ELSA-2026-53845

ELSA-2026-53845 - iscsi-initiator-utils security, bug fix, and enhancement update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-08-13

Description

[6.2.1.11-1.git4b3e853.0.1.el10_2.2]
- Validate interface IP against target address family [Orabug: 39491397]
- iscsi delay reconnect until interface has valid IP [Orabug: 38445491]
- Change the order of restart iscsi services in spec file [Orabug: 37749406]
- Change the log_level of log_debug message in actor_delete()
- Remove 'After' keyword from install section [Orabug: 37520817]
- Add python3-rpm-macros to BuildRequires
- Allow systemd-remount-fs complete before iscsi-init.service [Orabug: 34325406]
- Allow iscsi-init.service to start after local-fs.target [Orabug: 33930979]
- Rename 0008-use-red-hat-name.patch to 0008-use-oracle-for-name.patch
and use com.oracle in prefix
- Complete the following tasks to address [Orabug: 29311709]
The following patches address [Orabug: 29128380] (Jianchao Wang)
Add 0032-Add-Requires-iscsid.service-in-iscsi.service.patch
The following patch addresses [Orabug: 29306329]
Add 0033-Update-systemd-to-always-restart-iscsid-service.patch
- Print vital iscsid messages on console using rsyslog facility. This
is particularly useful when using iscsi boot and there is a connection
or session issue. [Orabug: 29503805]
- Modify iscsi-mark-root-nodes script to only update node.startup to onboot
for iscsi sessions that are active during boot. [Orabug: 29653342]
- Modify iscsi-mark-root nodes script to not mark nodes when iscsi.service
is restarted. [Orabug: 29851447]
- Modify patches 0007 and 0032-0035 to apply cleanly
- Tune TimeoutSec of iscsid service to 10 minutes [Orabug: 29869817]

[6.2.1.11-1.git4b3e853.2]
- fix IQN name validation to prevent path traversal (CVE-2026-44943)
- fix iscsiuio control-socket credential verification (CVE-2026-44944)

[6.2.1.11-1.git4b3e853.1]
- fix IQN name validation to prevent path traversal (CVE-2026-44943)
- fix iscsiuio control-socket credential verification (CVE-2026-44944)

[6.2.1.11-1.git4b3e853]
- fix regression in fw and static node records

Related CVEs

CVE-2026-44943

CVE-2026-44944

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	iscsi-initiator-utils-6.2.1.11-1.git4b3e853.0.1.el10_2.2.src.rpm	848a2386b8281428755a2b62e3ca4262f48aa0bc781194b330eb095db8f83e71	-	ol10_aarch64_appstream
	iscsi-initiator-utils-6.2.1.11-1.git4b3e853.0.1.el10_2.2.src.rpm	848a2386b8281428755a2b62e3ca4262f48aa0bc781194b330eb095db8f83e71	-	ol10_aarch64_baseos_latest
	iscsi-initiator-utils-6.2.1.11-1.git4b3e853.0.1.el10_2.2.src.rpm	848a2386b8281428755a2b62e3ca4262f48aa0bc781194b330eb095db8f83e71	-	ol10_aarch64_u2_baseos_patch
	iscsi-initiator-utils-6.2.1.11-1.git4b3e853.0.1.el10_2.2.aarch64.rpm	14048f3e525d6f9fe177cacdc003046b3fadd8e2a7ba1ffed37232e39387cac5	-	ol10_aarch64_baseos_latest
	iscsi-initiator-utils-6.2.1.11-1.git4b3e853.0.1.el10_2.2.aarch64.rpm	14048f3e525d6f9fe177cacdc003046b3fadd8e2a7ba1ffed37232e39387cac5	-	ol10_aarch64_u2_baseos_patch
	iscsi-initiator-utils-iscsiuio-6.2.1.11-1.git4b3e853.0.1.el10_2.2.aarch64.rpm	a6f10ebdcba3312493c336f82ce7b41c32e393bbd5def095a5025713ea79fce4	-	ol10_aarch64_baseos_latest
	iscsi-initiator-utils-iscsiuio-6.2.1.11-1.git4b3e853.0.1.el10_2.2.aarch64.rpm	a6f10ebdcba3312493c336f82ce7b41c32e393bbd5def095a5025713ea79fce4	-	ol10_aarch64_u2_baseos_patch
	python3-iscsi-initiator-utils-6.2.1.11-1.git4b3e853.0.1.el10_2.2.aarch64.rpm	a95504a88270d1c6ef90066c05dbdff3980e54c25b8cdb216e10a7ca814606a7	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	iscsi-initiator-utils-6.2.1.11-1.git4b3e853.0.1.el10_2.2.src.rpm	848a2386b8281428755a2b62e3ca4262f48aa0bc781194b330eb095db8f83e71	-	ol10_x86_64_appstream
	iscsi-initiator-utils-6.2.1.11-1.git4b3e853.0.1.el10_2.2.src.rpm	848a2386b8281428755a2b62e3ca4262f48aa0bc781194b330eb095db8f83e71	-	ol10_x86_64_baseos_latest
	iscsi-initiator-utils-6.2.1.11-1.git4b3e853.0.1.el10_2.2.src.rpm	848a2386b8281428755a2b62e3ca4262f48aa0bc781194b330eb095db8f83e71	-	ol10_x86_64_u2_baseos_patch
	iscsi-initiator-utils-6.2.1.11-1.git4b3e853.0.1.el10_2.2.x86_64.rpm	c2d312ea8be7eafb146f9dbf6a27baafe22fc08ae644d995c982b62c2a382158	-	ol10_x86_64_baseos_latest
	iscsi-initiator-utils-6.2.1.11-1.git4b3e853.0.1.el10_2.2.x86_64.rpm	c2d312ea8be7eafb146f9dbf6a27baafe22fc08ae644d995c982b62c2a382158	-	ol10_x86_64_u2_baseos_patch
	iscsi-initiator-utils-iscsiuio-6.2.1.11-1.git4b3e853.0.1.el10_2.2.x86_64.rpm	f4662ffa130a8497ee6e68dc1896c2afa0f0dd34c3b8d49fd62551384eff53f0	-	ol10_x86_64_baseos_latest
	iscsi-initiator-utils-iscsiuio-6.2.1.11-1.git4b3e853.0.1.el10_2.2.x86_64.rpm	f4662ffa130a8497ee6e68dc1896c2afa0f0dd34c3b8d49fd62551384eff53f0	-	ol10_x86_64_u2_baseos_patch
	python3-iscsi-initiator-utils-6.2.1.11-1.git4b3e853.0.1.el10_2.2.x86_64.rpm	ead2239c4a24e676764ba745f353bbad55b844c9c7fb489a4e21856c5075e7ad	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team