SUSE-SU-2026:1755-1

Опубликовано: 07 мая 2026

Источник: suse-cvrf

Описание

Security update for freeipmi

This update for freeipmi fixes the following issue:

CVE-2026-33554: improper memory handling and data validation can lead to stack buffer overflows and acceptance of malformed payloads/responses (bsc#1260414).

Список пакетов

Container suse/manager/5.0/x86_64/server:latest

libfreeipmi17-1.6.8-150400.3.3.1

Container suse/multi-linux-manager/5.1/x86_64/server:latest

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP4-SAP-BYOS

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP4-SAP-BYOS-Azure

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP4-SAP-BYOS-EC2

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP4-SAP-BYOS-GCE

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP4-SAP-Hardened

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP4-SAP-Hardened-Azure

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP4-SAP-Hardened-BYOS

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP4-SAP-Hardened-GCE

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP5-SAP-Azure-3P

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP5-SAP-BYOS-Azure

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP5-SAP-BYOS-EC2

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP5-SAP-BYOS-GCE

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP5-SAP-Hardened-Azure

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP5-SAP-Hardened-BYOS-GCE

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP5-SAP-Hardened-GCE

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP6-SAP-Azure-3P

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP6-SAP-BYOS

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP6-SAP-BYOS-Azure

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP6-SAP-BYOS-EC2

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP6-SAP-BYOS-GCE

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP6-SAP-Hardened

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP6-SAP-Hardened-Azure

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP6-SAP-Hardened-BYOS

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP6-SAP-Hardened-EC2

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP6-SAP-Hardened-GCE

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP7-SAP-Azure

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP7-SAP-Azure-3P

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP7-SAP-BYOS-Azure

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP7-SAP-BYOS-EC2

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP7-SAP-BYOS-GCE

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP7-SAP-EC2

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP7-SAP-GCE

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP7-SAP-GCE-3P

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP7-SAP-Hardened-Azure

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP7-SAP-Hardened-BYOS-Azure

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP7-SAP-Hardened-BYOS-EC2

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP7-SAP-Hardened-BYOS-GCE

libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP7-SAP-Hardened-GCE

libfreeipmi17-1.6.8-150400.3.3.1

Image server-image-sles15sp7

libfreeipmi17-1.6.8-150400.3.3.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

freeipmi-1.6.8-150400.3.3.1

freeipmi-devel-1.6.8-150400.3.3.1

freeipmi-ipmiseld-1.6.8-150400.3.3.1

libfreeipmi17-1.6.8-150400.3.3.1

libipmiconsole2-1.6.8-150400.3.3.1

libipmidetect0-1.6.8-150400.3.3.1

libipmimonitoring6-1.6.8-150400.3.3.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

freeipmi-1.6.8-150400.3.3.1

freeipmi-devel-1.6.8-150400.3.3.1

freeipmi-ipmiseld-1.6.8-150400.3.3.1

libfreeipmi17-1.6.8-150400.3.3.1

libipmiconsole2-1.6.8-150400.3.3.1

libipmidetect0-1.6.8-150400.3.3.1

libipmimonitoring6-1.6.8-150400.3.3.1

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

freeipmi-1.6.8-150400.3.3.1

freeipmi-devel-1.6.8-150400.3.3.1

freeipmi-ipmiseld-1.6.8-150400.3.3.1

libfreeipmi17-1.6.8-150400.3.3.1

libipmiconsole2-1.6.8-150400.3.3.1

libipmidetect0-1.6.8-150400.3.3.1

libipmimonitoring6-1.6.8-150400.3.3.1

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

freeipmi-1.6.8-150400.3.3.1

freeipmi-devel-1.6.8-150400.3.3.1

freeipmi-ipmiseld-1.6.8-150400.3.3.1

libfreeipmi17-1.6.8-150400.3.3.1

libipmiconsole2-1.6.8-150400.3.3.1

libipmidetect0-1.6.8-150400.3.3.1

libipmimonitoring6-1.6.8-150400.3.3.1

SUSE Linux Enterprise Module for Basesystem 15 SP7

freeipmi-1.6.8-150400.3.3.1

freeipmi-devel-1.6.8-150400.3.3.1

freeipmi-ipmiseld-1.6.8-150400.3.3.1

libfreeipmi17-1.6.8-150400.3.3.1

libipmiconsole2-1.6.8-150400.3.3.1

libipmidetect0-1.6.8-150400.3.3.1

libipmimonitoring6-1.6.8-150400.3.3.1

SUSE Linux Enterprise Server 15 SP4-LTSS

freeipmi-1.6.8-150400.3.3.1

freeipmi-devel-1.6.8-150400.3.3.1

freeipmi-ipmiseld-1.6.8-150400.3.3.1

libfreeipmi17-1.6.8-150400.3.3.1

libipmiconsole2-1.6.8-150400.3.3.1

libipmidetect0-1.6.8-150400.3.3.1

libipmimonitoring6-1.6.8-150400.3.3.1

SUSE Linux Enterprise Server 15 SP5-LTSS

freeipmi-1.6.8-150400.3.3.1

freeipmi-devel-1.6.8-150400.3.3.1

freeipmi-ipmiseld-1.6.8-150400.3.3.1

libfreeipmi17-1.6.8-150400.3.3.1

libipmiconsole2-1.6.8-150400.3.3.1

libipmidetect0-1.6.8-150400.3.3.1

libipmimonitoring6-1.6.8-150400.3.3.1

SUSE Linux Enterprise Server 15 SP6-LTSS

freeipmi-1.6.8-150400.3.3.1

freeipmi-devel-1.6.8-150400.3.3.1

freeipmi-ipmiseld-1.6.8-150400.3.3.1

libfreeipmi17-1.6.8-150400.3.3.1

libipmiconsole2-1.6.8-150400.3.3.1

libipmidetect0-1.6.8-150400.3.3.1

libipmimonitoring6-1.6.8-150400.3.3.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

freeipmi-1.6.8-150400.3.3.1

freeipmi-devel-1.6.8-150400.3.3.1

freeipmi-ipmiseld-1.6.8-150400.3.3.1

libfreeipmi17-1.6.8-150400.3.3.1

libipmiconsole2-1.6.8-150400.3.3.1

libipmidetect0-1.6.8-150400.3.3.1

libipmimonitoring6-1.6.8-150400.3.3.1

SUSE Linux Enterprise Server for SAP Applications 15 SP5

freeipmi-1.6.8-150400.3.3.1

freeipmi-devel-1.6.8-150400.3.3.1

freeipmi-ipmiseld-1.6.8-150400.3.3.1

libfreeipmi17-1.6.8-150400.3.3.1

libipmiconsole2-1.6.8-150400.3.3.1

libipmidetect0-1.6.8-150400.3.3.1

libipmimonitoring6-1.6.8-150400.3.3.1

SUSE Linux Enterprise Server for SAP Applications 15 SP6

freeipmi-1.6.8-150400.3.3.1

freeipmi-devel-1.6.8-150400.3.3.1

freeipmi-ipmiseld-1.6.8-150400.3.3.1

libfreeipmi17-1.6.8-150400.3.3.1

libipmiconsole2-1.6.8-150400.3.3.1

libipmidetect0-1.6.8-150400.3.3.1

libipmimonitoring6-1.6.8-150400.3.3.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20261755-1/
Link for SUSE-SU-2026:1755-1
https://lists.suse.com/pipermail/sle-updates/2026-May/046308.html
E-Mail link for SUSE-SU-2026:1755-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1260414
SUSE Bug 1260414
https://www.suse.com/security/cve/CVE-2026-33554/
SUSE CVE CVE-2026-33554 page

Описание

ipmi-oem in FreeIPMI before 1.6.17 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set of interfaces for platform management. It is implemented by a large number of hardware manufacturers to support system management. It is most commonly used for sensor reading (e.g., CPU temperatures through the ipmi-sensors command within FreeIPMI) and remote power control (the ipmipower command). The ipmi-oem client command implements a set of a IPMI OEM commands for specific hardware vendors. If a user has supported hardware, they may wish to use the ipmi-oem command to send a request to a server to retrieve specific information. Three subcommands were found to have exploitable buffer overflows on response messages. They are: "ipmi-oem dell get-last-post-code - get the last POST code and string describing the error on some Dell servers," "ipmi-oem supermicro extra-firmware-info - get extra firmware info on Supermicro servers," and "ipmi-oem wistron read-proprietary-string - read a proprietary string on Wistron servers."

Затронутые продукты

Container suse/manager/5.0/x86_64/server:latest:libfreeipmi17-1.6.8-150400.3.3.1

Container suse/multi-linux-manager/5.1/x86_64/server:latest:libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP4-SAP-BYOS-Azure:libfreeipmi17-1.6.8-150400.3.3.1

Image SLES15-SP4-SAP-BYOS-EC2:libfreeipmi17-1.6.8-150400.3.3.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-33554.html
CVE-2026-33554
https://bugzilla.suse.com/1260414
SUSE Bug 1260414

SUSE-SU-2026:1755-1

Описание

Список пакетов

Container suse/manager/5.0/x86_64/server:latest

Container suse/multi-linux-manager/5.1/x86_64/server:latest

Image SLES15-SP4-SAP-BYOS

Image SLES15-SP4-SAP-BYOS-Azure

Image SLES15-SP4-SAP-BYOS-EC2

Image SLES15-SP4-SAP-BYOS-GCE

Image SLES15-SP4-SAP-Hardened

Image SLES15-SP4-SAP-Hardened-Azure

Image SLES15-SP4-SAP-Hardened-BYOS

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

Image SLES15-SP4-SAP-Hardened-GCE

Image SLES15-SP5-SAP-Azure-3P

Image SLES15-SP5-SAP-BYOS-Azure

Image SLES15-SP5-SAP-BYOS-EC2

Image SLES15-SP5-SAP-BYOS-GCE

Image SLES15-SP5-SAP-Hardened-Azure

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

Image SLES15-SP5-SAP-Hardened-BYOS-GCE

Image SLES15-SP5-SAP-Hardened-GCE

Image SLES15-SP6-SAP-Azure-3P

Image SLES15-SP6-SAP-BYOS

Image SLES15-SP6-SAP-BYOS-Azure

Image SLES15-SP6-SAP-BYOS-EC2

Image SLES15-SP6-SAP-BYOS-GCE

Image SLES15-SP6-SAP-Hardened

Image SLES15-SP6-SAP-Hardened-Azure

Image SLES15-SP6-SAP-Hardened-BYOS

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

Image SLES15-SP6-SAP-Hardened-EC2

Image SLES15-SP6-SAP-Hardened-GCE

Image SLES15-SP7-SAP-Azure

Image SLES15-SP7-SAP-Azure-3P

Image SLES15-SP7-SAP-BYOS-Azure

Image SLES15-SP7-SAP-BYOS-EC2

Image SLES15-SP7-SAP-BYOS-GCE

Image SLES15-SP7-SAP-EC2

Image SLES15-SP7-SAP-GCE

Image SLES15-SP7-SAP-GCE-3P

Image SLES15-SP7-SAP-Hardened-Azure

Image SLES15-SP7-SAP-Hardened-BYOS-Azure

Image SLES15-SP7-SAP-Hardened-BYOS-EC2

Image SLES15-SP7-SAP-Hardened-BYOS-GCE

Image SLES15-SP7-SAP-Hardened-GCE

Image server-image-sles15sp7

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

SUSE Linux Enterprise Module for Basesystem 15 SP7

SUSE Linux Enterprise Server 15 SP4-LTSS

SUSE Linux Enterprise Server 15 SP5-LTSS

SUSE Linux Enterprise Server 15 SP6-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP4

SUSE Linux Enterprise Server for SAP Applications 15 SP5

SUSE Linux Enterprise Server for SAP Applications 15 SP6

Ссылки

Уязвимость: CVE-2026-33554

Описание

Затронутые продукты

Ссылки