[SECURITY] Fedora 30 Update: ipmitool-1.8.18-19.fc30
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-92cc67ff5a
2020-02-16 01:09:04.017521
--------------------------------------------------------------------------------
Name : ipmitool
Product : Fedora 30
Version : 1.8.18
Release : 19.fc30
URL : http://ipmitool.sourceforge.net/
Summary : Utility for IPMI control
Description :
This package contains a utility for interfacing with devices that support
the Intelligent Platform Management Interface specification. IPMI is
an open standard for machine health, inventory, and remote power control.
This utility can communicate with IPMI-enabled devices through either a
kernel driver such as OpenIPMI or over the RMCP LAN protocol defined in
the IPMI specification. IPMIv2 adds support for encrypted LAN
communications and remote Serial-over-LAN functionality.
It provides commands for reading the Sensor Data Repository (SDR) and
displaying sensor values, displaying the contents of the System Event
Log (SEL), printing Field Replaceable Unit (FRU) information, reading and
setting LAN configuration, and chassis power control.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2020-5208 for details see
https://github.com/ipmitool/ipmitool/security/advisories/GHSA-g659-9qxw-p7cp
--------------------------------------------------------------------------------
ChangeLog:
* Thu Feb 6 2020 V��clav Dole��al <vdolezal(a)redhat.com> - 1.8.18-19
- Backport fix for CVE-2020-5208 (#1798722); for details see
https://github.com/ipmitool/ipmitool/security/advisories/GHSA-g659-9qxw-p7cp
* Mon Feb 3 2020 V��clav Dole��al <vdolezal(a)redhat.com> - 1.8.18-18
- Backport patch to autoselect best cipher suite when working over lanplus backend
- Fixed 'ipmitool pef status/info' not printing final newline
- Expanded column for sensor name in 'ipmi sdr/sensor' output so longer names are
aligned
* Wed Jan 29 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.8.18-17
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Thu Jan 23 2020 V��clav Dole��al <vdolezal(a)redhat.com> - 1.8.18-16
- Fix FTBFS with GCC 10
* Thu Jul 25 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.8.18-15
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1798721 - CVE-2020-5208 ipmitool: Buffer overflow in read_fru_area_section
function in lib/ipmi_fru.c
https://bugzilla.redhat.com/show_bug.cgi?id=1798721
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-92cc67ff5a' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------