Hi Chris, On Sat, Aug 01, 2026 at 02:48:41PM +0200, Chris Hofstaedtler wrote: > On Fri, Jul 31, 2026 at 10:35:00PM +0200, Salvatore Bonaccorso wrote: > > On Fri, Jul 31, 2026 at 05:37:03PM +0000, Debian Bug Tracking System wrote: > > > open-isns (0.103-1) unstable; urgency=medium > > > . > > > * Team upload. > > > * New upstream version 0.103, fixes CVE-2026-55995 (Closes: #1143053) > > > > I think that is not correct? > > https://github.com/open-iscsi/open-isns/commit/56718d4e9d1a4f51c30697b5c0534144bb41c9bb > > is not included in v0.103 or do I miss something? > > You are, of course, correct. Sorry. I'm uploading -2 with the fix > cherry-picked.
Thanks for the qick turnaround! > > > p.s.: I tend to mark this no-dsa, do you agree? > > I think so - however it's a bit unclear to me how to reach the > affected code. I have done so, and thanks for having filled the trixie-pu bug already. Regards, Salvatore
