open-isns CVE-2026-55995

Upstream fix available (commit 56718d4e9d1a4f51c30697b5c0534144bb41c9bb); a released patched version is not independently confirmed from the input, so update open-isns/open-iscsi to a distribution build that incorporates this commit as soon as your vendor ships it - track the SUSE bug at https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-55995 and the upstream commit at https://github.com/open-iscsi/open-isns/commit/56718d4e9d1a4f51c30697b5c0534144bb41c9bb. As compensating controls until patched: if iSNS discovery is not used, disable it in your iSCSI initiator/target configuration to remove the vulnerable code path entirely; where iSNS is required, restrict iSNS server/client communication to a dedicated, isolated storage VLAN and enforce authenticated/integrity-protected transport (e.g., IPsec) to deny the MITM position the attack depends on. The trade-off of disabling iSNS is loss of automatic target discovery (requiring static target configuration), and network isolation/IPsec adds operational overhead but directly negates the required attacker position.