i kind of doubt it is still maintained....  guess we have to maintain it.  know anything about how to get a mounted block device to be accepted as a target backstore readonly by LIO (TCM) ? 

From: Alex Murray <alex.murray@canonical.com>
Sent: Wednesday, March 25, 2020 1:41 AM
To: targetcli-fb-devel@lists.fedorahosted.org <targetcli-fb-devel@lists.fedorahosted.org>
Subject: Recent security vulnerabilities reported but no response
 
Hi,

As per https://github.com/open-iscsi/targetcli-fb I recently reported a
couple security vulnerabilities[1][2] which I found whilst reviewing
targetcli-fb for inclusion in main in Ubuntu[3] - however, I have not
received a response. Whilst I realise it has only been a couple days,
given the potential severity of these issues I was hoping for some kind
of response - is targetcli-fb still maintained? If so, can a maintainer
please take a look at these issues?

[1] https://github.com/open-iscsi/targetcli-fb/issues/162
[2] https://github.com/open-iscsi/targetcli-fb/issues/163
[3] https://bugs.launchpad.net/ubuntu/+source/targetcli-fb/+bug/1854362

Thanks,
Alex

---
Ubuntu Security Tech Lead
_______________________________________________
targetcli-fb-devel mailing list -- targetcli-fb-devel@lists.fedorahosted.org
To unsubscribe send an email to targetcli-fb-devel-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/targetcli-fb-devel@lists.fedorahosted.org