Hi,
As per
https://github.com/open-iscsi/targetcli-fb I recently reported a
couple security vulnerabilities[1][2] which I found whilst reviewing
targetcli-fb for inclusion in main in Ubuntu[3] - however, I have not
received a response. Whilst I realise it has only been a couple days,
given the potential severity of these issues I was hoping for some kind
of response - is targetcli-fb still maintained? If so, can a maintainer
please take a look at these issues?
[1]
https://github.com/open-iscsi/targetcli-fb/issues/162
[2]
https://github.com/open-iscsi/targetcli-fb/issues/163
[3]
https://bugs.launchpad.net/ubuntu/+source/targetcli-fb/+bug/1854362
Thanks,
Alex
---
Ubuntu Security Tech Lead