0 releases 18 tags

RSS feed

• imports/c10s/isns-utils-0.103-2.el10 d92871624d

  Compare

  Fix CVE-2026-55995: double-free in isns-utils attrs.c error paths

  Ghost released this 2026-08-11 23:44:15 +00:00 | -58 commits to c8s since this release

  Backport upstream fix for CVE-2026-55995 to prevent
  double-free vulnerabilities in isns-utils. The patch adds
  NULL pointer assignments after isns_free() calls in two
  error paths in attrs.c (string and opaque attribute
  decoding), preventing potential denial-of-service attacks
  when buf_get() fails.

  CVE: CVE-2026-55995
  Upstream patches:

  • github.com/open-iscsi/open-isns@56718d4e9d.patch
    Resolves: RHEL-219459

  This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

  Assisted-by: Ymir

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads