iSCSI daemon and utility programs
Backport upstream commit 668ca1df9c9a from open-iscsi to
fix two security vulnerabilities:
- CVE-2026-44944: iscsiuio control-socket credential
verification now validates against the correct file
descriptor and uses 'continue' instead of 'break' on
authentication failure.
- CVE-2026-44943: IQN target name validation per RFC 3722
to prevent directory traversal attacks via crafted
discovery target names.
CVE: CVE-2026-44944
Upstream patches:
-
|
||
|---|---|---|
| .fmf | ||
| plans | ||
| tests | ||
| .gitignore | ||
| 04-iscsi | ||
| 0001-Fix-incorrect-parsing-of-node.discovery_type-static-.patch | ||
| 0001-meson-don-t-hide-things-with-Wno-all.patch | ||
| 0002-Currently-when-iscsi.service-is-installed-it-creates.patch | ||
| 0003-Use-DBROOT-in-iscsi-starter.-Include-iscsi-starter-i.patch | ||
| 0004-fix-systemctl-path-in-iscsi-starter.service.patch | ||
| 0005-improved-onboot-and-shutdown-services.patch | ||
| 0006-iscsid.conf-Fedora-Red-Hat-defaults.patch | ||
| 0007-Disable-Data-Digests.patch | ||
| 0008-Revert-iscsiadm-return-error-when-login-fails.patch | ||
| 0009-Coverity-scan-fixes.patch | ||
| 0010-use-Red-Hat-version-string-to-match-RPM-package-vers.patch | ||
| 0011-iscsi-gen-initiatorname-use-IQN_PREFIX-as-default.patch | ||
| 0012-iscsi-init.service-Use-iscsi-gen-initiatorname.patch | ||
| 0024-minor-service-file-updates.patch | ||
| 0101-libiscsi.patch | ||
| 0102-libiscsi-introduce-sessions-API.patch | ||
| 0103-fix-libiscsi-firmware-discovery-issue-with-NULL-drec.patch | ||
| 0104-libiscsi-build-fixes.patch | ||
| gating.yaml | ||
| iscsi-initiator-utils-6.2.1.11-CVE-2026-44944.patch | ||
| iscsi-initiator-utils-6.2.1.11-RHEL-219482.patch | ||
| iscsi-initiator-utils.spec | ||
| iscsi-tmpfiles.conf | ||
| sources | ||