iSCSI daemon and utility programs
Backport upstream fixes for two security vulnerabilities: - CVE-2026-44944: Fix iscsiuio control-socket credential verification to prevent unprivileged users from driving the iscsiuio control socket. - CVE-2026-44943: Validate IQN names received via discovery to prevent path traversal via crafted target names. Cherry-picked from upstream commits 668ca1df and 3f747d10, combined into a single patch (Patch105). CVE: CVE-2026-44944 Upstream patches: - |
||
|---|---|---|
| .fmf | ||
| plans | ||
| tests | ||
| .gitignore | ||
| 04-iscsi | ||
| 0001-Fix-incorrect-parsing-of-node.discovery_type-static-.patch | ||
| 0001-meson-don-t-hide-things-with-Wno-all.patch | ||
| 0002-Currently-when-iscsi.service-is-installed-it-creates.patch | ||
| 0003-Use-DBROOT-in-iscsi-starter.-Include-iscsi-starter-i.patch | ||
| 0004-fix-systemctl-path-in-iscsi-starter.service.patch | ||
| 0005-improved-onboot-and-shutdown-services.patch | ||
| 0006-iscsid.conf-Fedora-Red-Hat-defaults.patch | ||
| 0007-Disable-Data-Digests.patch | ||
| 0008-Revert-iscsiadm-return-error-when-login-fails.patch | ||
| 0009-Coverity-scan-fixes.patch | ||
| 0010-use-Red-Hat-version-string-to-match-RPM-package-vers.patch | ||
| 0011-iscsi-gen-initiatorname-use-IQN_PREFIX-as-default.patch | ||
| 0012-iscsi-init.service-Use-iscsi-gen-initiatorname.patch | ||
| 0024-minor-service-file-updates.patch | ||
| 0101-libiscsi.patch | ||
| 0102-libiscsi-introduce-sessions-API.patch | ||
| 0103-fix-libiscsi-firmware-discovery-issue-with-NULL-drec.patch | ||
| 0104-libiscsi-build-fixes.patch | ||
| gating.yaml | ||
| iscsi-initiator-utils-6.2.1.11-CVE-2026-44943.patch | ||
| iscsi-initiator-utils-6.2.1.11-CVE-2026-44944.patch | ||
| iscsi-initiator-utils.spec | ||
| iscsi-tmpfiles.conf | ||
| sources | ||