Source: open-isns Version: 0.101-2 Severity: important Tags: security upstream X-Debbugs-Cc: [email protected], Debian Security Team <[email protected]>
Hi, The following vulnerability was published for open-isns. CVE-2026-55995[0]: | A Double Free vulnerability in open-iscsi allows | an unauthenticated MITM attacker to cause DoS. This issue | affects open-iscsi: from ? through | 56718d4e9d1a4f51c30697b5c0534144bb41c9bb. (note this is is really in open-isns, not open-iscsi source as in the oficial CVE descirption, they reference to the [1] commit as fix). If you fix the vulnerability please also make sure to include the CVE (Common Vulnerabilities & Exposures) id in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2026-55995 https://www.cve.org/CVERecord?id=CVE-2026-55995 [1] https://github.com/open-iscsi/open-isns/commit/56718d4e9d1a4f51c30697b5c0534144bb41c9bb Please adjust the affected versions in the BTS as needed. Regards, Salvatore
