Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-85504: FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text responses.
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | freeipmi | 0:1.5.7-3.amzn2.0.1 |
| Amazon Linux · 2 | freeipmi-bmc-watchdog | 0:1.5.7-3.amzn2.0.1 |
| Amazon Linux · 2 | freeipmi-debuginfo | 0:1.5.7-3.amzn2.0.1 |
| Amazon Linux · 2 | freeipmi-devel | 0:1.5.7-3.amzn2.0.1 |
| Amazon Linux · 2 | freeipmi-ipmidetectd | 0:1.5.7-3.amzn2.0.1 |
| Amazon Linux · 2 | freeipmi-ipmiseld | 0:1.5.7-3.amzn2.0.1 |
Vulnerabilities 1
-
Critical 9.8
FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text in libfreeipm…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2026-85504.html