SUSE:EL-10:Update:Products:MultiLinuxManagerToolsBeta:Update
rhnlib

Package

Name
rhnlib
Purl
pkg:rpm/suse/rhnlib&distro=SUSE:EL-10:Update:Products:MultiLinuxManagerToolsBeta:Update

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.2.4-100052.3.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "python3-rhnlib": "5.2.4-100052.3.3.1",
            "python3-spacewalk-client-tools": "5.2.4-100052.3.3.1",
            "python3-uyuni-common-libs": "5.2.3-100052.3.3.1",
            "saltbundlepy-m2crypto": "0.45.1-100052.3.3.1",
            "saltbundlepy-m2crypto-doc": "0.45.1-100052.3.3.1",
            "spacecmd": "5.2.6-100052.3.3.1",
            "spacewalk-client-tools": "5.2.4-100052.3.3.1",
            "venv-salt-minion": "3006.0-100052.3.3.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1149-1.json"
saltbundlepy-m2crypto

Package

Name
saltbundlepy-m2crypto
Purl
pkg:rpm/suse/saltbundlepy-m2crypto&distro=SUSE:EL-10:Update:Products:MultiLinuxManagerToolsBeta:Update

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.45.1-100052.3.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "python3-rhnlib": "5.2.4-100052.3.3.1",
            "python3-spacewalk-client-tools": "5.2.4-100052.3.3.1",
            "python3-uyuni-common-libs": "5.2.3-100052.3.3.1",
            "saltbundlepy-m2crypto": "0.45.1-100052.3.3.1",
            "saltbundlepy-m2crypto-doc": "0.45.1-100052.3.3.1",
            "spacecmd": "5.2.6-100052.3.3.1",
            "spacewalk-client-tools": "5.2.4-100052.3.3.1",
            "venv-salt-minion": "3006.0-100052.3.3.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1149-1.json"
spacecmd

Package

Name
spacecmd
Purl
pkg:rpm/suse/spacecmd&distro=SUSE:EL-10:Update:Products:MultiLinuxManagerToolsBeta:Update

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.2.6-100052.3.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "python3-rhnlib": "5.2.4-100052.3.3.1",
            "python3-spacewalk-client-tools": "5.2.4-100052.3.3.1",
            "python3-uyuni-common-libs": "5.2.3-100052.3.3.1",
            "saltbundlepy-m2crypto": "0.45.1-100052.3.3.1",
            "saltbundlepy-m2crypto-doc": "0.45.1-100052.3.3.1",
            "spacecmd": "5.2.6-100052.3.3.1",
            "spacewalk-client-tools": "5.2.4-100052.3.3.1",
            "venv-salt-minion": "3006.0-100052.3.3.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1149-1.json"
spacewalk-client-tools

Package

Name
spacewalk-client-tools
Purl
pkg:rpm/suse/spacewalk-client-tools&distro=SUSE:EL-10:Update:Products:MultiLinuxManagerToolsBeta:Update

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.2.4-100052.3.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "python3-rhnlib": "5.2.4-100052.3.3.1",
            "python3-spacewalk-client-tools": "5.2.4-100052.3.3.1",
            "python3-uyuni-common-libs": "5.2.3-100052.3.3.1",
            "saltbundlepy-m2crypto": "0.45.1-100052.3.3.1",
            "saltbundlepy-m2crypto-doc": "0.45.1-100052.3.3.1",
            "spacecmd": "5.2.6-100052.3.3.1",
            "spacewalk-client-tools": "5.2.4-100052.3.3.1",
            "venv-salt-minion": "3006.0-100052.3.3.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1149-1.json"
uyuni-common-libs

Package

Name
uyuni-common-libs
Purl
pkg:rpm/suse/uyuni-common-libs&distro=SUSE:EL-10:Update:Products:MultiLinuxManagerToolsBeta:Update

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.2.3-100052.3.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "python3-rhnlib": "5.2.4-100052.3.3.1",
            "python3-spacewalk-client-tools": "5.2.4-100052.3.3.1",
            "python3-uyuni-common-libs": "5.2.3-100052.3.3.1",
            "saltbundlepy-m2crypto": "0.45.1-100052.3.3.1",
            "saltbundlepy-m2crypto-doc": "0.45.1-100052.3.3.1",
            "spacecmd": "5.2.6-100052.3.3.1",
            "spacewalk-client-tools": "5.2.4-100052.3.3.1",
            "venv-salt-minion": "3006.0-100052.3.3.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1149-1.json"
venv-salt-minion

Package

Name
venv-salt-minion
Purl
pkg:rpm/suse/venv-salt-minion&distro=SUSE:EL-10:Update:Products:MultiLinuxManagerToolsBeta:Update

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3006.0-100052.3.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "python3-rhnlib": "5.2.4-100052.3.3.1",
            "python3-spacewalk-client-tools": "5.2.4-100052.3.3.1",
            "python3-uyuni-common-libs": "5.2.3-100052.3.3.1",
            "saltbundlepy-m2crypto": "0.45.1-100052.3.3.1",
            "saltbundlepy-m2crypto-doc": "0.45.1-100052.3.3.1",
            "spacecmd": "5.2.6-100052.3.3.1",
            "spacewalk-client-tools": "5.2.4-100052.3.3.1",
            "venv-salt-minion": "3006.0-100052.3.3.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1149-1.json"
SUSE:Multi Linux Manager Tools Beta EL-10
spacecmd

Package

Name
spacecmd
Purl
pkg:rpm/suse/spacecmd&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20Beta%20EL-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.2.6-100052.3.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "spacecmd": "5.2.6-100052.3.3.1",
            "venv-salt-minion": "3006.0-100052.3.3.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1149-1.json"
venv-salt-minion

Package

Name
venv-salt-minion
Purl
pkg:rpm/suse/venv-salt-minion&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20Beta%20EL-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3006.0-100052.3.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "spacecmd": "5.2.6-100052.3.3.1",
            "venv-salt-minion": "3006.0-100052.3.3.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1149-1.json"