[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <225905f1-c362-4ff9-9143-63b97fa9e3c7@oracle.com>
Date: Tue, 2 Jun 2026 17:52:56 -0700
From: Alan Coopersmith <alan.coopersmith@...cle.com>
To: oss-security@...ts.openwall.com
Subject: Fwd: FreeIPMI 1.6.18 Released with security fixes
The below notes the new release fixes "exploitable buffer overflows in [...]
ipmi-oem commands".
I don't see a CVE issued for it yet, as CVE-2026-33554 covered a different
set of subcommands fixed in the previous 1.6.17 release.
-------- Forwarded Message --------
Subject: FreeIPMI 1.6.18 Released
Date: Tue, 2 Jun 2026 17:42:47 +0000
From: Chu, Al <chu11@...l.gov>
To: info-gnu@....org <info-gnu@....org>
FreeIPMI 1.6.18 has been released. It can be downloaded at:
http://www.gnu.org/software/freeipmi/download.html
What is IPMI?
The Intelligent Platform Management Interface (IPMI) specification
defines a set of interfaces for platform management. It is
implemented by a large number of hardware manufacturers to support
system management on motherboards. The features of IPMI that most
users will be interested in are sensor monitoring (i.e. CPU
temperatures, fan speeds), remote power control, and serial-over-LAN
(SOL).
What is FreeIPMI?
FreeIPMI provides in-band and out-of-band IPMI software based on the
IPMI v1.5/2.0 specification. FreeIPMI provides tools and libraries
for users to access and read IPMI sensor readings, system event log
(SEL) entries, serial-over-LAN (SOL), remote power control functions,
field replaceable unit (FRU) device information, and more. More
information about FreeIPMI can be found at the FreeIPMI webpage at:
http://www.gnu.org/software/freeipmi/index.html
Release 1.6.18 Changes
---------------------
o Support new "altbridging" workaround in ipmi-sensors.
o Fix exploitable buffer overflows in the following ipmi-oem commands:
- ipmi-oem dell get-active-directory-config
- ipmi-oem fujitsu get-sel-entry-long-text
--
Al Chu
Livermore Computing
Lawrence Livermore National Laboratory
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
