Skip to content
Heist/ feed
Back to feed
UnratedFix available

Security update 5.2.1 for Multi-Linux Manager Client Tools

Type: advisorySources: OSV

This update fixes the following issues: mgr-push was updated to version 5.2.5: - Removed token based authentication mechanism for package_push (bsc#1230949) spacecmd was updated to version 5.2.10: - Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) - Updated translation strings spacewalk-client-tools was updated to version 5.2.7:: - Updated translation strings uyuni-tools was updated to version 5.2.17: Security issues fixed: - CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) Bug fixes and changes: - Version 5.2.17-0: * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) - Version 5.2.16-0: * Reverted usage of sdnotify as it causes issues with Podman (bsc#1270399, bsc#1270398) - Version 5.2.15-0: * Added requirement for at least Podman v4.7.2 * Send READY notification to systemd only once healthy (bsc#1263823) - Version 5.2.14-0: * Include the server environment file in the backup (bsc#1268649) * Added mgradm commands for SSL CA and certificate rotation - Version 5.2.13-0: * Check and warn if CA certificate isn't marked as critical * Disable SSL on database during split (bsc#1267980) * Do not call uyuni-postgres-config.sh in mgradm (bsc#1267980) * Check backup status only after dat

Products
mgr-push, spacecmd, spacewalk-client-tools, uyuni-tools, venv-salt-minion
Affected versions
Not specified
Fixed versions
3006.0-120002.5.22.2, 5.2.10-120002.3.15.1, 5.2.17-120002.3.18.1, 5.2.5-120002.3.12.1, 5.2.7-120002.3.12.1
CVEs
CVE-2024-22195, CVE-2025-13836, CVE-2026-0864, CVE-2026-11940, CVE-2026-11972, CVE-2026-13346, CVE-2026-1502, CVE-2026-15308, CVE-2026-1703, CVE-2026-27459, CVE-2026-3219, CVE-2026-3276, CVE-2026-3446, CVE-2026-3479, CVE-2026-39821, CVE-2026-40475, CVE-2026-41066, CVE-2026-4360, CVE-2026-44431, CVE-2026-45409, CVE-2026-4786, CVE-2026-49825, CVE-2026-49853, CVE-2026-49854, CVE-2026-49855, CVE-2026-6019, CVE-2026-6100, CVE-2026-6357, CVE-2026-7210, CVE-2026-7774, CVE-2026-8328, CVE-2026-8643
Confirmed fixed CVEs
Not specified
Updated in this feed
28 Oct 2026, 10:03 UTC · Revision 1

Source evidence

Security update 5.2.1 for Multi-Linux Manager Client Tools

core-osv · Original source

Published 8 Oct 2026, 08:23 UTC

This update fixes the following issues: mgr-push was updated to version 5.2.5: - Removed token based authentication mechanism for package_push (bsc#1230949) spacecmd was updated to version 5.2.10: - Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) - Updated translation strings spacewalk-client-tools was updated to version 5.2.7:: - Updated translation strings uyuni-tools was updated to version 5.2.17: Security issues fixed: - CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) Bug fixes and changes: - Version 5.2.17-0: * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) - Version 5.2.16-0: * Reverted usage of sdnotify as it causes issues with Podman (bsc#1270399, bsc#1270398) - Version 5.2.15-0: * Added requirement for at least Podman v4.7.2 * Send READY notification to systemd only once healthy (bsc#1263823) - Version 5.2.14-0: * Include the server environment file in the backup (bsc#1268649) * Added mgradm commands for SSL CA and certificate rotation - Version 5.2.13-0: * Check and warn if CA certificate isn't marked as critical * Disable SSL on database during split (bsc#1267980) * Do not call uyuni-postgres-config.sh in mgradm (bsc#1267980) * Check backup status only after dat

