-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 30 Sep 2026 08:33:54 +0200 Source: open-iscsi Architecture: source Version: 2.1.8-1+deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: Debian iSCSI Maintainers <open-iscsi@packages.debian.org> Changed-By: Daniel Leidert <dleidert@debian.org> Closes: 1143059 1144935 Changes: open-iscsi (2.1.8-1+deb12u1) bookworm-security; urgency=medium . * Non-maintainer upload by the Debian LTS team. * d/patches/CVE-2026-18724.patch: Add patch to fix CVE-2026-18724. - A stack buffer overflow exists in idbm_recinfo_config (closes: #1144935). * d/patches/CVE-2026-18725.patch: Add patch to fix CVE-2026-18725. - An OOB access in IPv6 ICMPv6 echo handling exists (closes: #1144935). * d/patches/CVE-2026-18726.patch: Add patch to fix CVE-2026-18726. - Multiple vulnerabilities exist in the ICMPv6 Router Advertisement option parsing (closes: #1144935). * d/patches/CVE-2026-18727.patch: Add patch to fix CVE-2026-18727. - An integer underflow exists in the iscsiuio DHCPv6 parsing (closes: #1144935). * d/patches/CVE-2026-18728.patch: Add patch to fix CVE-2026-18728. - An integer underflow exists in the iscsiuio IPv4 DHCP parsing (closes: #1144935). * d/patches/CVE-2026-44943.patch: Add patch to fix CVE-2026-44943. - Improve iscsid discovery handling of IQN names (closes: 1143059). * d/patches/CVE-2026-44944.patch: Add patch to fix CVE-2026-44944. - An unprivilidged local user can use the isscsiuio control socket (closes: 1143059). Checksums-Sha1: f1df210313099d5d8ed37d8eee00f3a079883a0d 2617 open-iscsi_2.1.8-1+deb12u1.dsc ff9685ce17cf07c5ad6dc393e8326463ac55397e 638346 open-iscsi_2.1.8.orig.tar.gz 1e4d8185c2c83819848f26f56b2b8f17ca5e7c4b 63132 open-iscsi_2.1.8-1+deb12u1.debian.tar.xz ac2483e41a3df565cbed8ffb5c2d0b89d11412b8 6522 open-iscsi_2.1.8-1+deb12u1_source.buildinfo Checksums-Sha256: 81ba588a8753eb6fa5d5ebb9553a7b876a3f9319c48dd662a7b8a16819546c57 2617 open-iscsi_2.1.8-1+deb12u1.dsc 9565bdf6b68b223e1e0d455d9a04d7536724a3f5b5a254e9398d06b2a0c6b6d2 638346 open-iscsi_2.1.8.orig.tar.gz 456c7e69102eb48c35f5f6fce6b7e50a44228fcda3cc253d19f7a94a05cd06ca 63132 open-iscsi_2.1.8-1+deb12u1.debian.tar.xz 2b51d068f0bddc49bd888400f3ce401baf5c551c338abd190de19dcf365bd248 6522 open-iscsi_2.1.8-1+deb12u1_source.buildinfo Files: fe7269a3f04af3972a2eb62f8a29b1fe 2617 net optional open-iscsi_2.1.8-1+deb12u1.dsc 651fa1c2b0578d94ee6c76954af2ee42 638346 net optional open-iscsi_2.1.8.orig.tar.gz 1b70b6dd8396843ec92372b231cb7104 63132 net optional open-iscsi_2.1.8-1+deb12u1.debian.tar.xz 4b7751ca97d6a7d7ae53c75b41240bff 6522 net optional open-iscsi_2.1.8-1+deb12u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEvu1N7VVEpMA+KD3HS80FZ8KW0F0FAmq9p6MACgkQS80FZ8KW 0F0j4Q//dQTXXyrWy+GaG+DPgoWwYPBgo+E6kke61oZ5MCMvvOycHcuHc02MI+ei vrA0ofS1pZRW/EO5iZJyrF9uQEQSZ+2caF9OvVpgelAEteXoz6zuXC6C6bRkK59v xZa4pip22DuA0/Pu0fLBn5QiPvoPmXf80rZxpihsk8tOR9ZlWmrgFnE/cD4BWwXs Mz/VC+GqlZdczO9gp56mVmeg7heOkEW/jHQDxjYrMeHuMI1f9Ir231gXceqxf6OF MsQbb+vjoo/PitEIcI1sScrVw5qKDc5vGUjcfFWnF0dJoFSqQoFWHr7Rbbn+CBC0 10HC/nQWMOcFLNnQmrinOcGQwRvFtE/h6HpC4uQom34fsbe+UTk3MZo2Ydyych7q 1kYKD0HnCrN9UvYrGh6V9Nv29ziQpXH5GyS1kj/KpmecV2esdstWFVuBi4RZmE9O FHP2ppmO5uheIyTqCLdi2Y7WXJaELIec+1NeR6V4/Mp0i7IP0lvBbXpffQ6ESjFW j7TM2g1y0HhU6EeW8I/ud/thRGgOVbS+wCJMxB+QhgLXpfI9Jdy8i/hkckXBnp7o EQH9qylEb66jskT1D+DgkJfV+Pg81aWbyPG3X1NoWYG4jP8MT7TLAlxAcPwR63UA pm9sNC5qjmsQCC9X3RE8D6jnE3WvD2wkgkbsZB6qU1kBHWtcB2k= =FkDm -----END PGP SIGNATURE-----
