iSCSI daemon and utility programs
Go to file
RHEL Packaging Agent af319e91c3 Fix CVE-2026-44943 and CVE-2026-44944 in iscsi-initiator-utils
Backport upstream fixes for two security vulnerabilities:

- CVE-2026-44944: Fix iscsiuio control-socket credential
  verification to prevent unprivileged users from driving
  the iscsiuio control socket.
- CVE-2026-44943: Validate IQN names received via discovery
  to prevent path traversal via crafted target names.

Cherry-picked from upstream commits 668ca1df and 3f747d10,
combined into a single patch (Patch105).

CVE: CVE-2026-44944
Upstream patches:
 - 668ca1df9c.patch
 - 3f747d10ce.patch
Resolves: RHEL-219473

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-08-11 21:58:52 +00:00
.fmf Move to tmt test framework 2023-06-14 12:30:39 +02:00
plans Update to Open-iSCSI 2.1.11 2025-05-09 15:03:42 -07:00
tests Move to tmt test framework 2023-06-14 12:30:39 +02:00
.gitignore Update to Open-iSCSI 2.1.11 2025-05-09 15:03:42 -07:00
04-iscsi boot session handling improvements 2014-03-18 20:51:15 -07:00
0001-Fix-incorrect-parsing-of-node.discovery_type-static-.patch open-iscsi: backport a regression fix for "fw" and "static" node records 2026-06-25 14:54:56 -07:00
0001-meson-don-t-hide-things-with-Wno-all.patch rebase to upstream Open-iSCSI 2.1.9 2023-07-04 10:27:32 -07:00
0002-Currently-when-iscsi.service-is-installed-it-creates.patch rebase to upstream Open-iSCSI 2.1.9 2023-07-04 10:27:32 -07:00
0003-Use-DBROOT-in-iscsi-starter.-Include-iscsi-starter-i.patch rebase to upstream Open-iSCSI 2.1.9 2023-07-04 10:27:32 -07:00
0004-fix-systemctl-path-in-iscsi-starter.service.patch rebase to upstream Open-iSCSI 2.1.9 2023-07-04 10:27:32 -07:00
0005-improved-onboot-and-shutdown-services.patch rebase to upstream Open-iSCSI 2.1.9 2023-07-04 10:27:32 -07:00
0006-iscsid.conf-Fedora-Red-Hat-defaults.patch rebase to upstream Open-iSCSI 2.1.9 2023-07-04 10:27:32 -07:00
0007-Disable-Data-Digests.patch rebase to upstream Open-iSCSI 2.1.9 2023-07-04 10:27:32 -07:00
0008-Revert-iscsiadm-return-error-when-login-fails.patch rebase to upstream Open-iSCSI 2.1.9 2023-07-04 10:27:32 -07:00
0009-Coverity-scan-fixes.patch Update to Open-iSCSI 2.1.11 2025-05-09 15:03:42 -07:00
0010-use-Red-Hat-version-string-to-match-RPM-package-vers.patch Update to Open-iSCSI 2.1.11 2025-05-09 15:03:42 -07:00
0011-iscsi-gen-initiatorname-use-IQN_PREFIX-as-default.patch Use iscsi-gen-initiatorname in iscsi-init 2026-07-14 13:00:38 -04:00
0012-iscsi-init.service-Use-iscsi-gen-initiatorname.patch Use iscsi-gen-initiatorname in iscsi-init 2026-07-14 13:00:38 -04:00
0024-minor-service-file-updates.patch rebase to upstream 2.1.4 2021-04-13 13:38:30 -07:00
0101-libiscsi.patch libiscsi build issues 2023-07-04 16:35:45 -07:00
0102-libiscsi-introduce-sessions-API.patch libiscsi build issues 2023-07-04 16:35:45 -07:00
0103-fix-libiscsi-firmware-discovery-issue-with-NULL-drec.patch Update to Open-iSCSI 2.1.11 2025-05-09 15:03:42 -07:00
0104-libiscsi-build-fixes.patch libiscsi build issues 2023-07-04 16:35:45 -07:00
gating.yaml add CI gating tests 2021-04-13 15:04:11 -07:00
iscsi-initiator-utils-6.2.1.11-CVE-2026-44943.patch Fix CVE-2026-44943 and CVE-2026-44944 in iscsi-initiator-utils 2026-08-11 21:52:22 +00:00
iscsi-initiator-utils-6.2.1.11-CVE-2026-44944.patch Fix CVE-2026-44943 and CVE-2026-44944 in iscsi-initiator-utils 2026-08-11 21:58:52 +00:00
iscsi-initiator-utils.spec Fix CVE-2026-44943 and CVE-2026-44944 in iscsi-initiator-utils 2026-08-11 21:58:52 +00:00
iscsi-tmpfiles.conf use tmpfiles service for creating lockfiles 2013-06-11 10:25:12 -07:00
sources Update to Open-iSCSI 2.1.11 2025-05-09 15:03:42 -07:00