Summary
The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification.
Security Fix(es):
* FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses (CVE-2026-85504)
* FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow (CVE-2026-85507)
* FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow in ipmi-oem (CVE-2026-85506)
* FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow (CVE-2026-85509)
* FreeIPMI: FreeIPMI: Denial of Service via stack-based buffer over-read in ipmi-oem (CVE-2026-85505)
* freeipmi: FreeIPMI: stack-based buffer overflow in ipmi-oem Dell system info handler (CVE-2026-85508)
Bug Fix(es) and Enhancement(s):
* Update freeipmi to 1.6.20 to fix two potential buffer overflows [almalinux-9.8.z] (JIRA:AlmaLinux-279523)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | freeipmi | 1.6.20-1.el9_8 |
| AlmaLinux · 9 | freeipmi-bmc-watchdog | 1.6.20-1.el9_8 |
| AlmaLinux · 9 | freeipmi-devel | 1.6.20-1.el9_8 |
| AlmaLinux · 9 | freeipmi-ipmidetectd | 1.6.20-1.el9_8 |
| AlmaLinux · 9 | freeipmi-ipmiseld | 1.6.20-1.el9_8 |
Vulnerabilities 6
-
Critical 9.8
FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text in libfreeipm…
-
Critical 9.8
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _get_dell_system_info_idrac_info in ipmi-oem/ip…
-
Critical 9.8
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_info in ipmi-oem/i…
-
Critical 9.8
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_ipv6_info in ipmi-…
-
Critical 9.8
FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC ret…
-
High 7.5
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmi_oem_fujitsu_get_sel_entry_long_text in ip…
References
-
report
https://access.redhat.com/security/cve/CVE-2026-85504
-
report
https://access.redhat.com/security/cve/CVE-2026-85505
-
report
https://access.redhat.com/security/cve/CVE-2026-85506
-
report
https://access.redhat.com/security/cve/CVE-2026-85507
-
report
https://access.redhat.com/security/cve/CVE-2026-85508
-
report
https://access.redhat.com/security/cve/CVE-2026-85509
-
report
https://bugzilla.redhat.com/2528390
-
report
https://bugzilla.redhat.com/2528396
-
report
https://bugzilla.redhat.com/2528398
-
report
https://bugzilla.redhat.com/2528399
-
report
https://bugzilla.redhat.com/2528400
-
report
https://bugzilla.redhat.com/2528401
-
advisory
https://errata.almalinux.org/9/ALSA-2026-89753.html