From fcd5fd664d1f377fe3881add892b490d877f0d5a Mon Sep 17 00:00:00 2001 From: "azurelinux-ci-jwt-app[bot]" <293883219+azurelinux-ci-jwt-app[bot]@users.noreply.github.com> Date: Mon, 7 Sep 2026 09:00:30 -0400 Subject: [PATCH] [AUTOPATCHER-CORE] Upgrade freeipmi to 1.6.19 for CVE-2026-85504, CVE-2026-85508, CVE-2026-85505, CVE-2026-85509, CVE-2026-85506, CVE-2026-85507 [Critical] (#18717) Co-authored-by: CBL-Mariner Servicing Account (cherry picked from commit 78d27ab1814e812357ef140731a2db6afade2d4d) --- SPECS/freeipmi/freeipmi.signatures.json | 2 +- SPECS/freeipmi/freeipmi.spec | 5 ++++- cgmanifest.json | 4 ++-- 3 files changed, 7 insertions(+), 4 deletions(-) diff --git a/SPECS/freeipmi/freeipmi.signatures.json b/SPECS/freeipmi/freeipmi.signatures.json index 76bcb7d4d62..10b5cb383ec 100644 --- a/SPECS/freeipmi/freeipmi.signatures.json +++ b/SPECS/freeipmi/freeipmi.signatures.json @@ -3,6 +3,6 @@ "bmc-watchdog.service": "8fe627d5fe40ae7dee4437c9f136e76397166ebdd90487eb8a4852ce1d22bf12", "ipmidetectd.service": "a0d9af1447e72c449bbec5cc1fedd447673eaf6cca93e5c4644517d853b39e20", "ipmiseld.service": "58b467e507eb805414697180dc94f7bb128bd61d520f3b4cb36e084dbdd5835c", - "freeipmi-1.6.18.tar.gz": "8098b23820038ad0aa39abf0f9a012e24683d384d9f91e760acb2a68b465e0fe" + "freeipmi-1.6.19.tar.gz": "f95c2b73797c4a0341a42a7b3c43efb60954c4130d082ad348fd40da554b4e85" } } diff --git a/SPECS/freeipmi/freeipmi.spec b/SPECS/freeipmi/freeipmi.spec index b8373d23390..97c319d6266 100644 --- a/SPECS/freeipmi/freeipmi.spec +++ b/SPECS/freeipmi/freeipmi.spec @@ -4,7 +4,7 @@ Distribution: Azure Linux # Copyright (c) 2003 FreeIPMI Core Team Name: freeipmi -Version: 1.6.18 +Version: 1.6.19 Release: 1%{?dist} Summary: IPMI remote console and system management software License: GPLv3+ @@ -348,6 +348,9 @@ rm -f %{buildroot}%{_datadir}/doc/%{name}/COPYING* %dir %{_localstatedir}/cache/ipmiseld %changelog +* Sun Sep 06 2026 CBL-Mariner Servicing Account - 1.6.19-1 +- Auto-upgrade to 1.6.19 - for CVE-2026-85504, CVE-2026-85508, CVE-2026-85505, CVE-2026-85509, CVE-2026-85506, CVE-2026-85507 + * Thu Jun 04 2026 CBL-Mariner Servicing Account - 1.6.18-1 - Auto-upgrade to 1.6.18 - for CVE-2026-50031 diff --git a/cgmanifest.json b/cgmanifest.json index 534b9e81539..04497c9a9b2 100644 --- a/cgmanifest.json +++ b/cgmanifest.json @@ -3950,8 +3950,8 @@ "type": "other", "other": { "name": "freeipmi", - "version": "1.6.18", - "downloadUrl": "https://ftp.gnu.org/gnu/freeipmi/freeipmi-1.6.18.tar.gz" + "version": "1.6.19", + "downloadUrl": "https://ftp.gnu.org/gnu/freeipmi/freeipmi-1.6.19.tar.gz" } } },