- What: Security update for freeipmi in Red Hat Enterprise Linux
- Impact: Systems using freeipmi may be vulnerable to buffer overflow attacks
Red Hat Product Errata RHSA-2026:39007 - Security Advisory Issued: 2026-07-13 Updated: 2026-07-13 RHSA-2026:39007 - Security Advisory Overview Updated Packages Synopsis Moderate: freeipmi security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for freeipmi is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification. Security Fix(es): freeipmi: buffer overflows on response messages via ipmi-oem (CVE-2026-33554) freeipmi: FreeIPMI: Denial of service via buffer overflow in ipmi-oem client (CVE-2026-50031) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64 Fixes BZ - 2450778 - CVE-2026-33554 freeipmi: buffer overflows on response messages via ipmi-oem BZ - 2484296 - CVE-2026-50031 freeipmi: FreeIPMI: Denial of service via buffer overflow in ipmi-oem client CVEs CVE-2026-33554 CVE-2026-50031 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 SRPM freeipmi-1.6.14-4.el10_0.1.src.rpm SHA-256: e88539f51a7eac447fa409cca2aaac39266c6da9f49fb2449fb954fe54c9bafa x86_64 freeipmi-1.6.14-4.el10_0.1.x86_64.rpm SHA-256: 68af6ff118fb23f979dfcecdd047becfbf12b87c50d5108375f8ea038c6b356d freeipmi-bmc-watchdog-1.6.14-4.el10_0.1.x86_64.rpm SHA-256: d554949bc9bc35851a5bb0f0aca5775ee489d36e3ea73772b43d3683dbc55843 freeipmi-bmc-watchdog-debuginfo-1.6.14-4.el10_0.1.x86_64.rpm SHA-256: 3e2f05e94d9e841230aef35065bdffc0b3aa6ad20d1009ba1e6ac3152889db8c freeipmi-debuginfo-1.6.14-4.el10_0.1.x86_64.rpm SHA-256: 6313e19eb413c1dca1c5243f854cddee735e3dda669bbb8aebc9a344d1dcfbca freeipmi-debugsource-1.6.14-4.el10_0.1.x86_64.rpm SHA-256: f786cbb34eea2bc7cd6ba178bb2eb0cc3c9ac745798bf591b1252940011f0c5d freeipmi-ipmidetectd-1.6.14-4.el10_0.1.x86_64.rpm SHA-256: e3efcec715fe2ba360bea3efca9511de13756959053c891ba528e42242956326 freeipmi-ipmidetectd-debuginfo-1.6.14-4.el10_0.1.x86_64.rpm SHA-256: 43a3052db270ee97550649f75298e0a6cfa41189ccebd3c67dcffaf65f46bac6 freeipmi-ipmiseld-1.6.14-4.el10_0.1.x86_64.rpm SHA-256: 9101276b763f45adb6f7cf68c67a321d10ad0dac31065ac415fca5136955c53f freeipmi-ipmiseld-debuginfo-1.6.14-4.el10_0.1.x86_64.rpm SHA-256: 3c1f10cabbf3dbcb4e6c790faaac7ce1366a7d78fee86a04623dfd58e4455561 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 SRPM freeipmi-1.6.14-4.el10_0.1.src.rpm SHA-256: e88539f51a7eac447fa409cca2aaac39266c6da9f49fb2449fb954fe54c9bafa s390x freeipmi-1.6.14-4.el10_0.1.s390x.rpm SHA-256: bdd905de3b5ae17d523b29c620201aeca55b41c80a1b4e614e78543943867691 freeipmi-bmc-watchdog-1.6.14-4.el10_0.1.s390x.rpm SHA-256: 83055383e8780b76f27616b43e5b8c1b705f21df1aaa692b6001ccbfc1ed5659 