Upgrade iscsi-initiator-utils to version 2.1.12 for CVE-2026-44943, CVE-2026-44944 - #18322
Open
SumitJenaHCL wants to merge 1 commit into
Open
Conversation
|
Azure Pipelines: There may be pipelines that require an authorized user to comment /azp run to run. |
microsoft-github-policy-service
Bot
added
Packaging
3.0-dev
…VE-2026-44944 Upgrade open-iscsi from 2.1.9 to 2.1.12. The tag 2.1.12 tarball resolves to upstream commit 7e00642c40123e0b3f949e74c3945872c17a407e, which is the exact commit Fedora 45 packages. - Rebase downstream patches onto 2.1.12; drop hunks merged upstream - Drop removal of 'iface.example', no longer installed by upstream meson - Add '%check' running the upstream libopeniscsiusr test suite - Add missing '%license' macro - Update cgmanifest.json and signatures.json
SumitJenaHCL
force-pushed
the
topic_iscsi-initiator-utils-3.0
branch
from
August 5, 2026 11:08
4935045 to
497b67e
Compare
microsoft-github-policy-service
Bot
added
Tools
fasttrack/3.0
SumitJenaHCL
marked this pull request as ready for review
August 5, 2026 11:11
|
Azure Pipelines: There may be pipelines that require an authorized user to comment /azp run to run. |
Author
|
/azp run |
|
Commenter does not have sufficient privileges for PR 18322 in repo microsoft/azurelinux |
Author
|
Buddy Build has passed. |
|
/azurepipelines run |
|
Azure Pipelines: Successfully started running 1 pipeline(s). 1 pipeline(s) were filtered out due to trigger conditions. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Merge Checklist
All boxes should be checked before merging the PR (just tick any boxes which don't apply to this PR)
*-staticsubpackages, etc.) have had theirReleasetag incremented../cgmanifest.json,./toolkit/scripts/toolchain/cgmanifest.json,.github/workflows/cgmanifest.json)./LICENSES-AND-NOTICES/SPECS/data/licenses.json,./LICENSES-AND-NOTICES/SPECS/LICENSES-MAP.md,./LICENSES-AND-NOTICES/SPECS/LICENSE-EXCEPTIONS.PHOTON)*.signatures.jsonfilessudo make go-tidy-allandsudo make go-test-coveragepassSummary
What does the PR accomplish, why was it needed?
This PR upgrades the
iscsi-initiator-utilspackage from 2.1.9 to 2.1.12 to fix CVE-2026-44943 and CVE-2026-44944.Source0now points at the upstream release tag instead of a bare commit hash. The tag2.1.12resolves to commit7e00642c40123e0b3f949e74c3945872c17a407e— the same commit Fedora 45 packages — and the tarball's git tree hash matches that commit exactly.The downstream patch set was rebased onto 2.1.12. Patch content is byte-identical to Fedora 45 apart from the Azure Linux-only
0201-mariner-fixes.patch:0009-Coverity-scan-fixes.patch— upstream renamed theiscsiuiologging macros toILOG_*, and already merged the twoLOCK_DIRmkdirfixes, so those hunks were dropped.0103-fix-libiscsi-firmware-discovery-issue-with-NULL-drec.patch— theusr/idbm.cNULL-drecguard is now upstream, so that hunk was dropped.0101-libiscsi.patch—libiscsi/setup.pyswitched fromdistutils.coretosetuptools(distutilswas removed in Python 3.12).0003/0007— rebased hunk offsets and context.iface.examplewas dropped from%install; upstream's meson no longer installs it (Fedora 45 dropped this too).Change Log
Source0, add%check, add%license, dropiface.exampleremovalsetuptoolsinstead ofdistutilsDoes this affect the toolchain?
NO
Associated issues
Links to CVEs
Test Methodology