{"id":"ALSA-2026:53844","summary":"Important: iscsi-initiator-utils security, bug fix, and enhancement update","details":"The iscsi-initiator-utils packages provide the server daemon for the Internet Small Computer System Interface (iSCSI) protocol, as well as the utility programs used to manage it. The iSCSI protocol is a protocol for distributed disk access using SCSI commands sent over Internet Protocol (IP) networks.  \n\nSecurity Fix(es):  \n\n  * open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket (CVE-2026-44944)\n  * open-iscsi: open-iscsi: Privilege Escalation via Path Traversal (CVE-2026-44943)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * [FJ9.7 Bug][REG]: iscsiadm reports node.discovery_type as \"fw\", although it should be \"static\". [almalinux-9.8.z] (JIRA:AlmaLinux-191897)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","modified":"2026-08-12T12:12:03.573088481Z","published":"2026-08-11T00:00:00Z","related":["CVE-2026-44943","CVE-2026-44944"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:53844"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-44943"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-44944"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2508412"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2508419"},{"type":"ADVISORY","url":"https://errata.almalinux.org/9/ALSA-2026-53844.html"}],"affected":[{"package":{"name":"iscsi-initiator-utils","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/iscsi-initiator-utils"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.1.11-1.git4b3e853.el9_8.2"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:53844.json"}},{"package":{"name":"iscsi-initiator-utils-iscsiuio","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/iscsi-initiator-utils-iscsiuio"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.1.11-1.git4b3e853.el9_8.2"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:53844.json"}},{"package":{"name":"python3-iscsi-initiator-utils","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/python3-iscsi-initiator-utils"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.1.11-1.git4b3e853.el9_8.2"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:53844.json"}}],"schema_version":"1.9.0"}