freeipmi-bmc-watchdog-debuginfo-1.6.14-4.el10_0.1.s390x.rpm SHA-256: a80a1af8a8198bef464f2daa60ff836bc0687aaf0f61ddc60a3c34f1e43becec freeipmi-debuginfo-1.6.14-4.el10_0.1.s390x.rpm SHA-256: 225ead231fd96203c3325938ce2afaffc14970b4d9879670ea3f9e3688e7b3a0 freeipmi-debugsource-1.6.14-4.el10_0.1.s390x.rpm SHA-256: 9637b818f64071b30357074bb9b19c63d73f5335e1e8d607fd3373953e31dbc7 freeipmi-ipmidetectd-1.6.14-4.el10_0.1.s390x.rpm SHA-256: f539a7626450380b3adaa921354f6d1722b894206dbf3e41d727a5e145571d69 freeipmi-ipmidetectd-debuginfo-1.6.14-4.el10_0.1.s390x.rpm SHA-256: 09e3b1cc6d4f97683b884f16ff2215f68c16a63239244006ab7e3b0161ab1019 freeipmi-ipmiseld-1.6.14-4.el10_0.1.s390x.rpm SHA-256: bdc6a47d4cda50557f09879afc8e797fce4a7435567ecdbd57a999a6d993596b freeipmi-ipmiseld-debuginfo-1.6.14-4.el10_0.1.s390x.rpm SHA-256: 97be63ec66162f2bc8fa0c6e729f6cf938080881a19716020c74f15c535058ce Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 SRPM freeipmi-1.6.14-4.el10_0.1.src.rpm SHA-256: e88539f51a7eac447fa409cca2aaac39266c6da9f49fb2449fb954fe54c9bafa ppc64le freeipmi-1.6.14-4.el10_0.1.ppc64le.rpm SHA-256: d3cbe5b9eece100dc07fed96087723c34bcae424d82bf2475782582884b17196 freeipmi-bmc-watchdog-1.6.14-4.el10_0.1.ppc64le.rpm SHA-256: 3b2705ed99c85e146523c138f9ec471ba580c6b0cbac18174c0b7b1dc4d3ef4a freeipmi-bmc-watchdog-debuginfo-1.6.14-4.el10_0.1.ppc64le.rpm SHA-256: 110f87e6ad8674daefdcb381e2b34a5f97ad0dd70155976eb15c82be8b09f99d freeipmi-debuginfo-1.6.14-4.el10_0.1.ppc64le.rpm SHA-256: c4655578dab27b13b9acb3359215d5fecb7344b30ae2e2a010c8891e602de7d6 freeipmi-debugsource-1.6.14-4.el10_0.1.ppc64le.rpm SHA-256: f2d6598be71ced4b33f663cce4d1166bfc9eacbd4af8db1b4eab8623d42751b8 freeipmi-ipmidetectd-1.6.14-4.el10_0.1.ppc64le.rpm SHA-256: 624fe8ae543da8c436c1909bc6364f4a411c88a422d9fb371163208861eb98d2 freeipmi-ipmidetectd-debuginfo-1.6.14-4.el10_0.1.ppc64le.rpm SHA-256: dd6b094845c005669afc4629ded32e6d03aaeb716cb010c2084080ce77727297 freeipmi-ipmiseld-1.6.14-4.el10_0.1.ppc64le.rpm SHA-256: e5807f3a9ac133bd15d641b706bbdd7a8a463a3ece6c234530d42640e2bdcafe freeipmi-ipmiseld-debuginfo-1.6.14-4.el10_0.1.ppc64le.rpm SHA-256: ff382451eac930121999b02aa5f1766356232b807b09297fc6faaae143253fe8 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 SRPM freeipmi-1.6.14-4.el10_0.1.src.rpm SHA-256: e88539f51a7eac447fa409cca2aaac39266c6da9f49fb2449fb954fe54c9bafa aarch64 freeipmi-1.6.14-4.el10_0.1.aarch64.rpm SHA-256: d5687566fa329551a326faf064ac38f5f5e14415d1db2ca0b2edd3ea870dc380 freeipmi-bmc-watchdog-1.6.14-4.el10_0.1.aarch64.rpm SHA-256: 4ea1c7920635660f2048a74da50c0ac8401e8272d3e5d9a0bf5cff023ad69f80 