Ubuntu
open-iscsi package

  1. Bug #408915
  2. Comment #4

Comment 4 for bug 408915

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package open-iscsi - 2.0.870.1-0ubuntu11

---------------
open-iscsi (2.0.870.1-0ubuntu11) karmic; urgency=low

  * open-iscsi-utils Replaces: old versions of open-iscsi.
  * SECURITY UPDATE: temporary file vulnerability (LP: #408915)
    - utils/iscsi_discovery: store iscsiadm -m discovery result in a
      variable rather than writing it to an insecurely-created temporary
      file
    - CVE-2009-1297

 -- Colin Watson <email address hidden> Mon, 24 Aug 2009 23:42:10 +0100