Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
1708da69 by Moritz Muehlenhoff at 2026-09-30T20:10:48+02:00
new iperf3 issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -363,8 +363,18 @@ CVE-2026-102620 (A vulnerability was determined in
Freedesktop Poppler 26.06.0/2
NOTE: https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1762
NOTE:
https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/2326
NOTE:
https://gitlab.freedesktop.org/poppler/poppler/-/commit/245d3c6823377755f2c1d5fdddd010279c6ed94d
+CVE-2026-101283
+ - iperf3 <unfixed>
+ NOTE: https://github.com/esnet/iperf/releases/tag/3.22
+ NOTE:
https://github.com/esnet/iperf/commit/e29f6504dcfac7d2961fed4fd66364115e36fe5a
(3.22)
+CVE-2026-101276
+ - iperf3 <unfixed>
+ NOTE: https://github.com/esnet/iperf/releases/tag/3.22
+ NOTE:
https://github.com/esnet/iperf/commit/9bea2d9a49d54870e2405c209fa60bf134a8a1a1
(3.22)
CVE-2026-102253 (iperf3 versions prior to 3.22 contains a denial of service
vulnerabili ...)
- TODO: check
+ - iperf3 <unfixed>
+ NOTE:
https://github.com/esnet/iperf/commit/a25378f8cbbaa7b3db5674ca3dcc19658ae65da3
(3.22)
+ NOTE: https://github.com/esnet/iperf/releases/tag/3.22
CVE-2026-102252 (A path traversal vulnerability (CWE-22) in the embedded VMDK
filesyste ...)
TODO: check
CVE-2026-100299 (In Anjvision YSSD\u2011RTMP\u2011H5 firmware version 3.3.2.4,
the devi ...)
@@ -65550,7 +65560,7 @@ CVE-2026-71217 (A flaw was found in iperf3. A remote
attacker can exploit this v
[bookworm] - iperf3 <postponed> (Minor issue)
[bullseye] - iperf3 <postponed> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2460984
- NOTE:
https://github.com/esnet/iperf/commit/494dd377eca4689672becdf06a85158557db1586
+ NOTE:
https://github.com/esnet/iperf/commit/494dd377eca4689672becdf06a85158557db1586
(3.22)
CVE-2026-70355 (Improper neutralization of input during web page generation
('cross-si ...)
NOT-FOR-US: Microsoft
CVE-2026-70354 (Out-of-bounds write in .NET allows an unauthorized attacker to
execute ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1708da694c405cc4998d28f5d78563f7cedb751d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1708da694c405cc4998d28f5d78563f7cedb751d
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
