{"affected":[{"ecosystem_specific":{"binaries":[{"dracut-saltboot":"1.0.0-150000.1.62.1","grafana":"11.5.10-150000.1.87.1","mgr-push":"5.0.3-150000.1.30.1","mgrctl":"0.1.37-150000.1.27.1","mgrctl-bash-completion":"0.1.37-150000.1.27.1","mgrctl-lang":"0.1.37-150000.1.27.1","mgrctl-zsh-completion":"0.1.37-150000.1.27.1","python3-mgr-push":"5.0.3-150000.1.30.1","python3-rhnlib":"5.0.6-150000.3.49.1","spacecmd":"5.0.14-150000.3.139.1","supportutils-plugin-susemanager-client":"5.0.5-150000.3.30.1"}]},"package":{"ecosystem":"SUSE:Manager Client Tools 15","name":"dracut-saltboot","purl":"pkg:rpm/suse/dracut-saltboot&distro=SUSE%20Manager%20Client%20Tools%2015"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.0.0-150000.1.62.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"dracut-saltboot":"1.0.0-150000.1.62.1","grafana":"11.5.10-150000.1.87.1","mgr-push":"5.0.3-150000.1.30.1","mgrctl":"0.1.37-150000.1.27.1","mgrctl-bash-completion":"0.1.37-150000.1.27.1","mgrctl-lang":"0.1.37-150000.1.27.1","mgrctl-zsh-completion":"0.1.37-150000.1.27.1","python3-mgr-push":"5.0.3-150000.1.30.1","python3-rhnlib":"5.0.6-150000.3.49.1","spacecmd":"5.0.14-150000.3.139.1","supportutils-plugin-susemanager-client":"5.0.5-150000.3.30.1"}]},"package":{"ecosystem":"SUSE:Manager Client Tools 15","name":"grafana","purl":"pkg:rpm/suse/grafana&distro=SUSE%20Manager%20Client%20Tools%2015"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"11.5.10-150000.1.87.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"dracut-saltboot":"1.0.0-150000.1.62.1","grafana":"11.5.10-150000.1.87.1","mgr-push":"5.0.3-150000.1.30.1","mgrctl":"0.1.37-150000.1.27.1","mgrctl-bash-completion":"0.1.37-150000.1.27.1","mgrctl-lang":"0.1.37-150000.1.27.1","mgrctl-zsh-completion":"0.1.37-150000.1.27.1","python3-mgr-push":"5.0.3-150000.1.30.1","python3-rhnlib":"5.0.6-150000.3.49.1","spacecmd":"5.0.14-150000.3.139.1","supportutils-plugin-susemanager-client":"5.0.5-150000.3.30.1"}]},"package":{"ecosystem":"SUSE:Manager Client Tools 15","name":"mgr-push","purl":"pkg:rpm/suse/mgr-push&distro=SUSE%20Manager%20Client%20Tools%2015"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"5.0.3-150000.1.30.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"dracut-saltboot":"1.0.0-150000.1.62.1","grafana":"11.5.10-150000.1.87.1","mgr-push":"5.0.3-150000.1.30.1","mgrctl":"0.1.37-150000.1.27.1","mgrctl-bash-completion":"0.1.37-150000.1.27.1","mgrctl-lang":"0.1.37-150000.1.27.1","mgrctl-zsh-completion":"0.1.37-150000.1.27.1","python3-mgr-push":"5.0.3-150000.1.30.1","python3-rhnlib":"5.0.6-150000.3.49.1","spacecmd":"5.0.14-150000.3.139.1","supportutils-plugin-susemanager-client":"5.0.5-150000.3.30.1"}]},"package":{"ecosystem":"SUSE:Manager Client Tools 15","name":"rhnlib","purl":"pkg:rpm/suse/rhnlib&distro=SUSE%20Manager%20Client%20Tools%2015"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"5.0.6-150000.3.49.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"dracut-saltboot":"1.0.0-150000.1.62.1","grafana":"11.5.10-150000.1.87.1","mgr-push":"5.0.3-150000.1.30.1","mgrctl":"0.1.37-150000.1.27.1","mgrctl-bash-completion":"0.1.37-150000.1.27.1","mgrctl-lang":"0.1.37-150000.1.27.1","mgrctl-zsh-completion":"0.1.37-150000.1.27.1","python3-mgr-push":"5.0.3-150000.1.30.1","python3-rhnlib":"5.0.6-150000.3.49.1","spacecmd":"5.0.14-150000.3.139.1","supportutils-plugin-susemanager-client":"5.0.5-150000.3.30.1"}]},"package":{"ecosystem":"SUSE:Manager Client Tools 15","name":"spacecmd","purl":"pkg:rpm/suse/spacecmd&distro=SUSE%20Manager%20Client%20Tools%2015"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"5.0.14-150000.3.139.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"dracut-saltboot":"1.0.0-150000.1.62.1","grafana":"11.5.10-150000.1.87.1","mgr-push":"5.0.3-150000.1.30.1","mgrctl":"0.1.37-150000.1.27.1","mgrctl-bash-completion":"0.1.37-150000.1.27.1","mgrctl-lang":"0.1.37-150000.1.27.1","mgrctl-zsh-completion":"0.1.37-150000.1.27.1","python3-mgr-push":"5.0.3-150000.1.30.1","python3-rhnlib":"5.0.6-150000.3.49.1","spacecmd":"5.0.14-150000.3.139.1","supportutils-plugin-susemanager-client":"5.0.5-150000.3.30.1"}]},"package":{"ecosystem":"SUSE:Manager Client Tools 15","name":"supportutils-plugin-susemanager-client","purl":"pkg:rpm/suse/supportutils-plugin-susemanager-client&distro=SUSE%20Manager%20Client%20Tools%2015"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"5.0.5-150000.3.30.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"dracut-saltboot":"1.0.0-150000.1.62.1","grafana":"11.5.10-150000.1.87.1","mgr-push":"5.0.3-150000.1.30.1","mgrctl":"0.1.37-150000.1.27.1","mgrctl-bash-completion":"0.1.37-150000.1.27.1","mgrctl-lang":"0.1.37-150000.1.27.1","mgrctl-zsh-completion":"0.1.37-150000.1.27.1","python3-mgr-push":"5.0.3-150000.1.30.1","python3-rhnlib":"5.0.6-150000.3.49.1","spacecmd":"5.0.14-150000.3.139.1","supportutils-plugin-susemanager-client":"5.0.5-150000.3.30.1"}]},"package":{"ecosystem":"SUSE:Manager Client Tools 15","name":"uyuni-tools","purl":"pkg:rpm/suse/uyuni-tools&distro=SUSE%20Manager%20Client%20Tools%2015"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"0.1.37-150000.1.27.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"dracut-saltboot":"1.0.0-150000.1.62.1","mgrctl":"0.1.37-150000.1.27.1","mgrctl-bash-completion":"0.1.37-150000.1.27.1","mgrctl-lang":"0.1.37-150000.1.27.1","mgrctl-zsh-completion":"0.1.37-150000.1.27.1"}]},"package":{"ecosystem":"SUSE:Manager Client Tools for SLE Micro 5","name":"dracut-saltboot","purl":"pkg:rpm/suse/dracut-saltboot&distro=SUSE%20Manager%20Client%20Tools%20for%20SLE%20Micro%205"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.0.0-150000.1.62.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"dracut-saltboot":"1.0.0-150000.1.62.1","mgrctl":"0.1.37-150000.1.27.1","mgrctl-bash-completion":"0.1.37-150000.1.27.1","mgrctl-lang":"0.1.37-150000.1.27.1","mgrctl-zsh-completion":"0.1.37-150000.1.27.1"}]},"package":{"ecosystem":"SUSE:Manager Client Tools for SLE Micro 5","name":"uyuni-tools","purl":"pkg:rpm/suse/uyuni-tools&distro=SUSE%20Manager%20Client%20Tools%20for%20SLE%20Micro%205"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"0.1.37-150000.1.27.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"dracut-saltboot":"1.0.0-150000.1.62.1","spacecmd":"5.0.14-150000.3.139.1","supportutils-plugin-susemanager-client":"5.0.5-150000.3.30.1"}]},"package":{"ecosystem":"openSUSE:Leap 15.6","name":"dracut-saltboot","purl":"pkg:rpm/opensuse/dracut-saltboot&distro=openSUSE%20Leap%2015.6"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.0.0-150000.1.62.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"dracut-saltboot":"1.0.0-150000.1.62.1","spacecmd":"5.0.14-150000.3.139.1","supportutils-plugin-susemanager-client":"5.0.5-150000.3.30.1"}]},"package":{"ecosystem":"openSUSE:Leap 15.6","name":"spacecmd","purl":"pkg:rpm/opensuse/spacecmd&distro=openSUSE%20Leap%2015.6"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"5.0.14-150000.3.139.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"dracut-saltboot":"1.0.0-150000.1.62.1","spacecmd":"5.0.14-150000.3.139.1","supportutils-plugin-susemanager-client":"5.0.5-150000.3.30.1"}]},"package":{"ecosystem":"openSUSE:Leap 15.6","name":"supportutils-plugin-susemanager-client","purl":"pkg:rpm/opensuse/supportutils-plugin-susemanager-client&distro=openSUSE%20Leap%2015.6"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"5.0.5-150000.3.30.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update fixes the following issues:\n\ndracut-saltboot:\n\n- Update to version 1.0.0\n  * Reboot on salt key timeout (bsc#1237495)\n  * Fixed parsing files with space in the name (bsc#1252100)\n\ngrafana was updated from version 11.5.5 to 11.5.10:\n\n- Security issues fixed:\n\n  * CVE-2025-47911: Fix parsing HTML documents (bsc#1251454)\n  * CVE-2025-58190: Fix excessive memory consumption (bsc#1251657)\n  * CVE-2025-64751: Drop experimental implementation of authorization Zanzana server/client\n                    (bsc#1254113)\n  * CVE-2025-11065: Fixed sensitive information leak in logs (version 11.5.9) (bsc#1250616)\n  * CVE-2025-6023: Fixed cross-site-scripting via scripted dashboards (version 11.5.7) (bsc#1246735)\n  * CVE-2025-6197: Fixed open redirect in organization switching (version 11.5.7) (bsc#1246736)\n  * CVE-2025-3415: Fixed exposure of DingDing alerting integration URL to Viewer level users (version 11.5.6)\n                   (bsc#1245302)\n\n- Other changes, new features and bugs fixed:\n    \n  * Version 11.5.10:\n    + Update to Go 1.25\n    + Update to golang.org/x/net v0.45.0\n    + Auth: Fix render user OAuth passthrough\n    + LDAP Authentication: Fix URL to propagate username context as parameter\n\n  * Version 11.5.9:\n    + Auditing: Document new options for recording datasource query request/response body.\n    + Login: Fixed redirection after login when Grafana is served from subpath.\n\n  * Version 11.5.7:\n    + Azure: Fixed legend formatting and resource name determination in template variable queries.\n\nmgr-push:\n\n- Version 5.0.3-0\n  * Fixed syntax error in changelog\n\nrhnlib:\n\n- Version 5.0.6-0\n  * Use more secure defusedxml parser (bsc#1227577)\n\nspacecmd:\n\n- Version 5.0.14-0\n  * Fixed installation of python lib files on Ubuntu 24.04 (bsc#1246586)\n  * Use JSON instead of pickle for spacecmd cache (bsc#1227579)\n  * Make spacecmd to work with Python 3.12 and higher\n  * Call print statements properly in Python 3\n\nuyuni-tools:\n\n- Version 0.1.37-0\n  * Handle CA files with symlinks during migration (bsc#1251044)\n  * Add a lowercase version of --logLevel (bsc#1243611)\n  * Adjust traefik exposed configuration for chart v27+ (bsc#1247721)\n  * Stop executing scripts in temporary folder (bsc#1243704)\n  * Convert the traefik install time to local time (bsc#1251138)\n  * Run smdba and reindex only during migration (bsc#1244534)\n  * Support config: collect podman inspect for hub container (bsc#1245099)\n  * Add --registry-host, --registry-user and --registry-password to pull images from an authenticate registry\n  * Deprecate --registry\n  * Use new dedicated path for Cobbler settings (bsc#1244027)\n  * Migrate custom auto installation snippets (bsc#1246320)\n  * Add SLE15SP7 to buildin productmap\n  * Fix loading product map from mgradm configuration file (bsc#1246068)\n  * Fix channel override for distro copy\n  * Do not use sudo when running as a root user (bsc#1246882)\n  * Do not require backups to be at the same location for restoring (bsc#1246906)\n  * Check for restorecon presence before calling (bsc#1246925)\n  * Automatically get up-to-date systemid file on salt based proxy hosts (bsc#1246789)\n  * Fix recomputing proxy images when installing a ptf or test (bsc#1246553)\n  * Add migration for server monitoring configuration (bsc#1247688)\n- Version 0.1.36-0\n  * Bump the default image tag\n- Version 0.1.35-0\n  * Restore SELinux contexts for restored backup volumes (bsc#1244127)\n- Version 0.1.34-0\n  * Fix mgradm backup create handling of images and systemd files (bsc#1246738)\n- Version 0.1.33-0\n  * Restore volumes using tar instead of podman import (bsc#1244127)\n\n","id":"SUSE-SU-2025:4458-1","modified":"2025-12-18T11:57:30Z","published":"2025-12-18T11:57:30Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254458-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1227577"},{"type":"REPORT","url":"https://bugzilla.suse.com/1227579"},{"type":"REPORT","url":"https://bugzilla.suse.com/1237495"},{"type":"REPORT","url":"https://bugzilla.suse.com/1243611"},{"type":"REPORT","url":"https://bugzilla.suse.com/1243704"},{"type":"REPORT","url":"https://bugzilla.suse.com/1244027"},{"type":"REPORT","url":"https://bugzilla.suse.com/1244127"},{"type":"REPORT","url":"https://bugzilla.suse.com/1244534"},{"type":"REPORT","url":"https://bugzilla.suse.com/1245099"},{"type":"REPORT","url":"https://bugzilla.suse.com/1245302"},{"type":"REPORT","url":"https://bugzilla.suse.com/1246068"},{"type":"REPORT","url":"https://bugzilla.suse.com/1246320"},{"type":"REPORT","url":"https://bugzilla.suse.com/1246553"},{"type":"REPORT","url":"https://bugzilla.suse.com/1246586"},{"type":"REPORT","url":"https://bugzilla.suse.com/1246662"},{"type":"REPORT","url":"https://bugzilla.suse.com/1246735"},{"type":"REPORT","url":"https://bugzilla.suse.com/1246736"},{"type":"REPORT","url":"https://bugzilla.suse.com/1246738"},{"type":"REPORT","url":"https://bugzilla.suse.com/1246789"},{"type":"REPORT","url":"https://bugzilla.suse.com/1246882"},{"type":"REPORT","url":"https://bugzilla.suse.com/1246906"},{"type":"REPORT","url":"https://bugzilla.suse.com/1246925"},{"type":"REPORT","url":"https://bugzilla.suse.com/1247688"},{"type":"REPORT","url":"https://bugzilla.suse.com/1247721"},{"type":"REPORT","url":"https://bugzilla.suse.com/1250616"},{"type":"REPORT","url":"https://bugzilla.suse.com/1251044"},{"type":"REPORT","url":"https://bugzilla.suse.com/1251138"},{"type":"REPORT","url":"https://bugzilla.suse.com/1252100"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-11065"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-3415"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-6023"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-6197"}],"related":["CVE-2025-11065","CVE-2025-3415","CVE-2025-6023","CVE-2025-6197"],"summary":"Security update 5.0.6 for Multi-Linux Manager Client Tools","upstream":["CVE-2025-11065","CVE-2025-3415","CVE-2025-6023","CVE-2025-6197"]}