i kind of doubt it is still maintained.... guess we have to maintain it. know anything
about how to get a mounted block device to be accepted as a target backstore readonly by
LIO (TCM) ?
________________________________
From: Alex Murray <alex.murray(a)canonical.com>
Sent: Wednesday, March 25, 2020 1:41 AM
To: targetcli-fb-devel(a)lists.fedorahosted.org
<targetcli-fb-devel(a)lists.fedorahosted.org>
Subject: Recent security vulnerabilities reported but no response
Hi,
As per
https://github.com/open-iscsi/targetcli-fb I recently reported a
couple security vulnerabilities[1][2] which I found whilst reviewing
targetcli-fb for inclusion in main in Ubuntu[3] - however, I have not
received a response. Whilst I realise it has only been a couple days,
given the potential severity of these issues I was hoping for some kind
of response - is targetcli-fb still maintained? If so, can a maintainer
please take a look at these issues?
[1]
https://github.com/open-iscsi/targetcli-fb/issues/162
[2]
https://github.com/open-iscsi/targetcli-fb/issues/163
[3]
https://bugs.launchpad.net/ubuntu/+source/targetcli-fb/+bug/1854362
Thanks,
Alex
---
Ubuntu Security Tech Lead
_______________________________________________
targetcli-fb-devel mailing list -- targetcli-fb-devel(a)lists.fedorahosted.org
To unsubscribe send an email to targetcli-fb-devel-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/targetcli-fb-devel@lists.fed...