Skip to content
OpenAdvisories
Medium RLSA-2026:89905 6 CVEs

Moderate: freeipmi security, bug fix, and enhancement update

Published Oct 27, 2026 · Updated Oct 27, 2026

Ecosystem: Rocky Linux

Summary

The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification.

Security Fix(es):

* FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses (CVE-2026-85504)

* FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow (CVE-2026-85507)

* FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow in ipmi-oem (CVE-2026-85506)

* FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow (CVE-2026-85509)

* FreeIPMI: FreeIPMI: Denial of Service via stack-based buffer over-read in ipmi-oem (CVE-2026-85505)

* freeipmi: FreeIPMI: stack-based buffer overflow in ipmi-oem Dell system info handler (CVE-2026-85508)

Bug Fix(es) and Enhancement(s):

* Update freeipmi to 1.6.20 to fix two potential buffer overflows [rhel-10.2.z] (JIRA:Rocky Linux-279524)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 10 freeipmi 0:1.6.20-1.el10_2

Vulnerabilities 6

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2528390
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2528396
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2528398
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2528399
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2528400
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2528401
  • advisory
    https://access.redhat.com/errata/RHSA-2026:89905