-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 29 Jun 2021 19:03:03 +0200 Source: ipmitool Binary: ipmitool Architecture: source amd64 Version: 1.8.18-3+deb9u1 Distribution: stretch-security Urgency: high Maintainer: Jörg Frings-Fürst <debian@jff-webhosting.net> Changed-By: Thorsten Alteholz <debian@alteholz.de> Description: ipmitool - utility for IPMI control with kernel driver or LAN interface (dae Changes: ipmitool (1.8.18-3+deb9u1) stretch-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2020-5208 buffer overflows and potentially to remote code execution. Applied upstream patches: - CVE-2020-5208_1_Fix_buffer_overflow_vulnerabilities.patch - CVE-2020-5208_2-fru-Fix-buffer-overflow-in-ipmi_spd_print_fru.patch - CVE-2020-5208_3-session-Fix-buffer-overflow-in-ipmi_get_session_info.patch - CVE-2020-5208_4-channel-Fix-buffer-overflow.patch - CVE-2020-5208_5_lanp-Fix-buffer-overflows-in-get_lan_param_select.patch - CVE-2020-5208_6-fru-sdr-Fix-id_string-buffer-overflows.patch Checksums-Sha1: 1d22261c4b27555e4742196a9a440ac9a1036b7a 2146 ipmitool_1.8.18-3+deb9u1.dsc ff4781bb78f264d44fa4bf1767f268d4079d87ba 795278 ipmitool_1.8.18.orig.tar.bz2 7931ee7bc9446e948e509348507c547fa1d85c9c 23080 ipmitool_1.8.18-3+deb9u1.debian.tar.xz 0325ced2bf3528fc2811f35d389754ad0a9c455f 1258222 ipmitool-dbgsym_1.8.18-3+deb9u1_amd64.deb 91c0c4c5264122a3c24c8c004bb413e62fdfe16b 6640 ipmitool_1.8.18-3+deb9u1_amd64.buildinfo d6ab595ceca3d2699a3d351532be4ff425fa0a65 421818 ipmitool_1.8.18-3+deb9u1_amd64.deb Checksums-Sha256: ae4b2eab0ccd4a5b64789f46b6d8d1b4243f45760838bae6d3961050500af543 2146 ipmitool_1.8.18-3+deb9u1.dsc 0c1ba3b1555edefb7c32ae8cd6a3e04322056bc087918f07189eeedfc8b81e01 795278 ipmitool_1.8.18.orig.tar.bz2 25be10596f9d99bb111f0b2733c9779b056c7403d134aa2b30552f41f96fe049 23080 ipmitool_1.8.18-3+deb9u1.debian.tar.xz 7066c2cdcdefdf4dbb24e9eeba7df8440197069545e224ee191920bd931cb0ff 1258222 ipmitool-dbgsym_1.8.18-3+deb9u1_amd64.deb 9bb7bf7a5833706c88d351f7343b3d44f26af8b7c1624e78407b5443f48d16cf 6640 ipmitool_1.8.18-3+deb9u1_amd64.buildinfo 75cfee30f13cd98d33a79fe750fd6c5c2ca283689a077bd683c86d8f14834a4c 421818 ipmitool_1.8.18-3+deb9u1_amd64.deb Files: c2a44ed510b9b3964f7f1c03c257124c 2146 utils optional ipmitool_1.8.18-3+deb9u1.dsc bab7ea104c7b85529c3ef65c54427aa3 795278 utils optional ipmitool_1.8.18.orig.tar.bz2 7a9b134457cc4b3061be0f64d7ddb41c 23080 utils optional ipmitool_1.8.18-3+deb9u1.debian.tar.xz 7fb93af08053b0d28807d221f0f39caf 1258222 debug extra ipmitool-dbgsym_1.8.18-3+deb9u1_amd64.deb c1291504af7fafc7542d9b0afe3ba632 6640 utils optional ipmitool_1.8.18-3+deb9u1_amd64.buildinfo 3795f4ecab9f3da3ce6c4cb79fc3dd41 421818 utils optional ipmitool_1.8.18-3+deb9u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmDc4WpfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR9wKEACcT4ax+5/vI6K1dLlS/yJ6TNqc93Bq YQpMDQA5tLLA3aUK25evzYh00wTRVRytUMuXgd/iVzZT/INizSBrkkm9Gv01WRNX GnDSVr+ppZSxNmyW2NAUy7c1g9m3j1T91JQDeWUu8eA8uvDTVs14X9JxLU8hab7c MwD4NmYIfjeV2LQbmEMRwkVa4GjB1InerTKI0Duy14cTYiJvNCCXxNw8bOcngL2L yxnVJaE2IY9KaftC51lZKwzz7wQLtEs4N4BduQ5HO301HIrnFgfFEx3w11hgxFUE SEEChhp2hvOPGLEIe7SsTzlYkwf1Z411wL71CJ+V58WnlxoQ3zIapCFBeidNSvqQ 6gVeozwbLIlprZHx1QnGtz+LTvSiyEEOSAhEiTai7ENeTfNyqnG7GkSTCPFQHNYZ 4rDbQBvnPqG/pqTJAJD7clbzLOj9HT6NUKacwtdZ66/SnYXtDvg0w0spuOe3cY/8 wTNnFhgP6t4VIza3+pBNosl64rv7HVoK1Xd00xE8OKk5BpAdK26MjfTStairWNab QrEOfpyR8lR5xSMDaHzXSKSJjg/cxuBE5F4wEoeDRKI3UH213M9zAibghhn/dl6A CQVwn1x7Ql/MGpH9r4iMz15bYo2Tj+CcMGLuvyCU1iJ2OTFyGODsiURUj0DzDMm8 LeJ7ikErQXBYEA== =h8jn -----END PGP SIGNATURE-----