Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 514
Alerts This Week
Warning Icon 1 514

Stay Secure with the Latest Linux Advisories

Ubuntu Large Esm H800
Ubuntu

Ubuntu Imagemagick Critical Denial of Service Vulnerabilities USN-8558-1

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H900
Ubuntu

Ubuntu jbig2dec Important Denial of Service Vulnerabilities USN-8582-1

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 26.04 AccountsService Important Local Exec Threat CVE-2026-61897

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H800
Ubuntu

Ubuntu OpenSSH Critical Network Access Issue CVE-2026-35414 USN-8577-1

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H900
Ubuntu

Ubuntu 16.04 CUPS Critical Control Character Injection CVE-2026-34980

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H900
Ubuntu

Ubuntu 26.04 Snapd Critical Security Issues July 2026 USN-8579-1

Calendar White Jul 21, 2026
Critical
Debianlts Large Esm H800
Debian LTS

Debian rtpengine Critical Origin Validation Issue DLA-4691-1 CVE-2025-53399

Calendar White Jul 21, 2026
Critical
Opensuse Large Esm H900
openSUSE

openSUSE Leap 16.0 Beets Moderate Web Issue Fix SUSE-SU-2026-21383-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Chromium Important Use After Free Issues Fix 2026-21382-1

Calendar White Jul 21, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 28 articles for you...
219
Ls Advisories Rockylinux Esm H240
Price Tag%201security advisorymoderatebuffer overflow

Rocky Linux 9 RLSA-2026-1595 iperf3 Moderate Buffer Overflow Fix

Moderate: iperf3 security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:1595", "synopsis": "Moderate: iperf3 security update", "severity": "SEVERITY_MODERATE", "topic": "An update is available for iperf3.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.\n\nSecurity Fix(es):\n\n* iperf3: iperf Heap Buffer Overflow (CVE-2025-54349)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 9"], "fixes": [{"ticket": "2386151", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2386151", "description": ""}], "cves": [{"name": "CVE-2025-54349", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2025-54349", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L", "cvss3BaseScore": "6.5", "cwe": "CWE-193"}], "references": [], "publishedAt": "2026-02-05T09:10:29.578199Z", "rpms": {"Rocky Linux 9": {"nvras": ["iperf3-0:3.9-14.el9_7.1.aarch64.rpm", "iperf3-0:3.9-14.el9_7.1.i686.rpm", "iperf3-0:3.9-14.el9_7.1.ppc64le.rpm", "iperf3-0:3.9-14.el9_7.1.s390x.rpm", "iperf3-0:3.9-14.el9_7.1.src.rpm", "iperf3-0:3.9-14.el9_7.1.x86_64.rpm", "iperf3-debuginfo-0:3.9-14.el9_7.1.aarch64.rpm", "iperf3-debuginfo-0:3.9-14.el9_7.1.i686.rpm", "iperf3-debuginfo-0:3.9-14.el9_7.1.ppc64le.rpm", "iperf3-debuginfo-0:3.9-14.el9_7.1.s390x.rpm", "iperf3-debuginfo-0:3.9-14.el9_7.1.x86_64.rpm", "iperf3-debugsource-0:3.9-14.el9_7.1.aarch64.rpm", "iperf3-debugsource-0:3.9-14.el9_7.1.i686.rpm", "iperf3-debugsource-0:3.9-14.el9_7.1.ppc64le.rpm","iperf3-debugsource-0:3.9-14.el9_7.1.s390x.rpm", "iperf3-debugsource-0:3.9-14.el9_7.1.x86_64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. A Moderate security advisory for iperf3 on Rocky Linux addressing buffer overflow issues. Immediate action recommended.. iperf3 security update, Rocky Linux update, buffer overflow issue, CVSS scoring, security fix. . Severity: moderate. LinuxSecurity.com Team

Calendar%202 Feb 05, 2026 •moderate Rocky Linux
219
Ls Advisories Rockylinux Esm H240
Price Tag%201security advisorymoderateupdate

