🛡️ SUSE-SU-2026:1519-1 — golang-github-lusitaniae-apache-exporter (CVE-2026-31958)

Security update 5.1.3 for Multi-Linux Manager Client Tools

This update fixes the following issues:

golang-github-lusitaniae-apache_exporter:

• Internal changes to fix build issues with no impact for customers

spacecmd:

• Version 5.1.13-0
• Updated translation strings

uyuni-tools:

• Version 5.1.26-0
• Fixed applying PTF with images from RPMs (bsc#1252548)
• Ssl Key file can miss if CA password is blank (bsc#1254154)
• mgrpxy ssh tuning should happens before crypto policies (bsc#1254619)
• Fixed default value for helm registry (bsc#1258927).
• Removed hub register command
• Optimized postgres migration disk space usage (bsc#1257447)
• Added continuous database backup support (bsc#1250367)
• Explicitly start proxy pods after operations

(bsc#1258015)

• Use static supportconfig name to avoid dynamic search

(bsc#1257941)

• Do not nest multiple tarball files and instead collect

all files into one tarball (bsc#1252964)

• Show where final tarball was generated (bsc#1259208)
• Set proxy config file permissions (bsc#1257660)
• Version 5.1.25-0
• If PTF image doesn't exists, use the current service image (bsc#1258418)

venv-salt-minion:

• Security issues fixed:
• CVE-2026-31958: Security patch for Salt vendored tornado: Added limits on multipart form data parsing (bsc#1259554)
• Added x86_64_v2 as a possible rpm package architecture
• Make users with backslash working for salt-ssh (bsc#1254629)
• Fixed ansible.playbooks extra-vars quoting (bsc#1257831)
• Fixed virtualenv call in test helper to use proper python version
• Fixed the issue preventing SELinux profile to be loaded on SLES 16

deployed using cloud images (bsc#1258957)

• Fixed the typo causing buiding EL9 bundle without binary dependencies