RHSA-2026:36307: Moderate: freeipmi security update
Moderate: freeipmi security update
Other sources
The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification.Security Fix(es): freeipmi: FreeIPMI: Denial of service via buffer overflow in ipmi-oem client (CVE-2026-50031) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/freeipmito a version that resolves this vulnerability.Fixed in 1.6.18-1.el8_10 - Upgrade
Upgrade
redhat/freeipmi-bmc-watchdogto a version that resolves this vulnerability.Fixed in 1.6.18-1.el8_10 - Upgrade
Upgrade
redhat/freeipmi-bmc-watchdog-debuginfoto a version that resolves this vulnerability.Fixed in 1.6.18-1.el8_10 - Upgrade
Upgrade
redhat/freeipmi-debuginfoto a version that resolves this vulnerability.Fixed in 1.6.18-1.el8_10 - Upgrade
Upgrade
redhat/freeipmi-debugsourceto a version that resolves this vulnerability.Fixed in 1.6.18-1.el8_10 - Upgrade
Upgrade
redhat/freeipmi-ipmidetectdto a version that resolves this vulnerability.Fixed in 1.6.18-1.el8_10 - Upgrade
Upgrade
redhat/freeipmi-ipmidetectd-debuginfoto a version that resolves this vulnerability.Fixed in 1.6.18-1.el8_10 - Upgrade
Upgrade
redhat/freeipmi-ipmiseldto a version that resolves this vulnerability.Fixed in 1.6.18-1.el8_10 - Upgrade
Upgrade
redhat/freeipmi-ipmiseld-debuginfoto a version that resolves this vulnerability.Fixed in 1.6.18-1.el8_10 - Upgrade
Upgrade
redhat/freeipmito a version that resolves this vulnerability.Fixed in 1.6.18-1.el8_10.aa - Upgrade
Upgrade
redhat/freeipmi-bmc-watchdogto a version that resolves this vulnerability.Fixed in 1.6.18-1.el8_10.aa - Upgrade
Upgrade
redhat/freeipmi-bmc-watchdog-debuginfoto a version that resolves this vulnerability.Fixed in 1.6.18-1.el8_10.aa - Upgrade
Upgrade
redhat/freeipmi-debuginfoto a version that resolves this vulnerability.Fixed in 1.6.18-1.el8_10.aa - Upgrade
Upgrade
redhat/freeipmi-debugsourceto a version that resolves this vulnerability.Fixed in 1.6.18-1.el8_10.aa - Upgrade
Upgrade
redhat/freeipmi-ipmidetectdto a version that resolves this vulnerability.Fixed in 1.6.18-1.el8_10.aa - Upgrade
Upgrade
redhat/freeipmi-ipmidetectd-debuginfoto a version that resolves this vulnerability.Fixed in 1.6.18-1.el8_10.aa - Upgrade
Upgrade
redhat/freeipmi-ipmiseldto a version that resolves this vulnerability.Fixed in 1.6.18-1.el8_10.aa - Upgrade
Upgrade
redhat/freeipmi-ipmiseld-debuginfoto a version that resolves this vulnerability.Fixed in 1.6.18-1.el8_10.aa - Upgrade
Upgrade
redhat/freeipmi-develto a version that resolves this vulnerability.Fixed in 1.6.18-1.el8_10 - Upgrade
Upgrade
redhat/freeipmi-develto a version that resolves this vulnerability.Fixed in 1.6.18-1.el8_10.aa - Upgrade
Upgrade
freeipmito a version that resolves this vulnerability.Patch CVE-2026-50031
Event History
Frequently Asked Questions
What is the severity of RHSA-2026:36307?
The severity of RHSA-2026:36307 is classified as medium with a score of 4.
How do I fix RHSA-2026:36307?
To fix RHSA-2026:36307, apply the security update for freeipmi as provided by Red Hat.
Which software is affected by RHSA-2026:36307?
RHSA-2026:36307 affects multiple Red Hat Enterprise Linux versions, including ARM 64, IBM z Systems, Power, and x86_64.
What is the risk level associated with RHSA-2026:36307?
The risk level associated with RHSA-2026:36307 is assessed as 19.
When was RHSA-2026:36307 published?
RHSA-2026:36307 was published on July 7, 2026.