security advisorydebianimportant
Two vulnerabilities have been fixed in the IP bandwidth measuring tool iperf3. CVE-2025-54349 . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4281-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Adrian Bunk August 24, 2025 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package : iperf3 Version : 3.9-1+deb11u3 CVE ID : CVE-2025-54349 CVE-2025-54350 Debian Bug : 1110376 Two vulnerabilities have been fixed in the IP bandwidth measuring tool iperf3. CVE-2025-54349 heap buffer overflow CVE-2025-54350 reachable assert For Debian 11 bullseye, these problems have been fixed in version 3.9-1+deb11u3. We recommend that you upgrade your iperf3 packages. For the detailed security status of iperf3 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/iperf3 Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Two security flaws in iperf3 addressed, notably a heap buffer overflow and an accessible assert. It is advised to update for Debian 11.. iperf3 security. . Severity: Critical. LinuxSecurity.com Team
Aug 24, 2025
•Critical
Debian LTS