freeipmi-bmc-watchdog-debuginfo-1.6.14-4.el10_0.1.aarch64.rpm SHA-256: cde0705294862beaa4adb315066f7a3b0eff53a1271f614a5fc5a8aa7a194481 freeipmi-debuginfo-1.6.14-4.el10_0.1.aarch64.rpm SHA-256: 5d095c13e554d2a70ef2fbd75f1bf94b359bf20707c56fae0598bd22b8b665c2 freeipmi-debugsource-1.6.14-4.el10_0.1.aarch64.rpm SHA-256: 6dcf64e25444a55623fadc17b69042d01cc686e3c615a327f05d42041e878b76 freeipmi-ipmidetectd-1.6.14-4.el10_0.1.aarch64.rpm SHA-256: be0efa531c94cb259dba832e86074e7679e4efdc86fa80172c5ff7c205e6fa40 freeipmi-ipmidetectd-debuginfo-1.6.14-4.el10_0.1.aarch64.rpm SHA-256: f3f20c3e3222f1ba3e704a7df7b6fe41e6f4fad5913886382441d5af68d4b731 freeipmi-ipmiseld-1.6.14-4.el10_0.1.aarch64.rpm SHA-256: 965aba8f83a88607f3220ec7e20e248b341834ad66410dd608d416d5694852f3 freeipmi-ipmiseld-debuginfo-1.6.14-4.el10_0.1.aarch64.rpm SHA-256: 73eeb1e719d68afdffb842c64b333c6215c4e13c2a89646d3591a08c356d5c3b Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 SRPM x86_64 freeipmi-bmc-watchdog-debuginfo-1.6.14-4.el10_0.1.x86_64.rpm SHA-256: 3e2f05e94d9e841230aef35065bdffc0b3aa6ad20d1009ba1e6ac3152889db8c freeipmi-debuginfo-1.6.14-4.el10_0.1.x86_64.rpm SHA-256: 6313e19eb413c1dca1c5243f854cddee735e3dda669bbb8aebc9a344d1dcfbca freeipmi-debugsource-1.6.14-4.el10_0.1.x86_64.rpm SHA-256: f786cbb34eea2bc7cd6ba178bb2eb0cc3c9ac745798bf591b1252940011f0c5d freeipmi-devel-1.6.14-4.el10_0.1.x86_64.rpm SHA-256: 83d20e9828e1de64273caa5468db2cab11a67cbc7104504bbabd937496dd4516 freeipmi-ipmidetectd-debuginfo-1.6.14-4.el10_0.1.x86_64.rpm SHA-256: 43a3052db270ee97550649f75298e0a6cfa41189ccebd3c67dcffaf65f46bac6 freeipmi-ipmiseld-debuginfo-1.6.14-4.el10_0.1.x86_64.rpm SHA-256: 3c1f10cabbf3dbcb4e6c790faaac7ce1366a7d78fee86a04623dfd58e4455561 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 SRPM ppc64le freeipmi-bmc-watchdog-debuginfo-1.6.14-4.el10_0.1.ppc64le.rpm SHA-256: 110f87e6ad8674daefdcb381e2b34a5f97ad0dd70155976eb15c82be8b09f99d freeipmi-debuginfo-1.6.14-4.el10_0.1.ppc64le.rpm SHA-256: c4655578dab27b13b9acb3359215d5fecb7344b30ae2e2a010c8891e602de7d6 freeipmi-debugsource-1.6.14-4.el10_0.1.ppc64le.rpm SHA-256: f2d6598be71ced4b33f663cce4d1166bfc9eacbd4af8db1b4eab8623d42751b8 freeipmi-devel-1.6.14-4.el10_0.1.ppc64le.rpm SHA-256: b6087c67abfe84c70e5ca57c302a38d2659ce8023049fad6bfbc391e0df5583f freeipmi-ipmidetectd-debuginfo-1.6.14-4.el10_0.1.ppc64le.rpm SHA-256: dd6b094845c005669afc4629ded32e6d03aaeb716cb010c2084080ce77727297 freeipmi-ipmiseld-debuginfo-1.6.14-4.el10_0.1.ppc64le.rpm SHA-256: ff382451eac930121999b02aa5f1766356232b807b09297fc6faaae143253fe8 Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 SRPM s390x freeipmi-bmc-watchdog-debuginfo-1.6.14-4.el10_0.1.