SUSE-SU-2026:5224-1: important: Security update for open-iscsi

SLE-UPDATES null at suse.de
Fri Nov 13 08:31:59 UTC 2026 

# Security update for open-iscsi

Announcement ID: SUSE-SU-2026:5224-1  
Release Date: 2026-11-12T17:56:41Z  
Rating: important  
References:

  * bsc#1228084
  * bsc#1239107
  * bsc#1240541
  * bsc#1240969
  * bsc#1268352
  * bsc#1268353
  * bsc#1275171
  * bsc#1275258
  * bsc#1275260
  * bsc#1275261
  * bsc#1275262
  * jsc#PED-266

  
Cross-References:

  * CVE-2026-18724
  * CVE-2026-18725
  * CVE-2026-18726
  * CVE-2026-18727
  * CVE-2026-18728
  * CVE-2026-44943
  * CVE-2026-44944

  
CVSS scores:

  * CVE-2026-18724 ( SUSE ):  5.9
    CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
  * CVE-2026-18724 ( SUSE ):  5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H
  * CVE-2026-18725 ( SUSE ):  5.3
    CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
  * CVE-2026-18725 ( SUSE ):  6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
  * CVE-2026-18726 ( SUSE ):  7.1
    CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
  * CVE-2026-18726 ( SUSE ):  6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  * CVE-2026-18726 ( NVD ):  6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  * CVE-2026-18727 ( SUSE ):  6.0
    CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
  * CVE-2026-18727 ( SUSE ):  5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
  * CVE-2026-18727 ( NVD ):  6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  * CVE-2026-18728 ( SUSE ):  6.0
    CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
  * CVE-2026-18728 ( SUSE ):  5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
  * CVE-2026-18728 ( NVD ):  6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  * CVE-2026-44943 ( SUSE ):  8.6
    CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
  * CVE-2026-44943 ( SUSE ):  8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  * CVE-2026-44943 ( NVD ):  6.9
    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
  * CVE-2026-44944 ( SUSE ):  8.6
    CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
  * CVE-2026-44944 ( SUSE ):  8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  * CVE-2026-44944 ( NVD ):  8.5
    CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  
Affected Products:

  * openSUSE Leap 15.5
  * SUSE Linux Enterprise High Performance Computing 15 SP5
  * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5
  * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5
  * SUSE Linux Enterprise Micro 5.5
  * SUSE Linux Enterprise Server 15 SP5
  * SUSE Linux Enterprise Server 15 SP5 LTSS
  * SUSE Linux Enterprise Server for SAP Applications 15 SP5

  
  
An update that solves seven vulnerabilities, contains one feature and has four
security fixes can now be installed.

## Description:

This update for open-iscsi fixes the following issues:

  * CVE-2026-18724: stack buffer overflow in idbm record parsing (bsc#1275171).
  * CVE-2026-18725: out-of-bounds access in iscsiuio ICMPv6 echo handling
    (bsc#1275258).
  * CVE-2026-18726: denial of service in iscsiuio Router Advertisement parsing
    (bsc#1275260).
  * CVE-2026-18727: integer underflow in iscsiuio DHCPv6 parsing (bsc#1275261).
  * CVE-2026-18728: integer underflow in iscsiuio IPv4 DHCP parsing
    (bsc#1275262).
  * CVE-2026-44943: remote file-write as root via discovery (bsc#1268353).
  * CVE-2026-44944: iscsiuio control-socket auth bypass (bsc#1268352).

Changes for open-iscsi:

  * Update to version 2.1.13.suse+4.dc2446a1:
  * iscsid: honor REPORT LUNS DATA HAS CHANGED again (#557)
  * Convert shell scripts to POSIX sh (#552)
  * Preparing for version 2.1.13
  * iscsiuio: fix incorrect comparison of IPv6 subnet mask
  * usr: verify IPC peer credentials before sending data
  * login: fix infinite redirect loops with configurable limits
  * iscsiuio: strengthen IPv6 payload length validation in uip_process()
  * iscsiuio: strengthen DHCPv6 option parsing loop bound check
  * iscsiuio: validate DHCPv6 IA_NA option lengths to prevent OOB reads
  * usr: network code ioctl handling improvements
  * fix typo in user-facing error message in verify_mode_params() (#548)
  * gitignore: ignore generated build artifacts (#550)
  * iscsiadm: handle getopt errors directly (#551)
  * Fix iscsi_conn_iface_has_ip error handling (#531)
  * Fix reopen log freq change (#542)
  * iscsi_net_util: fix broken VLAN support in find_vlan_dev (#545)
  * Fixes for CVEs CVE-2026-18724 - CVE-2026-18728 (#544)
  * usr: fix "-Wdiscarded-qualifiers" warning in auth.c (#539)
  * usr: Fix -Wdiscarded-qualifiers warning in iqn_name_valid (#537)
  * iscsiuio: Fix -Waddress-of-packed-member (#534)
  * Update to version 2.1.12.suse+0.8f77cf16:
  * Preparing for version 2.1.12 (#536)
  * iscsi-init.service: Use iscsi-gen-initiatorname
  * iscsi-gen-initiatorname use @IQN_PREFIX@ as default
  * avoid possible double free of found in idbm_rec_update_param (#528)
  * iscsi: validate interface IP against target address family (#527)
  * Update to version 2.1.11.suse+88.8e0635b3:
  * Make iface.example a doc file. (#526)
  * Updated SPEC file to deliver iface.example as a %doc file, no longer in the
    database directory.
  * Update to version 2.1.11.suse+85.4ef97a15:
  * Fix unused variable warning in usr/io.c (#524)
  * Remove old rpm subdirectory, no longer needed.
  * Add tcp.congestion_control configuration option (#520)
  * Small cleanups for firmware discovery. (#522)
  * Fix incorrect parsing of node.discovery_type "static" and "fw" (#518)
  * iscsi_net_util: avoid copying NULL pointers with strlcpy() (#515)
  * iscsi: delay reconnect until interface has valid IP. (#511)
  * Update to version 2.1.11.suse+73.1723affc61eb:
  * README for rpm build directory
  * Fix issue with IPv6 adapter interfaces (#508, bsc#1240969)
  * fwparam_ppc.c: Fix the calloc-transposed-args issue (#504)
  * Makefile: fix "No rule to make target 'iscsiuio/Makefile.in" issue (#506)
  * Fix typo in initiator.c (#507)
  * Update to version 2.1.11.suse+66.13c070123738:
  * Fix iscsid.conf NOP configuration (bsc#1240541)
  * Change SPEC file so that open-iscsi lock files always go in /run/lock/iscsi
    (bsc#1239107).
  * Update to version 2.1.11.suse+65.65365e1cdedb:
  * doc: fixup iscsiadm man page option for -r (#501)
  * Modify log function to print session id (#498)
  * Fix minor typo ("authenticaton") (#500)
  * Preparing for version 2.1.11 (#499)
  * iscsid: Rate limit session reopen log messages (#492)
  * IPv6 support for iBFT iSCSI boot (#493)
  * Improve iscsiadm command line parsing messages (#494)
  * More testing cleanup, and fix dprint test usage (#491)
  * Fix a typo in test/README (#486)
  * iscsid: Fix hang during login with scan=manual (#485)
  * fix 4 issues which are finded when building with clang 17 (#478)
  * Drop rcFOO symlinks for CODE16 (jsc#PED-266).
  * Update to version 2.1.10.suse+51.fea0fde82ed1:
  * Incudes upstream version 2.1.10 plus some fixes
  * Fix firmware targets startup to always be "onboot" (#482) (bsc#1228084)
  * Change a discovery function to void return type (#481)
  * Fix gcc issues (#480)
  * Bugfix read specific sysfs value "off" of session attribute (#466)
  * Fix bug where abort_tmo read failures were ignored. (#467)
  * grammar nitpicks (#464)
  * Fix memory leak in iscsi_check_session_use_count (#465)
  * improve the comments in idbm_lock() (#458)
  * Make it visible when memory allocation failure (#457)
  * Better handle multiple iscsiadm commands (#453)
  * iscsiadm: allow hostnames in node-mode commands (#451)
  * Modify how workqueue priority is set (#445)
  * Fix authmethod check by printing a warning message when CHAP used and
    authmethod=None (#443)
  * iscsid: Rescan devices on relogin (#444)
  * Adds missing characters in README. (#440)
  * Turn off iSCSI NOP-Outs, by default.
  * fix: add usr/iscsid_req.h missinig underline (#431) (#436)
  * Updated to latest upstream: two small changes, with no known functional
    changes:
  * Incorrect documentation for `iscsiadm -m session` print level (upstream
    issue #432)
  * Stop using deprecated inet_aton and inet_ntoa (upstream issue #435)

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".  
Alternatively you can run the command listed for your product:

  * SUSE Linux Enterprise Server for SAP Applications 15 SP5  
    zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-5224

  * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5  
    zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-5224

  * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5  
    zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-5224

  * openSUSE Leap 15.5  
    zypper in -t patch SUSE-2026-5224

  * SUSE Linux Enterprise Micro 5.5  
    zypper in -t patch SUSE-SLE-Micro-5.5-2026-5224

  * SUSE Linux Enterprise Server 15 SP5 LTSS  
    zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-5224

