Re: Fwd: [Freeipmi-announce] FreeIPMI 1.6.19 Released
FreeIPMI 1.6.19 fixes multiple issues, six of which received CVEs CVE-2026-85504 through CVE-2026-85509.
Salvatore Bonaccorso forwarded the FreeIPMI 1.6.19 release announcement on oss-security, noting that six of the fixed issues received CVE identifiers: CVE-2026-85504, CVE-2026-85505, CVE-2026-85506, CVE-2026-85507, CVE-2026-85508 and CVE-2026-85509. FreeIPMI is an IPMI monitoring and management tool for Linux. No exploitation or severity detail is given.
- FreeIPMI 1.6.19 released with fixes
- Six CVEs assigned: CVE-2026-85504 to CVE-2026-85509
- FreeIPMI is a niche IPMI management toolchain
- No exploitation reported
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-85504+3 related CVEs | Stack-based buffer overflow in FreeIPMI via malformed Fujitsu iRMC SEL responses | 9.8 | <1% | ||
CVE-2026-85508+1 related CVE | Stack-based buffer overflow in FreeIPMI ipmi-oem Dell CMC IPv6 info handling | 9.8 group max | <1% |
From the original article
Posted by Salvatore Bonaccorso on Sep 05 Hi, FTR, some of the fixed issues got CVEs assigned, they are: CVE-2026-85504, CVE-2026-85505, CVE-2026-85506, CVE-2026-85507, CVE-2026-85508 and CVE-2026-85509. Regards, Salvatore
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.