osv:SUSE-SU-2026:4584-1

mgr-push

Fixed versions: 5.2.5-120002.3.12.1

spacecmd

Fixed versions: 5.2.10-120002.3.15.1

spacewalk-client-tools

Fixed versions: 5.2.7-120002.3.12.1

uyuni-tools

Fixed versions: 5.2.17-120002.3.18.1

venv-salt-minion

Fixed versions: 3006.0-120002.5.22.2

Complete source record
{
  "id": "6b582647465b860dc6391ab45f64d301712cb08404e0ab6fc0a8c48005cbb899",
  "url": "https://osv.dev/vulnerability/SUSE-SU-2026%3A4584-1",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "Security update 5.2.1 for Multi-Linux Manager Client Tools",
    "summary": "This update fixes the following issues: mgr-push was updated to version 5.2.5: - Removed token based authentication mechanism for package_push (bsc#1230949) spacecmd was updated to version 5.2.10: - Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) - Updated translation strings spacewalk-client-tools was updated to version 5.2.7:: - Updated translation strings uyuni-tools was updated to version 5.2.17: Security issues fixed: - CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) Bug fixes and changes: - Version 5.2.17-0: * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) - Version 5.2.16-0: * Reverted usage of sdnotify as it causes issues with Podman (bsc#1270399, bsc#1270398) - Version 5.2.15-0: * Added requirement for at least Podman v4.7.2 * Send READY notification to systemd only once healthy (bsc#1263823) - Version 5.2.14-0: * Include the server environment file in the backup (bsc#1268649) * Added mgradm commands for SSL CA and certificate rotation - Version 5.2.13-0: * Check and warn if CA certificate isn't marked as critical * Disable SSL on database during split (bsc#1267980) * Do not call uyuni-postgres-config.sh in mgradm (bsc#1267980) * Check backup status only after dat",
    "evidence": "osv:SUSE-SU-2026:4584-1",
    "products": [
      {
        "name": {
          "value": "mgr-push",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "5.2.5-120002.3.12.1",
            "evidence": "/affected/0/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "spacecmd",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "5.2.10-120002.3.15.1",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "spacewalk-client-tools",
          "evidence": "/affected/2/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "5.2.7-120002.3.12.1",
            "evidence": "/affected/2/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "uyuni-tools",
          "evidence": "/affected/3/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "5.2.17-120002.3.18.1",
            "evidence": "/affected/3/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "venv-salt-minion",
          "evidence": "/affected/4/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3006.0-120002.5.22.2",
            "evidence": "/affected/4/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "SUSE-SU-2026:4584-1",
      "aliases": [
        "SUSE-SU-2026:4584-1"
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "5.2.5-120002.3.12.1"
                }
              ]
            }
          ],
          "package": {
            "name": "mgr-push",
            "purl": "pkg:rpm/suse/mgr-push&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20SLE-12",
            "ecosystem": "SUSE:Multi Linux Manager Tools SLE-12"
          },
          "database_specific": {
            "source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4584-1.json"
          },
          "ecosystem_specific": {
            "binaries": [
              {
                "mgrctl": "5.2.17-120002.3.18.1",
                "mgr-push": "5.2.5-120002.3.12.1",
                "spacecmd": "5.2.10-120002.3.15.1",
                "mgrctl-lang": "5.2.17-120002.3.18.1",
                "python2-mgr-push": "5.2.5-120002.3.12.1",
                "venv-salt-minion": "3006.0-120002.5.22.2",
                "mgrctl-zsh-completion": "5.2.17-120002.3.18.1",
                "mgrctl-bash-completion": "5.2.17-120002.3.18.1",
                "spacewalk-client-tools": "5.2.7-120002.3.12.1",
                "python2-spacewalk-client-tools": "5.2.7-120002.3.12.1"
              }
            ]
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "5.2.10-120002.3.15.1"
                }
              ]
            }
          ],
          "package": {
            "name": "spacecmd",
            "purl": "pkg:rpm/suse/spacecmd&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20SLE-12",
            "ecosystem": "SUSE:Multi Linux Manager Tools SLE-12"
          },
          "database_specific": {
            "source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4584-1.json"
          },
          "ecosystem_specific": {
            "binaries": [
              {
                "mgrctl": "5.2.17-120002.3.18.1",
                "mgr-push": "5.2.5-120002.3.12.1",
                "spacecmd": "5.2.10-120002.3.15.1",
                "mgrctl-lang": "5.2.17-120002.3.18.1",
                "python2-mgr-push": "5.2.5-120002.3.12.1",
                "venv-salt-minion": "3006.0-120002.5.22.2",
                "mgrctl-zsh-completion": "5.2.17-120002.3.18.1",
                "mgrctl-bash-completion": "5.2.17-120002.3.18.1",
                "spacewalk-client-tools": "5.2.7-120002.3.12.1",
                "python2-spacewalk-client-tools": "5.2.7-120002.3.12.1"
              }
            ]
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "5.2.7-120002.3.12.1"
                }
              ]
            }
          ],
          "package": {
            "name": "spacewalk-client-tools",
            "purl": "pkg:rpm/suse/spacewalk-client-tools&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20SLE-12",
            "ecosystem": "SUSE:Multi Linux Manager Tools SLE-12"
          },
          "database_specific": {
            "source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4584-1.json"
          },
          "ecosystem_specific": {
            "binaries": [
              {
                "mgrctl": "5.2.17-120002.3.18.1",
                "mgr-push": "5.2.5-120002.3.12.1",
                "spacecmd": "5.2.10-120002.3.15.1",
                "mgrctl-lang": "5.2.17-120002.3.18.1",
                "python2-mgr-push": "5.2.5-120002.3.12.1",
                "venv-salt-minion": "3006.0-120002.5.22.2",
                "mgrctl-zsh-completion": "5.2.17-120002.3.18.1",
                "mgrctl-bash-completion": "5.2.17-120002.3.18.1",
                "spacewalk-client-tools": "5.2.7-120002.3.12.1",
                "python2-spacewalk-client-tools": "5.2.7-120002.3.12.1"
              }
            ]
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "5.2.17-120002.3.18.1"
                }
              ]
            }
          ],
          "package": {
            "name": "uyuni-tools",
            "purl": "pkg:rpm/suse/uyuni-tools&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20SLE-12",
            "ecosystem": "SUSE:Multi Linux Manager Tools SLE-12"
          },
          "database_specific": {
            "source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4584-1.json"
          },
          "ecosystem_specific": {
            "binaries": [
              {
                "mgrctl": "5.2.17-120002.3.18.1",
                "mgr-push": "5.2.5-120002.3.12.1",
                "spacecmd": "5.2.10-120002.3.15.1",
                "mgrctl-lang": "5.2.17-120002.3.18.1",
                "python2-mgr-push": "5.2.5-120002.3.12.1",
                "venv-salt-minion": "3006.0-120002.5.22.2",
                "mgrctl-zsh-completion": "5.2.17-120002.3.18.1",
                "mgrctl-bash-completion": "5.2.17-120002.3.18.1",
                "spacewalk-client-tools": "5.2.7-120002.3.12.1",
                "python2-spacewalk-client-tools": "5.2.7-120002.3.12.1"
              }
            ]
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "3006.0-120002.5.22.2"
                }
              ]
            }
          ],
          "package": {
            "name": "venv-salt-minion",
            "purl": "pkg:rpm/suse/venv-salt-minion&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20SLE-12",
            "ecosystem": "SUSE:Multi Linux Manager Tools SLE-12"
          },
          "database_specific": {
            "source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4584-1.json"
          },
          "ecosystem_specific": {
            "binaries": [
              {
                "mgrctl": "5.2.17-120002.3.18.1",
                "mgr-push": "5.2.5-120002.3.12.1",
                "spacecmd": "5.2.10-120002.3.15.1",
                "mgrctl-lang": "5.2.17-120002.3.18.1",
                "python2-mgr-push": "5.2.5-120002.3.12.1",
                "venv-salt-minion": "3006.0-120002.5.22.2",
                "mgrctl-zsh-completion": "5.2.17-120002.3.18.1",
                "mgrctl-bash-completion": "5.2.17-120002.3.18.1",
                "spacewalk-client-tools": "5.2.7-120002.3.12.1",
                "python2-spacewalk-client-tools": "5.2.7-120002.3.12.1"
              }
            ]
          }
        }
      ],
      "modified": "2026-10-08T19:15:04.953317343Z",
      "provider": "osv",
      "upstream": [
        "CVE-2024-22195",
        "CVE-2025-13836",
        "CVE-2026-0864",
        "CVE-2026-11940",
        "CVE-2026-11972",
        "CVE-2026-13346",
        "CVE-2026-1502",
        "CVE-2026-15308",
        "CVE-2026-1703",
        "CVE-2026-27459",
        "CVE-2026-3219",
        "CVE-2026-3276",
        "CVE-2026-3446",
        "CVE-2026-3479",
        "CVE-2026-39821",
        "CVE-2026-40475",
        "CVE-2026-41066",
        "CVE-2026-4360",
        "CVE-2026-44431",
        "CVE-2026-45409",
        "CVE-2026-4786",
        "CVE-2026-49825",
        "CVE-2026-49853",
        "CVE-2026-49854",
        "CVE-2026-49855",
        "CVE-2026-6019",
        "CVE-2026-6100",
        "CVE-2026-6357",
        "CVE-2026-7210",
        "CVE-2026-7774",
        "CVE-2026-8328",
        "CVE-2026-8643"
      ],
      "references": [
        "https://www.suse.com/support/update/announcement/2026/suse-su-20264584-1/",
        "https://bugzilla.suse.com/1218722",
        "https://bugzilla.suse.com/1230949",
        "https://bugzilla.suse.com/1252286",
        "https://bugzilla.suse.com/1254400",
        "https://bugzilla.suse.com/1257151",
        "https://bugzilla.suse.com/1257599",
        "https://bugzilla.suse.com/1259989",
        "https://bugzilla.suse.com/1261969",
        "https://bugzilla.suse.com/1261970",
        "https://bugzilla.suse.com/1262098",
        "https://bugzilla.suse.com/1262319",
        "https://bugzilla.suse.com/1262429",
        "https://bugzilla.suse.com/1262492",
        "https://bugzilla.suse.com/1262654",
        "https://bugzilla.suse.com/1262803",
        "https://bugzilla.suse.com/1263254",
