CentOS 7 : python-rtslib (RHSA-2020:5435)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5435 advisory. - Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile instead of shutil.copy is used, and thus...

RHEL 7 : python-rtslib (RHSA-2020:5435)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5435 advisory. The python-rtslib package provides a Python library to configure the kernel target subsystem, using the configfs file system. The following packages...

python security update

CentOS Errata and Security Advisory CESA-2020:5435 An update for python-rtslib is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CentOS: Security Advisory for python-rtslib (CESA-2020:5435)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

python-rtslib security update

2.1.74-1.0.1 - Add patch 0005-allow-mixed-case-in-oracle-iqns to fix Orabug: 27613482 - Add patch 0004-allow-underscore-in-oracle-iqns to fix Orabug: 27582660 - Add patch 0014-reenable-vhost to fix Orabug: 27707403 2.1.74-1 - Rebase to the latest upstream version...

Oracle Linux 7 : python-rtslib (ELSA-2020-5435)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5435 advisory. 2.1.74-1.0.1 - Add patch 0005-allow-mixed-case-in-oracle-iqns to fix Orabug: 27613482 - Add patch 0004-allow-underscore-in-oracle-iqns to fix Orabug: 27582660 -...

python-rtslib: weak permissions for /etc/target/saveconfig.json

A flaw was found in Open-iSCSI rtslib-fb through versions 2.1.72, where it has weak permissions for /etc/target/saveconfig.json because the shutil.copyfile, instead of shutil.copy is used, and permissions are not preserved upon editing. This flaw allows an attacker with prior access to...

Moderate: Red Hat Security Advisory: python-rtslib security update

An update for python-rtslib is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Scientific Linux Security Update : python-rtslib on SL7.x (noarch) (2020:5435)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2020:5435-1 advisory. - python-rtslib: weak permissions for /etc/target/saveconfig.json CVE-2020-14019 Note that Nessus has not tested for this issue but has instead relied onl...

EulerOS Virtualization 3.0.6.6 : python-rtslib (EulerOS-SA-2020-2474)

According to the version of the python-rtslib package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile instead of...

Huawei EulerOS: Security Advisory for python-rtslib (EulerOS-SA-2020-2474)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate: Red Hat Enhancement Advisory: python-rtslib bug fix and enhancement update

An update for python-rtslib is now available for Red Hat Enterprise Linux 8. For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes linked from the References section...

python-rtslib: weak permissions for /etc/target/saveconfig.json

A flaw was found in Open-iSCSI rtslib-fb through versions 2.1.72, where it has weak permissions for /etc/target/saveconfig.json because the shutil.copyfile, instead of shutil.copy is used, and permissions are not preserved upon editing. This flaw allows an attacker with prior access to...

python-rtslib bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

Huawei EulerOS: Security Advisory for python-rtslib (EulerOS-SA-2020-2268)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : python-rtslib (EulerOS-SA-2020-2268)

According to the version of the python-rtslib package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile instead of shutil.copy is...

EulerOS Virtualization for ARM 64 3.0.2.0 : python-rtslib (EulerOS-SA-2020-1983)

According to the version of the python-rtslib package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - A flaw was found in Open-iSCSI rtslib-fb through versions 2.1.72, where it has weak permissions for...

Huawei EulerOS: Security Advisory for python-rtslib (EulerOS-SA-2020-1983)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated python-rstlib packages fix security vulnerability

Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile instead of shutil.copy is used and thus permissions are not preserved upon editing. An adversary with prior access to /etc/target/saveconfig.json could access a later version, resultin...

The vulnerability of the rtslib-fb library is related to incorrect default access rights settings, which allow attackers to execute arbitrary code.

The vulnerability in the /etc/target/saveconfig.json file of the rtslib-fb library is related to incorrect default access permissions settings. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending specially crafted data to the application...