UbuntuUpdates.org

Package "libfreeipmi17"

Name: libfreeipmi17

Description:

GNU IPMI - libraries
Latest version: 1.6.9-2ubuntu0.22.04.4
Release: jammy (22.04)
Level: security
Repository: main
Head package: freeipmi
Homepage: https://www.gnu.org/software/freeipmi/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libfreeipmi17"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libfreeipmi17" in Jammy

Repository Area Version
base main 1.6.9-2
updates main 1.6.9-2ubuntu0.22.04.4

Changelog

Version: 1.6.9-2ubuntu0.22.04.4 2026-09-29 15:07:16 UTC

freeipmi (1.6.9-2ubuntu0.22.04.4) jammy-security; urgency=medium

  * SECURITY UPDATE: stack overflow in libfreeipmi Fujitsu SEL parsing
    - debian/patches/CVE-2026-85504.patch: reject short and oversized
      responses and bound each text chunk in
      libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c.
    - CVE-2026-85504
  * SECURITY UPDATE: stack over-read in ipmi-oem Fujitsu SEL long-text
    - debian/patches/CVE-2026-85505.patch: copy only the remaining
      data_length bytes in ipmi-oem/ipmi-oem-fujitsu.c.
    - CVE-2026-85505
  * SECURITY UPDATE: stack overflow in ipmi-oem Dell idrac-info
    - debian/patches/CVE-2026-85506.patch: check idrac_info buffer size
      before copying in ipmi-oem/ipmi-oem-dell.c.
    - CVE-2026-85506
  * SECURITY UPDATE: stack overflow in ipmi-oem Dell cmc-info
    - debian/patches/CVE-2026-85507.patch: check cmc_info buffer size
      before copying in ipmi-oem/ipmi-oem-dell.c.
    - CVE-2026-85507
  * SECURITY UPDATE: stack overflow in ipmi-oem Dell cmc-ipv6-info
    - debian/patches/CVE-2026-85508.patch: check cmc_ipv6_info buffer size
      before copying in ipmi-oem/ipmi-oem-dell.c.
    - CVE-2026-85508
  * SECURITY UPDATE: stack overflow in libfreeipmi FRU reading
    - debian/patches/CVE-2026-85509.patch: reject a count_returned larger
      than requested in libfreeipmi/fru/ipmi-fru.c.
    - CVE-2026-85509

 -- Charles Cochran Fri, 25 Sep 2026 15:46:53 -0400
Source diff to previous version
CVE-2026-85504 FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text in libfreeipmi/sel/ipmi-sel-string-fujitsu-
CVE-2026-85505 ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmi_oem_fujitsu_get_sel_entry_long_text in ipmi-oem/ipmi-oem-fujitsu.c when
CVE-2026-85506 ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _get_dell_system_info_idrac_info in ipmi-oem/ipmi-oem-dell.c (idrac-info subc
CVE-2026-85507 ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_info in ipmi-oem/ipmi-oem-dell.c (cmc-info subco
CVE-2026-85508 ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_ipv6_info in ipmi-oem/ipmi-oem-dell.c (cmc-ipv6-
CVE-2026-85509 FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than requested

Version: 1.6.9-2ubuntu0.22.04.3 2026-07-27 16:10:28 UTC
No changelog available yet.


About   -   Send Feedback to @ubuntu_updates