Accepted ipmitool 1.8.14-4+deb8u1 (source amd64) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 09 Feb 2020 15:55:58 +0100
Source: ipmitool
Binary: ipmitool
Architecture: source amd64
Version: 1.8.14-4+deb8u1
Distribution: jessie-security
Urgency: high
Maintainer: Jörg Frings-Fürst <debian@jff-webhosting.net>
Changed-By: Markus Koschany <apo@debian.org>
Description:
ipmitool - utility for IPMI control with kernel driver or LAN interface
Changes:
ipmitool (1.8.14-4+deb8u1) jessie-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Fix CVE-2020-5208:
Christopher Ertl found that multiple functions in ipmitool neglect
proper checking of the data received from a remote LAN party, which may
lead to buffer overflows and potentially to remote code execution on the
ipmitool side.
Checksums-Sha1:
1578d37973688bb6c379ab1ff222348f2403a761 2133 ipmitool_1.8.14-4+deb8u1.dsc
dee694514559cbd6ff4f0d21264c05d29ce48902 917886 ipmitool_1.8.14.orig.tar.gz
ba81c52013f7f54d9e0cbe58c7b0d0dbc4914811 19148 ipmitool_1.8.14-4+deb8u1.debian.tar.xz
62fd837344479dda9e8f67ddb9c07aada471baa3 375846 ipmitool_1.8.14-4+deb8u1_amd64.deb
Checksums-Sha256:
3d52097278ce6b230866877b53d47fcbe8fb94110b08bbc724eb0a5edb349989 2133 ipmitool_1.8.14-4+deb8u1.dsc
fe9bce4587f83fe0fd7c4d86fd3241fe41cb661ebc5c7321128d59cc295874ab 917886 ipmitool_1.8.14.orig.tar.gz
74725389265232666bf9bae29c61264e5e353864eff74263d0090905aa88d2e1 19148 ipmitool_1.8.14-4+deb8u1.debian.tar.xz
bac0e0223acc2b4a466f572ff8b66573972810dbd51757ee38174a562f2fe8e2 375846 ipmitool_1.8.14-4+deb8u1_amd64.deb
Files:
170da60df06e41c499eeda7addfaf174 2133 utils optional ipmitool_1.8.14-4+deb8u1.dsc
13d216fe74999717338dcd1bb2ed478f 917886 utils optional ipmitool_1.8.14.orig.tar.gz
9e21f81731175964d7f416e3dbedc9c2 19148 utils optional ipmitool_1.8.14-4+deb8u1.debian.tar.xz
0c02ea3a91de12127e444ba1e530cf58 375846 utils optional ipmitool_1.8.14-4+deb8u1_amd64.deb
-----BEGIN PGP SIGNATURE-----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=b22p
-----END PGP SIGNATURE-----
Reply to: