[CLSA-2025:1764679337] iperf3: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2025-12-02 12:42:26 UTC
Description:
- CVE-2025-54349: fix off-by-one error and heap-based buffer overflow in iperf_auth.c - CVE-2025-54350: prevent crash due to assertion failures on malformed authentication attempt in iperf_auth.c
Updated packages:
  • iperf3-3.9-14.el9.tuxcare.els1.i686.rpm
    sha:968dbb6e52d1ed5d8eb13a9286204ad4b85b2da585aa5b1f70293f6fd396e1c9
  • iperf3-3.9-14.el9.tuxcare.els1.x86_64.rpm
    sha:88b6ae2bf61a1452b92648cfc78ce73f13dc7df7f86aa6e164700ac02ae5dda0
  • iperf3-devel-3.9-14.el9.tuxcare.els1.x86_64.rpm
    sha:76326e45459672d5fef5ebbcaa0043710d552b05b5b4699c0472013bb3d75d9f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.