gpp_maybe
Security update for open-iscsi
SUSE-SL-Micro-6.2-1458
This update for open-iscsi fixes the following issues: Update to version 2.1.12.suse+0.8f77cf16: - CVE-2026-44943: improper limitation of pathname to a restricted directory allows remote MITM attackers to create root-owned files outside the database and inject lines into records (bsc#1268353). - CVE-2026-44944: incorrect authorization allows unpriviledged local users to use the `isscsiuio` control socket (bsc#1268352). Changes for open-iscsi: - Version 2.1.12.suse+0.8f77cf16: * Fix security issues recently discovered by Keith at Linneman Labs. * iscsi-init.service: use `iscsi-gen-initiatorname`. * iscsi-gen-initiatorname: use `@IQN_PREFIX@` as default. * Avoid possible double free of found in `idbm_rec_update_param`. * iscsi: validate interface IP against target address family.
-
Release DateAug 14 2026
-
References
-
Typesecurity
-
Severityimportant
cloud_download Downloads
SUSE Linux Micro 6.2 ppc64le
-
Packagesiscsiuio
Linux Broadcom NetXtremem II iscsi serverlibopeniscsiusr00.7.8.8-160000.4.1lock rpm
The iSCSI User-level Libraryopen-iscsi0.2.0-160000.4.1lock rpm
Linux iSCSI Software Initiator2.1.12-160000.4.1lock rpm
SUSE Linux Micro 6.2 aarch64
-
Packagesiscsiuio
Linux Broadcom NetXtremem II iscsi serverlibopeniscsiusr00.7.8.8-160000.4.1lock rpm
The iSCSI User-level Libraryopen-iscsi0.2.0-160000.4.1lock rpm
Linux iSCSI Software Initiator2.1.12-160000.4.1lock rpm
SUSE Linux Micro 6.2 s390x
-
Packagesiscsiuio
Linux Broadcom NetXtremem II iscsi serverlibopeniscsiusr00.7.8.8-160000.4.1lock rpm
The iSCSI User-level Libraryopen-iscsi0.2.0-160000.4.1lock rpm
Linux iSCSI Software Initiator2.1.12-160000.4.1lock rpm
SUSE Linux Micro 6.2 x86_64
-
Packagesiscsiuio
Linux Broadcom NetXtremem II iscsi serverlibopeniscsiusr00.7.8.8-160000.4.1lock rpm
The iSCSI User-level Libraryopen-iscsi0.2.0-160000.4.1lock rpm
Linux iSCSI Software Initiator2.1.12-160000.4.1lock rpm