SUSE-SU-2020:0630-1

Details

Description of the patch:

This update for ipmitool fixes the following issues:

CVE-2020-5208: Fixed multiple remote code executtion vulnerabilities (bsc#1163026).
picmg discover messages are now DEBUG and not INFO messages (bsc#1085469).

Affected Packages

ipmitool

SUSE Enterprise Storage 5SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP3-BCLSUSE Linux Enterprise Server 12 SP3-LTSSSUSE Linux Enterprise Server 12 SP4

Fixed in:

1.8.18-5.9.1

References

ADVISORY

https://bugzilla.suse.com/1085469

ADVISORY

https://bugzilla.suse.com/1163026

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2020-March/006594.html

ADVISORY

https://www.suse.com/security/cve/CVE-2020-5208/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2020/suse-su-20200630-1/