Rocky Linux 10 iperf3 Moderate Buffer Overflow Advisory RLSA-2026-1597

Moderate: iperf3 security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:1597", "synopsis": "Moderate: iperf3 security update", "severity": "SEVERITY_MODERATE", "topic": "An update is available for iperf3.\nThis update affects Rocky Linux 10.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.\n\nSecurity Fix(es):\n\n* iperf3: iperf Heap Buffer Overflow (CVE-2025-54349)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 10"], "fixes": [{"ticket": "2386151", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2386151", "description": ""}], "cves": [{"name": "CVE-2025-54349", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2025-54349", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L", "cvss3BaseScore": "6.5", "cwe": "CWE-193"}], "references": [], "publishedAt": "2026-02-03T17:23:52.716255Z", "rpms": {"Rocky Linux 10": {"nvras": ["iperf3-debuginfo-0:3.17.1-5.el10_1.ppc64le.rpm", "iperf3-debuginfo-0:3.17.1-5.el10_1.s390x.rpm", "iperf3-debugsource-0:3.17.1-5.el10_1.aarch64.rpm", "iperf3-debugsource-0:3.17.1-5.el10_1.ppc64le.rpm", "iperf3-0:3.17.1-5.el10_1.src.rpm", "iperf3-debugsource-0:3.17.1-5.el10_1.s390x.rpm", "iperf3-0:3.17.1-5.el10_1.x86_64.rpm", "iperf3-0:3.17.1-5.el10_1.s390x.rpm", "iperf3-0:3.17.1-5.el10_1.aarch64.rpm", "iperf3-debuginfo-0:3.17.1-5.el10_1.x86_64.rpm", "iperf3-debugsource-0:3.17.1-5.el10_1.x86_64.rpm", "iperf3-debuginfo-0:3.17.1-5.el10_1.aarch64.rpm", "iperf3-0:3.17.1-5.el10_1.ppc64le.rpm"]}}, "rebootSuggested": false,"buildReferences": []}. A moderate security update for iperf3 on Rocky Linux to address a heap buffer overflow vulnerability. Learn more.. iperf3 security update, Rocky Linux 10, moderate severity issue, buffer overflow fix. . Severity: moderate. LinuxSecurity.com Team

Calendar%202 Feb 03, 2026 •moderate Rocky Linux
Banner 3 1028x280 1708121785 1771599793
219
Ls Advisories Rockylinux Esm H240
Price Tag%201security advisorymoderatebuffer overflow

Rocky Linux 8 RLSA-2026-1592 iperf3 Moderate Buffer Overflow CVE-2025-54349

Moderate: iperf3 security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:1592", "synopsis": "Moderate: iperf3 security update", "severity": "SEVERITY_MODERATE", "topic": "An update is available for iperf3.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.\n\nSecurity Fix(es):\n\n* iperf3: iperf Heap Buffer Overflow (CVE-2025-54349)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 8"], "fixes": [{"ticket": "2386151", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2386151", "description": ""}], "cves": [{"name": "CVE-2025-54349", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2025-54349", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L", "cvss3BaseScore": "6.5", "cwe": "CWE-193"}], "references": [], "publishedAt": "2026-02-03T17:19:45.352916Z", "rpms": {"Rocky Linux 8": {"nvras": ["iperf3-0:3.5-12.el8_10.aarch64.rpm", "iperf3-0:3.5-12.el8_10.i686.rpm", "iperf3-0:3.5-12.el8_10.src.rpm", "iperf3-0:3.5-12.el8_10.x86_64.rpm", "iperf3-debuginfo-0:3.5-12.el8_10.aarch64.rpm", "iperf3-debuginfo-0:3.5-12.el8_10.i686.rpm", "iperf3-debuginfo-0:3.5-12.el8_10.x86_64.rpm", "iperf3-debugsource-0:3.5-12.el8_10.aarch64.rpm", "iperf3-debugsource-0:3.5-12.el8_10.i686.rpm", "iperf3-debugsource-0:3.5-12.el8_10.x86_64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Moderate iperf3 security update available for Rocky Linux 8 addressing a heap buffer overflow issue.. Rocky Linux security update, iperf3 securitypatch, buffer overflow fix, security advisory. . Severity: moderate. LinuxSecurity.com Team

Calendar%202 Feb 03, 2026 •moderate Rocky Linux
217
Ls Advisories Oracle Esm H240
Price Tag%201security advisorymoderatebuffer overflow

Oracle Linux 10 ELSA-2026-1597 iperf3 Moderate Heap Buffer Overflow

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-1597 http://linux.oracle.com/errata/ELSA-2026-1597.html The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network: x86_64: iperf3-3.17.1-5.el10_1.x86_64.rpm aarch64: iperf3-3.17.1-5.el10_1.aarch64.rpm SRPMS: http://oss.oracle.com/ol10/SRPMS-updates/iperf3-3.17.1-5.el10_1.src.rpm Related CVEs: CVE-2025-54349 Description of changes: [3.17.1-5] - Resolves: RHEL-136170 - iperf Heap Buffer Overflow (CVE-2025-54349) _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Oracle Linux 10 iperf3 update addresses moderate buffer overflow issue with CVE-2025-54349. Security patched released.. Oracle Linux, iperf3, moderate buffer overflow, ELSA-2026-1597, Linux updates. . LinuxSecurity.com Team

Calendar%202 Feb 02, 2026 Oracle
Banner 3 1028x280 1708121785 1771599793
217
Ls Advisories Oracle Esm H240
Price Tag%201security advisorymoderatesecurity issue

Oracle Linux 9 ELSA-2026-1595 iperf3 Moderate Buffer Overflow Fix

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-1595 http://linux.oracle.com/errata/ELSA-2026-1595.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: iperf3-3.9-14.el9_7.1.i686.rpm iperf3-3.9-14.el9_7.1.x86_64.rpm aarch64: iperf3-3.9-14.el9_7.1.aarch64.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates/iperf3-3.9-14.el9_7.1.src.rpm Related CVEs: CVE-2025-54349 Description of changes: [3.9-14.1] - Resolves: RHEL-136181 - iperf Heap Buffer Overflow (CVE-2025-54349) _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Updated iperf3 for Oracle Linux addresses a moderate heap buffer overflow flaw, enhancing system security.. Oracle Linux iperf3 moderate update buffer overflow. . LinuxSecurity.com Team

Calendar%202 Feb 02, 2026 Oracle
217
Ls Advisories Oracle Esm H240
Price Tag%201security advisorymoderatebuffer overflow

Oracle Linux 8 iperf3 Moderate Heap Buffer Overflow Fix ELSA-2026-1592

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-1592 http://linux.oracle.com/errata/ELSA-2026-1592.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: x86_64: iperf3-3.5-12.el8_10.i686.rpm iperf3-3.5-12.el8_10.x86_64.rpm aarch64: iperf3-3.5-12.el8_10.aarch64.rpm SRPMS: http://oss.oracle.com/ol8/SRPMS-updates/iperf3-3.5-12.el8_10.src.rpm Related CVEs: CVE-2025-54349 Description of changes: [3.5-12] - Resolves: RHEL-136175 - iperf Heap Buffer Overflow (CVE-2025-54349) _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Oracle Linux 8's iperf3 sees moderate update for heap buffer overflow with critical patches to enhance security.. Oracle Linux ELSA iperf3 heap overflow security buffer. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Feb 02, 2026 •Important Oracle
Banner 3 1028x280 1708121785 1771599793
172
Ls Advisories Ubuntu Esm H240
Price Tag%201security advisorydenial of servicecritical

Ubuntu 25.10: iperf3 Critical Denial of Service Vulnerabilities USN-7970-1

Several security issues were fixed in iperf3.. ========================================================================== Ubuntu Security Notice USN-7970-1 January 21, 2026 iperf3 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: Several security issues were fixed in iperf3. Software Description: - iperf3: A TCP, UDP, and SCTP network bandwidth measurement tool Details: Jorge Sancho Larraz discovered that iperf3 did not properly manage certain inputs, which could cause the server process to stop responding, waiting for input on the control connection. A remote attacker could possibly use this issue to cause a denial of service. This issue was only addressed in Ubuntu 22.04 LTS. (CVE-2023-7250) It was discovered that iperf3 had a timing side-channel when performing RSA decryption. An attacker could possibly use this issue to recover sensitive information. This issue was only addressed in Ubuntu 20.04 LTS and Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2024-26306) It was discovered that iperf3 incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service. This issue was only addressed in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2024-53580) Han Lee discovered that iperf3 had an off-by-one heap overflow. An attacker could possibly use this issue to crash the program or execute arbitrary code. This issue was only addressed in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 25.10. (CVE-2025-54349) Han Lee discovered that iperf3 did not properly manage certain inputs. An attacker could possibly use this issue to cause a denial of service. (CVE-2025-54350) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 iperf3 3.18-2ubuntu0.1 libiperf0 3.18-2ubuntu0.1 Ubuntu 24.04 LTS iperf3 3.16-1ubuntu0.1~esm1 Available with Ubuntu Pro libiperf0 3.16-1ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 22.04 LTS iperf3 3.9-1+deb11u1ubuntu0.1 libiperf0 3.9-1+deb11u1ubuntu0.1 Ubuntu 20.04 LTS iperf3 3.7-3ubuntu0.1~esm2 Available with Ubuntu Pro libiperf0 3.7-3ubuntu0.1~esm2 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7970-1 CVE-2023-7250, CVE-2024-26306, CVE-2024-53580, CVE-2025-54349, CVE-2025-54350 Package Information: https://launchpad.net/ubuntu/+source/iperf3/3.18-2ubuntu0.1 https://launchpad.net/ubuntu/+source/iperf3/3.9-1+deb11u1ubuntu0.1 . Security notice addressing multiple iperf3 issues on Ubuntu affecting several releases, emphasizing critical updates needed.. iperf3 security advisory, Ubuntu update, Denial of service issue. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jan 21, 2026 •Critical Ubuntu
197
Ls Advisories Deblts Esm H240
Price Tag%201security advisorydebianimportant

Debian 11: Critical Heap Buffer Overflow Vulnerability in iperf3 DLA-4281-1

Two vulnerabilities have been fixed in the IP bandwidth measuring tool iperf3. CVE-2025-54349 . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4281-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Adrian Bunk August 24, 2025 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package : iperf3 Version : 3.9-1+deb11u3 CVE ID : CVE-2025-54349 CVE-2025-54350 Debian Bug : 1110376 Two vulnerabilities have been fixed in the IP bandwidth measuring tool iperf3. CVE-2025-54349 heap buffer overflow CVE-2025-54350 reachable assert For Debian 11 bullseye, these problems have been fixed in version 3.9-1+deb11u3. We recommend that you upgrade your iperf3 packages. For the detailed security status of iperf3 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/iperf3 Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Two security flaws in iperf3 addressed, notably a heap buffer overflow and an accessible assert. It is advised to update for Debian 11.. iperf3 security. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Aug 24, 2025 •Critical Debian LTS
Banner 3 1028x280 1708121785 1771599793
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics