- What: Security update for freeipmi in Red Hat Enterprise Linux
- Impact: Systems using freeipmi may be vulnerable to buffer overflow attacks
Red Hat Product Errata RHSA-2026:39008 - Security Advisory Issued: 2026-07-13 Updated: 2026-07-13 RHSA-2026:39008 - Security Advisory Overview Updated Packages Synopsis Moderate: freeipmi security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for freeipmi is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification. Security Fix(es): freeipmi: buffer overflows on response messages via ipmi-oem (CVE-2026-33554) freeipmi: FreeIPMI: Denial of service via buffer overflow in ipmi-oem client (CVE-2026-50031) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.4 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x Fixes BZ - 2450778 - CVE-2026-33554 freeipmi: buffer overflows on response messages via ipmi-oem BZ - 2484296 - CVE-2026-50031 freeipmi: FreeIPMI: Denial of service via buffer overflow in ipmi-oem client CVEs CVE-2026-33554 CVE-2026-50031 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.4 SRPM freeipmi-1.6.14-2.el9_4.1.src.rpm SHA-256: a74b550592c75afdab33107519b8b2dc5914add3f1451aa9c2f22e6b2ee89b8c x86_64 freeipmi-1.6.14-2.el9_4.1.i686.rpm SHA-256: 49ca26d9d36acfc29305170c3263b14f933e23a975eb3da7dc01771e5739814c freeipmi-1.6.14-2.el9_4.1.x86_64.rpm SHA-256: 97c21d8f77015bf11ed471d3641719416a7040b469a13da14d8c76dc1c305eb4 freeipmi-bmc-watchdog-1.6.14-2.el9_4.1.x86_64.rpm SHA-256: ecd67f37e68e186f16a41c8b0ff5b4a2b21f630549b5c154ff5086fdc2707d22 freeipmi-bmc-watchdog-debuginfo-1.6.14-2.el9_4.1.i686.rpm SHA-256: da6017a65beb79327a356a72a2d284eccf1b4bfcf9f1788eab28c405651d61e8 freeipmi-bmc-watchdog-debuginfo-1.6.14-2.el9_4.1.x86_64.rpm SHA-256: bb5a3c8952a9927994bb09ada94d0026489f79b8cfd018615581c48cd5d7b4ed freeipmi-debuginfo-1.6.14-2.el9_4.1.i686.rpm SHA-256: a4c4e113d8b630ae6b5baab5408070eba6897e82fed144f12f04df2c62ed5ca4 freeipmi-debuginfo-1.6.14-2.el9_4.1.x86_64.rpm SHA-256: aac1d4b59833df7fce399437b1c6da2bb7703a2e9227f0277528bba522276582 freeipmi-debugsource-1.6.14-2.el9_4.1.i686.rpm SHA-256: 2b0232bf384d4713b4f5794c5677f58fb2ce510cbafc71f54822760e63a36038 freeipmi-debugsource-1.6.14-2.el9_4.1.x86_64.rpm SHA-256: ea2bf8e7d2e7781f17acb094cd9d7db79456ed2401d9dcfbbf849eda7d9e2123 freeipmi-ipmidetectd-1.6.14-2.el9_4.1.x86_64.rpm SHA-256: e1ef67fe364177a5a4b806fb06cd621273a02ceb942e2dbc3ed988799e2062a4 freeipmi-ipmidetectd-debuginfo-1.6.14-2.el9_4.1.i686.rpm SHA-256: c99f1239286c8c5d1dadd8effaae49cd5a68f3693de40b1397bf0df05d85a30b freeipmi-ipmidetectd-debuginfo-1.6.14-2.el9_4.1.x86_64.rpm SHA-256: bda1617a8053b92612fb23587e80e1fa2127b1ee5342da0e4e3b14bdf9fe0b8a freeipmi-ipmiseld-1.6.14-2.el9_4.1.x86_64.rpm SHA-256: c466e7d7f4a0caca9defc95aefd3fb18bd11ea4f7c99aa8fef16fa7b10bdcc80 freeipmi-ipmiseld-debuginfo-1.6.14-2.el9_4.1.i686.rpm SHA-256: e3782a0437696aa366c0ed661b79ff743db9e8adf2271c0d16c00433afa620fe freeipmi-ipmiseld-debuginfo-1.6.14-2.el9_4.1.x86_64.rpm SHA-256: 6ebb246d8c80b865ecc52db02499d88e6beb78e06cc30caa6039e1495a2ceda9 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 SRPM freeipmi-1.6.14-2.el9_4.1.src.rpm SHA-256: a74b550592c75afdab33107519b8b2dc5914add3f1451aa9c2f22e6b2ee89b8c ppc64le freeipmi-1.6.14-2.el9_4.1.ppc64le.rpm SHA-256: 26b400002f073baca4b5390e3497e5c472afd6532e00f1942a4ce8338468eb8e freeipmi-bmc-watchdog-1.6.14-2.el9_4.1.ppc64le.rpm SHA-256: 4c87fc0f85fb68f500541d3c9b4a636b0d4e52794e61d58166523a32ce2ccfcb freeipmi-bmc-watchdog-debuginfo-1.6.14-2.el9_4.1.ppc64le.rpm SHA-256: 9f0068319e2c6d14af426b01f85ed14b7124e7735491203fca3525e96965161c freeipmi-debuginfo-1.6.14-2.el9_4.1.ppc64le.rpm SHA-256: f95191412f54ce04d63ee2144cc05c9b6f0ac26e50298302e22ef00bf71b9079 freeipmi-debugsource-1.6.14-2.el9_4.1.ppc64le.rpm SHA-256: a75ac5b9bd718ad197772ce460049fe63341bba2091c421a3ccb47ffc2609933 freeipmi-ipmidetectd-1.6.14-2.el9_4.1.ppc64le.rpm SHA-256: 3a524748f0b234d84682c51463f1d09043d98638acef3936df221f5f5f478fea freeipmi-ipmidetectd-debuginfo-1.6.14-2.el9_4.1.ppc64le.rpm SHA-256: ca21b8376ac0acf0771ed44296799a737df10e8c6af082425ce1d79b03e3b0f6 freeipmi-ipmiseld-1.6.14-2.el9_4.1.ppc64le.rpm SHA-256: 553cfcbe82345d4babd469865c8ec793a979e82ed8a979977024fac8878c1486 freeipmi-ipmiseld-debuginfo-1.6.14-2.el9_4.1.ppc64le.rpm SHA-256: a92106dcbec87b7836edb48cc50279eca46f47c7a39e2096e1cc0acd883ec774 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 SRPM freeipmi-1.6.14-2.el9_4.1.src.rpm SHA-256: a74b550592c75afdab33107519b8b2dc5914add3f1451aa9c2f22e6b2ee89b8c x86_64 freeipmi-1.6.14-2.el9_4.1.i686.rpm SHA-256: 49ca26d9d36acfc29305170c3263b14f933e23a975eb3da7dc01771e5739814c freeipmi-1.6.14-2.el9_4.1.x86_64.rpm SHA-256: 97c21d8f77015bf11ed471d3641719416a7040b469a13da14d8c76dc1c305eb4 freeipmi-bmc-watchdog-1.6.14-2.el9_4.1.x86_64.rpm SHA-256: ecd67f37e68e186f16a41c8b0ff5b4a2b21f630549b5c154ff5086fdc2707d22 freeipmi-bmc-watchdog-debuginfo-1.6.14-2.el9_4.1.i686.rpm SHA-256: da6017a65beb79327a356a72a2d284eccf1b4bfcf9f1788eab28c405651d61e8 freeipmi-bmc-watchdog-debuginfo-1.6.14-2.el9_4.1.x86_64.rpm SHA-256: bb5a3c8952a9927994bb09ada94d0026489f79b8cfd018615581c48cd5d7b4ed freeipmi-debuginfo-1.6.14-2.el9_4.1.i686.rpm SHA-256: a4c4e113d8b630ae6b5baab5408070eba6897e82fed144f12f04df2c62ed5ca4 freeipmi-debuginfo-1.6.14-2.el9_4.1.x86_64.rpm SHA-256: aac1d4b59833df7fce399437b1c6da2bb7703a2e9227f0277528bba522276582 freeipmi-debugsource-1.6.14-2.el9_4.1.i686.rpm SHA-256: 2b0232bf384d4713b4f5794c5677f58fb2ce510cbafc71f54822760e63a36038 freeipmi-debugsource-1.6.14-2.el9_4.1.x86_64.rpm SHA-256: ea2bf8e7d2e7781f17acb094cd9d7db79456ed2401d9dcfbbf849eda7d9e2123 freeipmi-ipmidetectd-1.6.14-2.el9_4.1.x86_64.rpm SHA-256: e1ef67fe364177a5a4b806fb06cd621273a02ceb942e2dbc3ed988799e2062a4 freeipmi-ipmidetectd-debuginfo-1.6.14-2.el9_4.1.i686.rpm SHA-256: c99f1239286c8c5d1dadd8effaae49cd5a68f3693de40b1397bf0df05d85a30b freeipmi-ipmidetectd-debuginfo-1.6.14-2.el9_4.1.x86_64.rpm SHA-256: bda1617a8053b92612fb23587e80e1fa2127b1ee5342da0e4e3b14bdf9fe0b8a freeipmi-ipmiseld-1.6.14-2.el9_4.1.x86_64.rpm SHA-256: c466e7d7f4a0caca9defc95aefd3fb18bd11ea4f7c99aa8fef16fa7b10bdcc80 freeipmi-ipmiseld-debuginfo-1.6.14-2.el9_4.1.i686.rpm SHA-256: e3782a0437696aa366c0ed661b79ff743db9e8adf2271c0d16c00433afa620fe freeipmi-ipmiseld-debuginfo-1.6.14-2.el9_4.1.x86_64.rpm SHA-256: 6ebb246d8c80b865ecc52db02499d88e6beb78e06cc30caa6039e1495a2ceda9 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 SRPM freeipmi-1.6.14-2.el9_4.1.src.rpm SHA-256: a74b550592c75afdab33107519b8b2dc5914add3f1451aa9c2f22e6b2ee89b8c aarch64 freeipmi-1.6.14-2.el9_4.1.aarch64.rpm SHA-256: b955d9abd7881bb974c1e60365f018d73110d5b8560895d039395c1c87a4b2a0 freeipmi-bmc-watchdog-1.6.14-2.el9_4.1.aarch64.rpm SHA-256: 9e821b1ba9b4cfab484fa964fde12e7587041caff09ff87a25f38163fe7c39f8 freeipmi-bmc-watchdog-debuginfo-1.6.14-2.el9_4.1.aarch64.rpm SHA-256: dc667b86fd9b7cde9242b3d886e34105f615f24372ab036abb842c0091dedde1 freeipmi-debuginfo-1.6.14-2.el9_4.1.aarch64.rpm SHA-256: c1adbe69789471c269ce71ecf51fe6b317eceb600417c2d92d603a50cd1892bb freeipmi-debugsource-1.6.14-2.el9_4.1.aarch64.rpm SHA-256: cc67172fc6a2576a15b645a3876faafcffc188a223045d50d2e548bc9fc16a92 freeipmi-ipmidetectd-1.6.14-2.el9_4.1.aarch64.rpm SHA-256: 8b71929ce9764a06c8e3bfc6ab0c2453699c913fb1696210e15575d497b77f3f freeipmi-ipmidetectd-debuginfo-1.6.14-2.el9_4.1.aarch64.rpm SHA-256: 8c3fc55b8023150a7920d15455b55a8a67e66808399799110acc0a71b51943f3 freeipmi-ipmiseld-1.6.14-2.el9_4.1.aarch64.rpm SHA-256: e85f7dfcb7f954008ae2308aac673bff51b42e7e05dbe34146d76a07304cee39 freeipmi-ipmiseld-debuginfo-1.6.14-2.el9_4.1.aarch64.rpm SHA-256: d06c7429bf06321c92fb79825abfbbb37eb6664fa69dc5befec319aaeb9a80b0 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 SRPM freeipmi-1.6.14-2.el9_4.1.src.rpm SHA-256: a74b550592c75afdab33107519b8b2dc5914add3f1451aa9c2f22e6b2ee89b8c s390x freeipmi-1.6.14-2.el9_4.1.s390x.rpm SHA-256: 301ea622676c8ec05bca3ce43e5a4db6db08549c238cfb22235811f512b881c7 freeipmi-bmc-watchdog-1.6.14-2.el9_4.1.s390x.rpm SHA-256: 8f4e7f27d41958009667169a3cf302812c8ff31b3b8ef8090675c8e29d752d2f freeipmi-bmc-watchdog-debuginfo-1.6.14-2.el9_4.1.s390x.rpm SHA-256: 516d5aca5edfd199a3eeccb095a94079f91b025670cb53b5e50fadf564f5ab07 freeipmi-debuginfo-1.6.14-2.el9_4.1.s390x.rpm SHA-256: 5c0a72955196bdeb4ba701ef713df6178446a030d6770f4c890b06444d40378a freeipmi-debugsource-1.6.14-2.el9_4.1.s390x.rpm SHA-