[Git][security-tracker-team/security-tracker][master] new iperf3 issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1708da69 by Moritz Muehlenhoff at 2026-09-30T20:10:48+02:00
new iperf3 issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -363,8 +363,18 @@ CVE-2026-102620 (A vulnerability was determined in Freedesktop Poppler 26.06.0/2
 	NOTE: https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1762
 	NOTE: https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/2326
 	NOTE: https://gitlab.freedesktop.org/poppler/poppler/-/commit/245d3c6823377755f2c1d5fdddd010279c6ed94d
+CVE-2026-101283
+	- iperf3 <unfixed>
+	NOTE: https://github.com/esnet/iperf/releases/tag/3.22
+	NOTE: https://github.com/esnet/iperf/commit/e29f6504dcfac7d2961fed4fd66364115e36fe5a (3.22)
+CVE-2026-101276
+	- iperf3 <unfixed>
+	NOTE: https://github.com/esnet/iperf/releases/tag/3.22
+	NOTE: https://github.com/esnet/iperf/commit/9bea2d9a49d54870e2405c209fa60bf134a8a1a1 (3.22)
 CVE-2026-102253 (iperf3 versions prior to 3.22 contains a denial of service vulnerabili ...)
-	TODO: check
+	- iperf3 <unfixed>
+	NOTE: https://github.com/esnet/iperf/commit/a25378f8cbbaa7b3db5674ca3dcc19658ae65da3 (3.22)
+	NOTE: https://github.com/esnet/iperf/releases/tag/3.22
 CVE-2026-102252 (A path traversal vulnerability (CWE-22) in the embedded VMDK filesyste ...)
 	TODO: check
 CVE-2026-100299 (In Anjvision YSSD\u2011RTMP\u2011H5 firmware version 3.3.2.4, the devi ...)
@@ -65550,7 +65560,7 @@ CVE-2026-71217 (A flaw was found in iperf3. A remote attacker can exploit this v
 	[bookworm] - iperf3 <postponed> (Minor issue)
 	[bullseye] - iperf3 <postponed> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2460984
-	NOTE: https://github.com/esnet/iperf/commit/494dd377eca4689672becdf06a85158557db1586
+	NOTE: https://github.com/esnet/iperf/commit/494dd377eca4689672becdf06a85158557db1586 (3.22)
 CVE-2026-70355 (Improper neutralization of input during web page generation ('cross-si ...)
 	NOT-FOR-US: Microsoft
 CVE-2026-70354 (Out-of-bounds write in .NET allows an unauthorized attacker to execute ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1708da694c405cc4998d28f5d78563f7cedb751d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1708da694c405cc4998d28f5d78563f7cedb751d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260930/ca94fe2c/attachment-0001.htm>