Security update for open-iscsi SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:0127-1 Final 1 1 2021-01-14T09:30:27Z current 2021-01-14T09:30:27Z 2021-01-14T09:30:27Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for open-iscsi This update for open-iscsi fixes the following issues: - Updated to upstream version 2.1.3 as 2.1.3-suse, for bsc#1179908, including: * uip: check for TCP urgent pointer past end of frame * uip: check for u8 overflow when processing TCP options * uip: check for header length underflow during checksum calculation * fwparam_ppc: Fix memory leak in fwparam_ppc.c * iscsiuio: Remove unused macro IFNAMSIZ defined in iscsid_ipc.c * fwparam_ppc: Fix illegal memory access in fwparam_ppc.c * sysfs: Verify parameter of sysfs_device_get() * fwparam_ppc: Fix NULL pointer dereference in find_devtree() * open-iscsi: Clean user_param list when process exit * iscsi_net_util: Fix NULL pointer dereference in find_vlan_dev() * open-iscsi: Fix NULL pointer dereference in mgmt_ipc_read_req() * open-iscsi: Fix invalid pointer deference in find_initiator() * iscsiuio: Fix invalid parameter when call fstat() * iscsi-iname: Verify open() return value before calling read() * iscsi_sysfs: Fix NULL pointer deference in iscsi_sysfs_read_iface - Updatged to latest upstream, including: * iscsiadm: Optimize the the verification of mode paramters * iscsid: Poll timeout value to 1 minute for iscsid * iscsiadm: fix host stats mode coredump * iscsid: fix logging level when starting and shutting down daemon * Updated iscsiadm man page. * Fix memory leak in sysfs_get_str * libopeniscsiusr: Compare with max int instead of max long - Systemd unit files should not depend on network.target (bsc#1179440). - Updated to latest upstream, including async login ability: * Implement login 'no_wait' for iscsiadm NODE mode * iscsiadm buffer overflow regression when discovering many targets at once * iscsid: Check Invalid Session id for stop connection * Add ability to attempt target logins asynchronously - %service_del_postun_without_restart is now available on SLE More accurately it's been introduced in SLE12-SP2+ and SLE15+ The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container suse/sles/15.2/virt-launcher:0.38.1-2021-127,Image SLES15-SP2-Azure-Basic-2021-127,Image SLES15-SP2-Azure-Standard-2021-127,Image SLES15-SP2-BYOS-Azure-2021-127,Image SLES15-SP2-BYOS-EC2-HVM-2021-127,Image SLES15-SP2-BYOS-GCE-2021-127,Image SLES15-SP2-CHOST-BYOS-Aliyun-2021-127,Image SLES15-SP2-CHOST-BYOS-Azure-2021-127,Image SLES15-SP2-CHOST-BYOS-EC2-2021-127,Image SLES15-SP2-CHOST-BYOS-GCE-2021-127,Image SLES15-SP2-EC2-HVM-2021-127,Image SLES15-SP2-GCE-2021-127,Image SLES15-SP2-HPC-Azure-2021-127,Image SLES15-SP2-HPC-BYOS-Azure-2021-127,Image SLES15-SP2-HPC-BYOS-EC2-HVM-2021-127,Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure-2021-127,Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM-2021-127,Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE-2021-127,Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure-2021-127,Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM-2021-127,Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE-2021-127,Image SLES15-SP2-SAP-Azure-2021-127,Image SLES15-SP2-SAP-Azure-LI-BYOS-Production-2021-127,Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production-2021-127,Image SLES15-SP2-SAP-BYOS-Azure-2021-127,Image SLES15-SP2-SAP-BYOS-EC2-HVM-2021-127,Image SLES15-SP2-SAP-BYOS-GCE-2021-127,Image SLES15-SP2-SAP-EC2-HVM-2021-127,Image SLES15-SP2-SAP-GCE-2021-127,SUSE-2021-127,SUSE-SLE-Module-Basesystem-15-SP2-2021-127 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20210127-1/ Link for SUSE-SU-2021:0127-1 https://lists.suse.com/pipermail/sle-security-updates/2021-January/008200.html E-Mail link for SUSE-SU-2021:0127-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1179440 SUSE Bug 1179440 https://bugzilla.suse.com/1179908 SUSE Bug 1179908 Container suse/sles/15.2/virt-launcher:0.38.1 Image