Ubuntu
iscsitarget package

[MIR] iscsitarget

Bug #843808 reported by Chuck Short
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
iscsitarget (Ubuntu)
Won't Fix
High
Unassigned
Ubuntu ubuntu-11.10

Bug Description

Rationale: Apart of the server-o-openstack specification in order to get nova, glance, and swift into main.
Quality Assurance: Package works out of the box. There is no major bugs in Ubuntu and the is no major bugs in Debian.
Standards Compliance: FHS and Debian Policy compliant.
Maintenance: Regular package that the Ubuntu Server Team will take care of.
Security: CVE-2010-2221, CVE-2010-0743 , and CVE-2007-5827
Dependencies: All are in main.

CVE References

Chuck Short (zulcss)
Changed in iscsitarget (Ubuntu):
importance: Undecided → High
milestone: none → ubuntu-11.10-beta-2
Revision history for this message
Michael Terry (mterry) wrote :

This is going to need a security pass, so assigning to ubuntu-security for that. I'll review other MIR issues separately.

Changed in iscsitarget (Ubuntu):
assignee: nobody → Ubuntu Security Team (ubuntu-security)
Kate Stewart (kate.stewart)
tags: added: rls-mgr-o-tracking
Jamie Strandboge (jdstrand)
Changed in iscsitarget (Ubuntu):
assignee: Ubuntu Security Team (ubuntu-security) → Jamie Strandboge (jdstrand)
status: New → In Progress
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

So, without looking at the code other than to find out that iscsitarget is still vulnerable to CVE-2010-2221, I started wondering why we had both tgt and iscsitarget in main. tgt was needed as part of the Eucalyptus MIR, but seems it got demoted because eucalyptus got demoted.

Chuck opened the following bug report: https://bugs.launchpad.net/nova/+bug/819997. tgt is supported by RHEL and seems to have more momentum. tgt has already gone through the MIR process and would simply be a matter of reseeding. Would it be easier to not add the patch from bug #819997 and reseed tgt than to use iscsitarget?

Changed in iscsitarget (Ubuntu):
status: In Progress → Incomplete
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

Also, aiui, the tgt kernel driver is now upstream, whereas the iscsitarget one is not. It would be much better to use tgt instead of iscsitarget for these reasons.

Dave Walker (davewalker)
Changed in iscsitarget (Ubuntu):
milestone: ubuntu-11.10-beta-2 → ubuntu-11.10
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

Unassigning myself since there is a clear path forward. Please use tgt and we can repromote that. NAK for iscsitarget.

Changed in iscsitarget (Ubuntu):
assignee: Jamie Strandboge (jdstrand) → nobody
status: Incomplete → Won't Fix
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.