Skip to content

[AUTOPATCHER-CORE] Upgrade freeipmi to 1.6.17 for CVE-2026-33554#16429

Merged
jslobodzian merged 3 commits intofasttrack/3.0from
cblmargh/freeipmi-upgrade-to-1.6.17-fasttrack/3.0
Apr 7, 2026
Merged

[AUTOPATCHER-CORE] Upgrade freeipmi to 1.6.17 for CVE-2026-33554#16429
jslobodzian merged 3 commits intofasttrack/3.0from
cblmargh/freeipmi-upgrade-to-1.6.17-fasttrack/3.0

Conversation

@CBL-Mariner-Bot
Copy link
Copy Markdown
Collaborator

[AUTOPATCHER-CORE] Upgrade freeipmi to 1.6.17 for CVE-2026-33554
Upgrade pipeline run -> https://dev.azure.com/mariner-org/mariner/_build/results?buildId=1085293&view=results

@Kanishk-Bansal
Copy link
Copy Markdown
Contributor

Based on the available information from the official GNU/Savannah sources, here's a summary of changes between FreeIPMI 1.6.11 → 1.6.17:

Breaking Changes & Notable Updates

There are no major breaking API/CLI changes documented between 1.6.11 and 1.6.17. The releases in this range are primarily bug fixes, build fixes, and minor enhancements. Here's the version-by-version breakdown:

1.6.12 (Nov 2023)

  • Switched from select() to poll() to avoid file descriptor limits in the openipmi driver.
  • Fixed portability issues on systems without cbrt().

1.6.13 (Jan 2024)

  • Fixed build issues with inb/outb inline assembly declarations.
  • Added additional sensor/event interpretations.

1.6.14

  • Details not publicly available in online sources (check the NEWS file in the tarball).

1.6.15 (Jan 2025)

  • Fix: Incorrect output of IPv6_Dynamic_Address_Source_Type in ipmi-config⚠️ if you parse this output, your scripts may see different values after upgrading.
  • Increased precision of Dell cumulative energy output in ipmi-oem⚠️ could affect parsing if you rely on a specific numeric format.
  • Removed advertising of options only available with special debug builds.
  • Fixed build errors with -Werror=implicit-function-declaration.
  • libfreeipmi: Removed unnecessary/duplicate parameter checks.
  • Fixed gcc 14.x build failures.

1.6.16 (Sep 2025)

  • Important fix: Potential sensor reading miscalculation on systems where char is unsigned (e.g., ARM) vs signed (e.g., x86) — ⚠️ if you're on ARM, sensor readings may change (become correct) after upgrading.
  • Fixed gcc 15 compilation errors.

1.6.17

  • Detailed release notes not yet publicly available online.

Overall, the upgrade from 1.6.11 to 1.6.17 should be safe and non-breaking for most users

Signed-off-by: Kanishk Bansal <kanbansal@microsoft.com>
@Kanishk-Bansal Kanishk-Bansal force-pushed the cblmargh/freeipmi-upgrade-to-1.6.17-fasttrack/3.0 branch from 287e82a to 38c18d1 Compare April 2, 2026 16:23
@Kanishk-Bansal Kanishk-Bansal added the CVEFixReadyForMaintainerReview When a CVE fix has been reviewed by release manager and is ready for stable maintainer review label Apr 2, 2026
@jslobodzian jslobodzian merged commit 7bd3646 into fasttrack/3.0 Apr 7, 2026
17 of 22 checks passed
@jslobodzian jslobodzian deleted the cblmargh/freeipmi-upgrade-to-1.6.17-fasttrack/3.0 branch April 7, 2026 16:05
CBL-Mariner-Bot added a commit that referenced this pull request Apr 15, 2026
)

Signed-off-by: Kanishk Bansal <kanbansal@microsoft.com>
Co-authored-by: Kanishk Bansal <kanbansal@microsoft.com>
Co-authored-by: jslobodzian <joslobo@microsoft.com>
(cherry picked from commit 7bd3646)
@CBL-Mariner-Bot
Copy link
Copy Markdown
Collaborator Author

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Automatic PR AutoUpgrade Core CVE-fixed-by-upgrade CVE fixed by package upgrade CVEFixReadyForMaintainerReview When a CVE fix has been reviewed by release manager and is ready for stable maintainer review fasttrack/3.0 PRs Destined for Azure Linux 3.0 Packaging security

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants