RHSA-2026:39006: Moderate: freeipmi security update
Moderate: freeipmi security update
Other sources
The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification.Security Fix(es): freeipmi: buffer overflows on response messages via ipmi-oem (CVE-2026-33554) freeipmi: FreeIPMI: Denial of service via buffer overflow in ipmi-oem client (CVE-2026-50031) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/freeipmito a version that resolves this vulnerability.Fixed in 1.6.14-2.el9_6.1 - Upgrade
Upgrade
redhat/freeipmi-bmc-watchdogto a version that resolves this vulnerability.Fixed in 1.6.14-2.el9_6.1 - Upgrade
Upgrade
redhat/freeipmi-bmc-watchdog-debuginfoto a version that resolves this vulnerability.Fixed in 1.6.14-2.el9_6.1 - Upgrade
Upgrade
redhat/freeipmi-debuginfoto a version that resolves this vulnerability.Fixed in 1.6.14-2.el9_6.1 - Upgrade
Upgrade
redhat/freeipmi-debugsourceto a version that resolves this vulnerability.Fixed in 1.6.14-2.el9_6.1 - Upgrade
Upgrade
redhat/freeipmi-ipmidetectdto a version that resolves this vulnerability.Fixed in 1.6.14-2.el9_6.1 - Upgrade
Upgrade
redhat/freeipmi-ipmidetectd-debuginfoto a version that resolves this vulnerability.Fixed in 1.6.14-2.el9_6.1 - Upgrade
Upgrade
redhat/freeipmi-ipmiseldto a version that resolves this vulnerability.Fixed in 1.6.14-2.el9_6.1 - Upgrade
Upgrade
redhat/freeipmi-ipmiseld-debuginfoto a version that resolves this vulnerability.Fixed in 1.6.14-2.el9_6.1 - Upgrade
Upgrade
redhat/freeipmito a version that resolves this vulnerability.Fixed in 1.6.14-2.el9_6.1.aa - Upgrade
Upgrade
redhat/freeipmi-bmc-watchdogto a version that resolves this vulnerability.Fixed in 1.6.14-2.el9_6.1.aa - Upgrade
Upgrade
redhat/freeipmi-bmc-watchdog-debuginfoto a version that resolves this vulnerability.Fixed in 1.6.14-2.el9_6.1.aa - Upgrade
Upgrade
redhat/freeipmi-debuginfoto a version that resolves this vulnerability.Fixed in 1.6.14-2.el9_6.1.aa - Upgrade
Upgrade
redhat/freeipmi-debugsourceto a version that resolves this vulnerability.Fixed in 1.6.14-2.el9_6.1.aa - Upgrade
Upgrade
redhat/freeipmi-ipmidetectdto a version that resolves this vulnerability.Fixed in 1.6.14-2.el9_6.1.aa - Upgrade
Upgrade
redhat/freeipmi-ipmidetectd-debuginfoto a version that resolves this vulnerability.Fixed in 1.6.14-2.el9_6.1.aa - Upgrade
Upgrade
redhat/freeipmi-ipmiseldto a version that resolves this vulnerability.Fixed in 1.6.14-2.el9_6.1.aa - Upgrade
Upgrade
redhat/freeipmi-ipmiseld-debuginfoto a version that resolves this vulnerability.Fixed in 1.6.14-2.el9_6.1.aa - Upgrade
Upgrade
redhat/freeipmi-develto a version that resolves this vulnerability.Fixed in 1.6.14-2.el9_6.1 - Upgrade
Upgrade
redhat/freeipmi-develto a version that resolves this vulnerability.Fixed in 1.6.14-2.el9_6.1.aa
Event History
Frequently Asked Questions
What is the severity of RHSA-2026:39006?
The severity of RHSA-2026:39006 is classified as medium, with a score of 4.
What vulnerabilities are addressed in RHSA-2026:39006?
RHSA-2026:39006 addresses buffer overflow vulnerabilities in the freeipmi packages.
How do I fix RHSA-2026:39006?
To fix RHSA-2026:39006, update the affected freeipmi packages to their latest versions as provided by your software vendor.
What is freeipmi and why is it important in RHSA-2026:39006?
Freeipmi is a software package that implements the Intelligent Platform Management Interface, which is crucial for remote system management.
What are the potential risks associated with RHSA-2026:39006?
The risks associated with RHSA-2026:39006 include exploitation through buffer overflow vulnerabilities that could lead to system compromise.