Most recent entries from all

ALSA-2026:53844 — Important: iscsi-initiator-utils security, bug fix, and enhancement update

Affected: AlmaLinux:9: iscsi-initiator-utils, AlmaLinux:9: iscsi-initiator-utils-iscsiuio, AlmaLinux:9: python3-iscsi-initiator-utils

The iscsi-initiator-utils packages provide the server daemon for the Internet Small Computer System Interface (iSCSI) protocol, as well as the utility programs used to manage it. The iSCSI protocol is a protocol for distributed disk access using SCSI commands sent over Internet Protocol (IP) networks.

Security Fix(es):

* open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket (CVE-2026-44944) * open-iscsi: open-iscsi: Privilege Escalation via Path Traversal (CVE-2026-44943)

Bug Fix(es) and Enhancement(s):

* [FJ9.7 Bug][REG]: iscsiadm reports node.discovery_type as "fw", although it should be "static". [almalinux-9.8.z] (JIRA:AlmaLinux-191897)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

fkie_cve-2026-44943

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers to create root-owned files outside the database and inject lines into the record.

This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.

GHSA-36cw-9hwh-mr3c

This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.

msrc_CVE-2026-44943 — remote limited file-write as root via discovery in open-iscsi

msrc_CVE-2026-44943

OESA-2026-3337 — open-iscsi security update

Affected: openEuler:24.03-LTS-SP1: open-iscsi

The Open-iSCSI project is a high-performance, transport independent, multi-platform implementation of RFC3720 iSCSI. Security Fix(es):

This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.(CVE-2026-44943)

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS.

This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.(CVE-2026-55995)

openSUSE-SU-2026:11317-1 — iscsiuio-0.7.8.8-112.1 on GA media

iscsiuio-0.7.8.8-112.1 on GA media

RHSA-2026:60427 — Red Hat Security Advisory: iscsi-initiator-utils security update

open-iscsi: open-iscsi: Privilege Escalation via Path Traversal open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket

SUSE-SU-2026:23157-1 — Security update for open-iscsi

Security update for open-iscsi

UBUNTU-CVE-2026-44943

Affected: Ubuntu:14.04:LTS: open-iscsi, Ubuntu:Pro:16.04:LTS: open-iscsi, Ubuntu:Pro:18.04:LTS: open-iscsi, Ubuntu:20.04:LTS: open-iscsi, Ubuntu:22.04:LTS: open-iscsi, Ubuntu:24.04:LTS: open-iscsi, Ubuntu:26.04:LTS: open-iscsi