## Package List:

  * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64)
    * iscsiuio-0.7.8.8-150500.46.6.1
    * open-iscsi-debuginfo-2.1.13-150500.46.6.1
    * open-iscsi-debugsource-2.1.13-150500.46.6.1
    * open-iscsi-2.1.13-150500.46.6.1
    * open-iscsi-devel-2.1.13-150500.46.6.1
    * libopeniscsiusr0-0.2.0-150500.46.6.1
    * iscsiuio-debuginfo-0.7.8.8-150500.46.6.1
    * libopeniscsiusr0-debuginfo-0.2.0-150500.46.6.1
  * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64
    x86_64)
    * iscsiuio-0.7.8.8-150500.46.6.1
    * open-iscsi-debuginfo-2.1.13-150500.46.6.1
    * open-iscsi-debugsource-2.1.13-150500.46.6.1
    * open-iscsi-2.1.13-150500.46.6.1
    * open-iscsi-devel-2.1.13-150500.46.6.1
    * libopeniscsiusr0-0.2.0-150500.46.6.1
    * iscsiuio-debuginfo-0.7.8.8-150500.46.6.1
    * libopeniscsiusr0-debuginfo-0.2.0-150500.46.6.1
  * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64
    x86_64)
    * iscsiuio-0.7.8.8-150500.46.6.1
    * open-iscsi-debuginfo-2.1.13-150500.46.6.1
    * open-iscsi-debugsource-2.1.13-150500.46.6.1
    * open-iscsi-2.1.13-150500.46.6.1
    * open-iscsi-devel-2.1.13-150500.46.6.1
    * libopeniscsiusr0-0.2.0-150500.46.6.1
    * iscsiuio-debuginfo-0.7.8.8-150500.46.6.1
    * libopeniscsiusr0-debuginfo-0.2.0-150500.46.6.1
  * openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64)
    * iscsiuio-0.7.8.8-150500.46.6.1
    * open-iscsi-debuginfo-2.1.13-150500.46.6.1
    * open-iscsi-debugsource-2.1.13-150500.46.6.1
    * open-iscsi-2.1.13-150500.46.6.1
    * open-iscsi-devel-2.1.13-150500.46.6.1
    * libopeniscsiusr0-0.2.0-150500.46.6.1
    * iscsiuio-debuginfo-0.7.8.8-150500.46.6.1
    * libopeniscsiusr0-debuginfo-0.2.0-150500.46.6.1
  * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64)
    * iscsiuio-0.7.8.8-150500.46.6.1
    * open-iscsi-debuginfo-2.1.13-150500.46.6.1
    * open-iscsi-debugsource-2.1.13-150500.46.6.1
    * open-iscsi-2.1.13-150500.46.6.1
    * libopeniscsiusr0-0.2.0-150500.46.6.1
    * iscsiuio-debuginfo-0.7.8.8-150500.46.6.1
    * libopeniscsiusr0-debuginfo-0.2.0-150500.46.6.1
  * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64)
    * iscsiuio-0.7.8.8-150500.46.6.1
    * open-iscsi-debuginfo-2.1.13-150500.46.6.1
    * open-iscsi-debugsource-2.1.13-150500.46.6.1
    * open-iscsi-2.1.13-150500.46.6.1
    * open-iscsi-devel-2.1.13-150500.46.6.1
    * libopeniscsiusr0-0.2.0-150500.46.6.1
    * iscsiuio-debuginfo-0.7.8.8-150500.46.6.1
    * libopeniscsiusr0-debuginfo-0.2.0-150500.46.6.1

## References:

  * https://www.suse.com/security/cve/CVE-2026-18724.html
  * https://www.suse.com/security/cve/CVE-2026-18725.html
  * https://www.suse.com/security/cve/CVE-2026-18726.html
  * https://www.suse.com/security/cve/CVE-2026-18727.html
  * https://www.suse.com/security/cve/CVE-2026-18728.html
  * https://www.suse.com/security/cve/CVE-2026-44943.html
  * https://www.suse.com/security/cve/CVE-2026-44944.html
  * https://bugzilla.suse.com/show_bug.cgi?id=1228084
  * https://bugzilla.suse.com/show_bug.cgi?id=1239107
  * https://bugzilla.suse.com/show_bug.cgi?id=1240541
  * https://bugzilla.suse.com/show_bug.cgi?id=1240969
  * https://bugzilla.suse.com/show_bug.cgi?id=1268352
  * https://bugzilla.suse.com/show_bug.cgi?id=1268353
  * https://bugzilla.suse.com/show_bug.cgi?id=1275171
  * https://bugzilla.suse.com/show_bug.cgi?id=1275258
  * https://bugzilla.suse.com/show_bug.cgi?id=1275260
  * https://bugzilla.suse.com/show_bug.cgi?id=1275261
  * https://bugzilla.suse.com/show_bug.cgi?id=1275262
  * https://jira.suse.com/browse/PED-266

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.suse.com/pipermail/sle-updates/attachments/20261113/dbe0751b/attachment.htm>

More information about the sle-updates mailing list