RHSA-2026:59999: Important: isns-utils security update

Q: Which packages should be included in remediation planning?

The advisory lists isns-utils, isns-utils-libs, and their debuginfo and debugsource packages: isns-utils-debuginfo, isns-utils-debugsource, and isns-utils-libs-debuginfo.

Q: Which Red Hat offerings are listed as affected?

The listed offerings are Red Hat Enterprise Linux Server - AUS, Red Hat Enterprise Linux for Power little endian - Extended Life Cycle, and Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions.

Q: Does the supplied advisory data provide affected version ranges, a workaround, or detection guidance?

No. It does not state affected or fixed versions, configuration conditions, temporary mitigations, or indicators for determining whether an installation has been exploited.

Published Aug 26, 2026

Updated

Important: isns-utils security update

Other sources

The iSNS package contains the daemon and tools to setup a iSNS server, and iSNS client tools. The Internet Storage Name Service (iSNS) protocol allows automated discovery, management and configuration of iSCSI and Fibre Channel devices (using iFCP gateways) on a TCP/IP network.Security Fix(es): open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder (CVE-2026-55995) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

— Red Hat

Affected Software

29 affected componentsFixes available

Red Hat Red Hat Enterprise Linux Server - AUS

Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle

Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions

Red Hat Red Hat Enterprise Linux for ARM 64 - 4 years of updates

Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions

Red Hat Red Hat Enterprise Linux for x86_64 - Extended Life Cycle

Red Hat Red Hat Enterprise Linux for IBM z Systems - 4 years of updates

Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle

Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle

redhat/isns-utils<0.101-4.el9_2.1

0.101-4.el9_2.1

redhat/isns-utils<0.101-4.el9_2.1

0.101-4.el9_2.1

redhat/isns-utils-debuginfo<0.101-4.el9_2.1

0.101-4.el9_2.1

redhat/isns-utils-debuginfo<0.101-4.el9_2.1

0.101-4.el9_2.1

redhat/isns-utils-debugsource<0.101-4.el9_2.1

0.101-4.el9_2.1

redhat/isns-utils-debugsource<0.101-4.el9_2.1

0.101-4.el9_2.1

redhat/isns-utils-libs<0.101-4.el9_2.1

0.101-4.el9_2.1

redhat/isns-utils-libs<0.101-4.el9_2.1

0.101-4.el9_2.1

redhat/isns-utils-libs-debuginfo<0.101-4.el9_2.1

0.101-4.el9_2.1

redhat/isns-utils-libs-debuginfo<0.101-4.el9_2.1

0.101-4.el9_2.1

redhat/isns-utils<0.101-4.el9_2.1

0.101-4.el9_2.1

redhat/isns-utils-debuginfo<0.101-4.el9_2.1

0.101-4.el9_2.1

redhat/isns-utils-debugsource<0.101-4.el9_2.1

0.101-4.el9_2.1

redhat/isns-utils-libs<0.101-4.el9_2.1

0.101-4.el9_2.1

redhat/isns-utils-libs-debuginfo<0.101-4.el9_2.1

0.101-4.el9_2.1

redhat/isns-utils<0.101-4.el9_2.1.aa

0.101-4.el9_2.1.aa

redhat/isns-utils-debuginfo<0.101-4.el9_2.1.aa

0.101-4.el9_2.1.aa

redhat/isns-utils-debugsource<0.101-4.el9_2.1.aa

0.101-4.el9_2.1.aa

redhat/isns-utils-libs<0.101-4.el9_2.1.aa

0.101-4.el9_2.1.aa

redhat/isns-utils-libs-debuginfo<0.101-4.el9_2.1.aa

0.101-4.el9_2.1.aa

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade redhat/isns-utils to a version that resolves this vulnerability.
Fixed in 0.101-4.el9_2.1
Upgrade
Upgrade redhat/isns-utils-debuginfo to a version that resolves this vulnerability.
Fixed in 0.101-4.el9_2.1
Upgrade
Upgrade redhat/isns-utils-debugsource to a version that resolves this vulnerability.
Fixed in 0.101-4.el9_2.1
Upgrade
Upgrade redhat/isns-utils-libs to a version that resolves this vulnerability.
Fixed in 0.101-4.el9_2.1
Upgrade
Upgrade redhat/isns-utils-libs-debuginfo to a version that resolves this vulnerability.
Fixed in 0.101-4.el9_2.1
Upgrade
Upgrade redhat/isns-utils to a version that resolves this vulnerability.
Fixed in 0.101-4.el9_2.1.aa
Upgrade
Upgrade redhat/isns-utils-debuginfo to a version that resolves this vulnerability.
Fixed in 0.101-4.el9_2.1.aa
Upgrade
Upgrade redhat/isns-utils-debugsource to a version that resolves this vulnerability.
Fixed in 0.101-4.el9_2.1.aa
Upgrade
Upgrade redhat/isns-utils-libs to a version that resolves this vulnerability.
Fixed in 0.101-4.el9_2.1.aa
Upgrade
Upgrade redhat/isns-utils-libs-debuginfo to a version that resolves this vulnerability.
Fixed in 0.101-4.el9_2.1.aa
Upgrade
Upgrade open-isns / open-iscsi (iSNS) to a version that resolves this vulnerability.
Patch CVE-2026-55995

Event History

Aug 26, 2026

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Advisory Published

via Red Hat·07:32 AM

Data Sourced

via Red Hat·07:32 AM

Severity

Frequently Asked Questions

Which packages should be included in remediation planning?

The advisory lists isns-utils, isns-utils-libs, and their debuginfo and debugsource packages: isns-utils-debuginfo, isns-utils-debugsource, and isns-utils-libs-debuginfo.

Which Red Hat offerings are listed as affected?

The listed offerings are Red Hat Enterprise Linux Server - AUS, Red Hat Enterprise Linux for Power little endian - Extended Life Cycle, and Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions.

Does the supplied advisory data provide affected version ranges, a workaround, or detection guidance?

No. It does not state affected or fixed versions, configuration conditions, temporary mitigations, or indicators for determining whether an installation has been exploited.

RHSA-2026:59999: Important: isns-utils security update

Other sources

Affected Software

Remediation

Event History

Frequently Asked Questions

Which packages should be included in remediation planning?

Which Red Hat offerings are listed as affected?

Does the supplied advisory data provide affected version ranges, a workaround, or detection guidance?

Company

Resources

Contact

Frequently Asked Questions

Which packages should be included in remediation planning?

Which Red Hat offerings are listed as affected?

Does the supplied advisory data provide affected version ranges, a workaround, or detection guidance?