Summary
The OpenIPMI packages provide command-line tools and utilities to access platform information using Intelligent Platform Management Interface (IPMI). System administrators can use OpenIPMI to manage systems and to perform system health monitoring.
Security Fix(es):
* openipmi: missing check on the authorization type on incoming LAN messages in IPMI simulator (CVE-2024-42934)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | OpenIPMI | 2.0.32-5.el9_4 |
| AlmaLinux · 9 | OpenIPMI-devel | 2.0.32-5.el9_4 |
| AlmaLinux · 9 | OpenIPMI-lanserv | 2.0.32-5.el9_4 |
| AlmaLinux · 9 | OpenIPMI-libs | 2.0.32-5.el9_4 |
Vulnerabilities 1
-
Medium 5.0
OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting…