USN-7024-1: tgt vulnerability
19 September 2024
tgt could be made to generate identical sequence of challenges.
Releases
Packages
- tgt - Linux SCSI target user-space daemon and tools
Details
It was discovered that tgt attempts to achieve entropy
by calling rand without srand. The PRNG seed is always 1,
and thus the sequence of challenges is always identical.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 20.04
In general, a standard system update will make all the necessary changes.