Ubuntu
python-rtslib-fb package

  1. Bug #1854362
  2. Comment #45

Comment 45 for bug 1854362

Revision history for this message
Alex Murray (alexmurray) wrote :

Upstream have merged in a fix for the world-writable targetcli-fb daemon socket - https://github.com/open-iscsi/targetcli-fb/issues/162 - and assigned CVE-2020-10699 for it - but there has been no official release. With this fix in place, I would be happy to change the NACK to an ACK for targetcli-fb.