SLES15-SP2-Azure-Basic Image SLES15-SP2-Azure-Standard Image SLES15-SP2-BYOS-Azure Image SLES15-SP2-BYOS-EC2-HVM Image SLES15-SP2-BYOS-GCE Image SLES15-SP2-CHOST-BYOS-Aliyun Image SLES15-SP2-CHOST-BYOS-Azure Image SLES15-SP2-CHOST-BYOS-EC2 Image SLES15-SP2-CHOST-BYOS-GCE Image SLES15-SP2-EC2-HVM Image SLES15-SP2-GCE Image SLES15-SP2-HPC-Azure Image SLES15-SP2-HPC-BYOS-Azure Image SLES15-SP2-HPC-BYOS-EC2-HVM Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE Image SLES15-SP2-SAP-Azure Image SLES15-SP2-SAP-Azure-LI-BYOS-Production Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production Image SLES15-SP2-SAP-BYOS-Azure Image SLES15-SP2-SAP-BYOS-EC2-HVM Image SLES15-SP2-SAP-BYOS-GCE Image SLES15-SP2-SAP-EC2-HVM Image SLES15-SP2-SAP-GCE SUSE Linux Enterprise Module for Basesystem 15 SP2 libopeniscsiusr0_2_0-2.1.3-22.6.1 open-iscsi-2.1.3-22.6.1 iscsiuio-0.7.8.6-22.6.1 open-iscsi-devel-2.1.3-22.6.1 libopeniscsiusr0_2_0-2.1.3-22.6.1 as a component of Container suse/sles/15.2/virt-launcher:0.38.1 open-iscsi-2.1.3-22.6.1 as a component of Container suse/sles/15.2/virt-launcher:0.38.1 iscsiuio-0.7.8.6-22.6.1 as a component of Image SLES15-SP2-Azure-Basic libopeniscsiusr0_2_0-2.1.3-22.6.1 as a component of Image SLES15-SP2-Azure-Basic open-iscsi-2.1.3-22.6.1 as a component of Image SLES15-SP2-Azure-Basic iscsiuio-0.7.8.6-22.6.1 as a component of Image SLES15-SP2-Azure-Standard libopeniscsiusr0_2_0-2.1.3-22.6.1 as a component of Image SLES15-SP2-Azure-Standard open-iscsi-2.1.3-22.6.1 as a component of Image SLES15-SP2-Azure-Standard iscsiuio-0.7.8.6-22.6.1 as a component of Image SLES15-SP2-BYOS-Azure libopeniscsiusr0_2_0-2.1.3-22.6.1 as a component of Image SLES15-SP2-BYOS-Azure open-iscsi-2.1.3-22.6.1 as a component of Image SLES15-SP2-BYOS-Azure iscsiuio-0.7.8.6-22.6.1 as a component of Image SLES15-SP2-BYOS-EC2-HVM libopeniscsiusr0_2_0-2.1.3-22.6.1 as a component of Image SLES15-SP2-BYOS-EC2-HVM open-iscsi-2.1.3-22.6.1 as a component of Image SLES15-SP2-BYOS-EC2-HVM iscsiuio-0.7.8.6-22.6.1 as a component of Image SLES15-SP2-BYOS-GCE libopeniscsiusr0_2_0-2.1.3-22.6.1 as a component of Image SLES15-SP2-BYOS-GCE open-iscsi-2.1.3-22.6.1 as a component of Image SLES15-SP2-BYOS-GCE libopeniscsiusr0_2_0-2.1.3-22.6.1 as a component of Image SLES15-SP2-CHOST-BYOS-Aliyun open-iscsi-2.1.3-22.6.1 as a component of Image SLES15-SP2-CHOST-BYOS-Aliyun libopeniscsiusr0_2_0-2.1.3-22.6.1 as a component of Image SLES15-SP2-CHOST-BYOS-Azure open-iscsi-2.1.3-22.6.1 as a component of Image SLES15-SP2-CHOST-BYOS-Azure libopeniscsiusr0_2_0-2.1.3-22.6.1 as a component of Image SLES15-SP2-CHOST-BYOS-EC2 open-iscsi-2.1.3-22.6.1 as a component of Image SLES15-SP2-CHOST-BYOS-EC2 libopeniscsiusr0_2_0-2.1.3-22.6.1 as a component of Image SLES15-SP2-CHOST-BYOS-GCE open-iscsi-2.1.3-22.6.1 as a component of Image SLES15-SP2-CHOST-BYOS-GCE iscsiuio-0.7.8.6-22.6.1 as a component of Image SLES15-SP2-EC2-HVM libopeniscsiusr0_2_0-2.1.3-22.6.1 as a component of Image SLES15-SP2-EC2-HVM open-iscsi-2.1.3-22.6.1 as a component of Image SLES15-SP2-EC2-HVM iscsiuio-0.7.8.6-22.6.1 as a component of Image SLES15-SP2-GCE libopeniscsiusr0_2_0-2.1.3-22.6.1 as a component of Image SLES15-SP2-GCE open-iscsi-2.1.3-22.6.1 as a component of Image SLES15-SP2-GCE iscsiuio-0.7.8.6-22.6.1 as a component of Image SLES15-SP2-HPC-Azure libopeniscsiusr0_2_0-2.1.3-22.6.1 as a component of Image SLES15-SP2-HPC-Azure open-iscsi-2.1.3-22.6.1 as a component of Image SLES15-SP2-HPC-Azure iscsiuio-0.7.8.6-22.6.1 as a component of Image SLES15-SP2-HPC-BYOS-Azure libopeniscsiusr0_2_0-2.1.3-22.6.1 as a component of Image SLES15-SP2-HPC-BYOS-Azure open-iscsi-2.1.3-22.6.1 as a component of Image SLES15-SP2-HPC-BYOS-Azure iscsiuio-0.7.8.6-22.6.1 as a component of Image SLES15-SP2-HPC-BYOS-EC2-HVM libopeniscsiusr0_2_0-2.1.3-22.6.1 as a component of Image SLES15-SP2-HPC-BYOS-EC2-HVM open-iscsi-2.1.3-22.6.1 as a component of Image SLES15-SP2-HPC-BYOS-EC2-HVM iscsiuio-0.7.8.6-22.6.1 as a component of Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure libopeniscsiusr0_2_0-2.1.3-22.6.1 as a component of Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure open-iscsi-2.1.3-22.6.1 as a component of Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure iscsiuio-0.7.8.6-22.6.1 as a component of Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM libopeniscsiusr0_2_0-2.1.3-22.6.1 as a component of Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM open-iscsi-2.1.3-22.6.1 as a component of Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM iscsiuio-0.7.8.6-22.6.1 as a component of Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE libopeniscsiusr0_2_0-2.1.3-22.6.1 as a component of Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE open-iscsi-2.1.3-22.6.1 as a component of Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE iscsiuio-0.7.8.6-22.6.1 as a component of Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure libopeniscsiusr0_2_0-2.1.3-22.6.1 as a component of Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure open-iscsi-2.1.3-22.6.1 as a component of Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure iscsiuio-0.7.8.6-22.6.1 as a component of Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM libopeniscsiusr0_2_0-2.1.3-22.6.1 as a component of Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM open-iscsi-2.1.3-22.6.1 as a component of Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM iscsiuio-0.7.8.6-22.6.1 as a component of Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE libopeniscsiusr0_2_0-2.1.3-22.6.1 as a component of Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE open-iscsi-2.1.3-22.6.1 as a component of Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE iscsiuio-0.7.8.6-22.6.1 as a component of Image SLES15-SP2-SAP-Azure libopeniscsiusr0_2_0-2.1.3-22.6.1 as a component of Image SLES15-SP2-SAP-Azure open-iscsi-2.1.3-22.6.1 as a component of Image SLES15-SP2-SAP-Azure iscsiuio-0.7.8.6-22.6.1 as a component of Image SLES15-SP2-SAP-Azure-LI-BYOS-Production libopeniscsiusr0_2_0-2.1.3-22.6.1 as a component of Image SLES15-SP2-SAP-Azure-LI-BYOS-Production open-iscsi-2.1.3-22.6.1 as a component of Image SLES15-SP2-SAP-Azure-LI-BYOS-Production iscsiuio-0.7.8.6-22.6.1 as a component of Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production libopeniscsiusr0_2_0-2.1.3-22.6.1 as a component of Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production open-iscsi-2.1.3-22.6.1 as a component of Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production iscsiuio-0.7.8.6-22.6.1 as a component of Image SLES15-SP2-SAP-BYOS-Azure libopeniscsiusr0_2_0-2.1.3-22.6.1 as a component of Image SLES15-SP2-SAP-BYOS-Azure open-iscsi-2.1.3-22.6.1 as a component of Image SLES15-SP2-SAP-BYOS-Azure iscsiuio-0.7.8.6-22.6.1 as a component of Image SLES15-SP2-SAP-BYOS-EC2-HVM libopeniscsiusr0_2_0-2.1.3-22.6.1 as a component of Image SLES15-SP2-SAP-BYOS-EC2-HVM open-iscsi-2.1.3-22.6.1 as a component of Image SLES15-SP2-SAP-BYOS-EC2-HVM iscsiuio-0.7.8.6-22.6.1 as a component of Image SLES15-SP2-SAP-BYOS-GCE libopeniscsiusr0_2_0-2.1.3-22.6.1 as a component of Image SLES15-SP2-SAP-BYOS-GCE open-iscsi-2.1.3-22.6.1 as a component of Image SLES15-SP2-SAP-BYOS-GCE iscsiuio-0.7.8.6-22.6.1 as a component of Image SLES15-SP2-SAP-EC2-HVM libopeniscsiusr0_2_0-2.1.3-22.6.1 as a component of Image SLES15-SP2-SAP-EC2-HVM open-iscsi-2.1.3-22.6.1 as a component of Image SLES15-SP2-SAP-EC2-HVM iscsiuio-0.7.8.6-22.6.1 as a component of Image SLES15-SP2-SAP-GCE libopeniscsiusr0_2_0-2.1.3-22.6.1 as a component of Image SLES15-SP2-SAP-GCE open-iscsi-2.1.3-22.6.1 as a component of Image SLES15-SP2-SAP-GCE iscsiuio-0.7.8.6-22.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 libopeniscsiusr0_2_0-2.1.3-22.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 open-iscsi-2.1.3-22.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 open-iscsi-devel-2.1.3-22.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2