        "https://bugzilla.suse.com/1263442",
        "https://bugzilla.suse.com/1263822",
        "https://bugzilla.suse.com/1263823",
        "https://bugzilla.suse.com/1264962",
        "https://bugzilla.suse.com/1265267",
        "https://bugzilla.suse.com/1265268",
        "https://bugzilla.suse.com/1265413",
        "https://bugzilla.suse.com/1266481",
        "https://bugzilla.suse.com/1266669",
        "https://bugzilla.suse.com/1267261",
        "https://bugzilla.suse.com/1267581",
        "https://bugzilla.suse.com/1267821",
        "https://bugzilla.suse.com/1267980",
        "https://bugzilla.suse.com/1268325",
        "https://bugzilla.suse.com/1268395",
        "https://bugzilla.suse.com/1268396",
        "https://bugzilla.suse.com/1268397",
        "https://bugzilla.suse.com/1268649",
        "https://bugzilla.suse.com/1268755",
        "https://bugzilla.suse.com/1268977",
        "https://bugzilla.suse.com/1269066",
        "https://bugzilla.suse.com/1269788",
        "https://bugzilla.suse.com/1269959",
        "https://bugzilla.suse.com/1270033",
        "https://bugzilla.suse.com/1270285",
        "https://bugzilla.suse.com/1270398",
        "https://bugzilla.suse.com/1270399",
        "https://bugzilla.suse.com/1271192",
        "https://bugzilla.suse.com/1271428",
        "https://bugzilla.suse.com/1271613",
        "https://bugzilla.suse.com/1273094",
        "https://bugzilla.suse.com/1273144",
        "https://www.suse.com/security/cve/CVE-2024-22195",
        "https://www.suse.com/security/cve/CVE-2025-13836",
        "https://www.suse.com/security/cve/CVE-2026-0864",
        "https://www.suse.com/security/cve/CVE-2026-11940",
        "https://www.suse.com/security/cve/CVE-2026-11972",
        "https://www.suse.com/security/cve/CVE-2026-13346",
        "https://www.suse.com/security/cve/CVE-2026-1502",
        "https://www.suse.com/security/cve/CVE-2026-15308",
        "https://www.suse.com/security/cve/CVE-2026-1703",
        "https://www.suse.com/security/cve/CVE-2026-27459",
        "https://www.suse.com/security/cve/CVE-2026-3219",
        "https://www.suse.com/security/cve/CVE-2026-3276",
        "https://www.suse.com/security/cve/CVE-2026-3446",
        "https://www.suse.com/security/cve/CVE-2026-3479",
        "https://www.suse.com/security/cve/CVE-2026-39821",
        "https://www.suse.com/security/cve/CVE-2026-40475",
        "https://www.suse.com/security/cve/CVE-2026-41066",
        "https://www.suse.com/security/cve/CVE-2026-4360",
        "https://www.suse.com/security/cve/CVE-2026-44431",
        "https://www.suse.com/security/cve/CVE-2026-45409",
        "https://www.suse.com/security/cve/CVE-2026-4786",
        "https://www.suse.com/security/cve/CVE-2026-49825",
        "https://www.suse.com/security/cve/CVE-2026-49853",
        "https://www.suse.com/security/cve/CVE-2026-49854",
        "https://www.suse.com/security/cve/CVE-2026-49855",
        "https://www.suse.com/security/cve/CVE-2026-6019",
        "https://www.suse.com/security/cve/CVE-2026-6100",
        "https://www.suse.com/security/cve/CVE-2026-6357",
        "https://www.suse.com/security/cve/CVE-2026-7210",
        "https://www.suse.com/security/cve/CVE-2026-7774",
        "https://www.suse.com/security/cve/CVE-2026-8328",
        "https://www.suse.com/security/cve/CVE-2026-8643"
      ]
    },
    "related_cves": [
      {
        "value": "CVE-2024-22195",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-13836",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-0864",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-11940",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-11972",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-13346",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-1502",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-15308",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-1703",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-27459",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-3219",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-3276",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-3446",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-3479",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-39821",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-40475",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-41066",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-4360",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-44431",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-45409",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-4786",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-49825",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-49853",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-49854",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-49855",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-6019",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-6100",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-6357",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-7210",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-7774",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-8328",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-8643",
        "evidence": "/upstream"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 104488,
  "published_at": "2026-10-08T08:23:05+00:00"
}