-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Package : ipmitool Version : 1.8.14-4+deb8u1 CVE ID : CVE-2020-5208 Debian Bug : 950761
Christopher Ertl found that multiple functions in ipmitool neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. For Debian 8 "Jessie", this problem has been fixed in version 1.8.14-4+deb8u1. We recommend that you upgrade your ipmitool packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAl5ATMJfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQACgkQ2a0UuVE7 UeRDgQ/+ITz5FgoOkcGTS4eKp0OBrr7STg1pbV3Z65z8+GiY+2cs43jFSZtoLCvp cLxW7Unr29iBCpdN63Lavy1wgnh+TQEZKaiTzUQsucwR6zaNGVPGiblIsjOqp2Qk jXcVuUKfhA4WZUGD0LemWE+3dH3/XeR4x++mtN/bviEgmqN+lDe0FaaRojKSaI4h fKcBWoE/bxPgRpTZmV39o7j313zJmgh8wL9lPkafl3K28ONtw+fvAto5l5Q5RR56 WTurSEcVbtAYuWWmOns7NySnvPoKajU8J9Bu4MUotYCuD8ohAj/EqJ4OeHq8gchb ENTMHqn+TvodhJ4zE0fk7pE3lxf21+sH51zaJ2yDK56CFQ/Zm4yQ7VK3ydo8t4uc dmSix34vNX1DVrwigkt18xcrQzGhXBSX2p5t/KgWBKePmOqrId0cjxHAWNwrp865 GZ//xUOsCHO944hNOxLqRgyNoxiHWcJ18W7MI7WcWOfmj90c804urrGj/U5uD4dJ GthEad6rmI/33iD+HUubJoQg7wuDjdMoTAOqqUT6dTIyvIxj4nHh/leDXzCe8wFQ fcJVTG5Syt72q2MYuilP8wvp+uxSoMRnecRKlXwLo89D224CxR3AZcXyrN7T6H5A rOiz7tODbahIo0TUsvEq54k9btxLESvc/iyxSgf/WhORoGac0Lo= =D48Q -----END PGP SIGNATURE-----
