Red Hat Product Errata RHSA-2026:61257 - Security Advisory Issued: 2026-08-31 Updated: 2026-08-31 RHSA-2026:61257 - Security Advisory Overview Updated Packages Synopsis Important: iperf3 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for iperf3 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss. Security Fix(es): iperf3: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion (CVE-2026-71217) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2460984 - CVE-2026-71217 iperf3: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion CVEs CVE-2026-71217 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM iperf3-3.5-12.el8_10.1.src.rpm SHA-256: 7d789cd5b3bf8c5c1e371c509dadb50e7ba978c127539c86d95fcdc3ab28e341 x86_64 iperf3-3.5-12.el8_10.1.i686.rpm SHA-256: 3f0e5c84344f5b334de77d94d8fd97611b921515ca9113fa47d73a5bceae37b6 iperf3-3.5-12.el8_10.1.x86_64.rpm SHA-256: c346b8ac897e2b897f2b837afe56ad38bc1ae9065b772527c4f2220a2136fe81 iperf3-debuginfo-3.5-12.el8_10.1.i686.rpm SHA-256: ba691f69888972739cac473d4d1debcce9f617ae55d0dab0556a226b1a802932 iperf3-debuginfo-3.5-12.el8_10.1.x86_64.rpm SHA-256: 81d730b424b7884333bd9bac9b9eb7a5f3d16db806ff784b3642bc78bbb2baf5 iperf3-debugsource-3.5-12.el8_10.1.i686.rpm SHA-256: 473839d5ec16fc37912c6215ff00847cce4bf0352054fa6a8f67cf5422b1eee6 iperf3-debugsource-3.5-12.el8_10.1.x86_64.rpm SHA-256: 43224ade2d46755cf905d8fa09a1466d51cc78803896524a169fa7ee6cc721c3 Red Hat Enterprise Linux for IBM z Systems 8 SRPM iperf3-3.5-12.el8_10.1.src.rpm SHA-256: 7d789cd5b3bf8c5c1e371c509dadb50e7ba978c127539c86d95fcdc3ab28e341 s390x iperf3-3.5-12.el8_10.1.s390x.rpm SHA-256: 3570a7debb565256d99d6d3c709cb8cc3c697a6529e4ca6df0dc1867f3dedb3e iperf3-debuginfo-3.5-12.el8_10.1.s390x.rpm SHA-256: 54a0a8250223376c810f9dac0eeb833755e086c6f5319f3ce31291e11c30b0be iperf3-debugsource-3.5-12.el8_10.1.s390x.rpm SHA-256: 04440df511e65500f92c75efdca67be8a8786e0ac6ae64c3fa660f8b48aa3c1e Red Hat Enterprise Linux for Power, little endian 8 SRPM iperf3-3.5-12.el8_10.1.src.rpm SHA-256: 7d789cd5b3bf8c5c1e371c509dadb50e7ba978c127539c86d95fcdc3ab28e341 ppc64le iperf3-3.5-12.el8_10.1.ppc64le.rpm SHA-256: 1c48f1b5fce936c9c21f77c3cb53ffedfeecd90692691c67a21eda33a993fe39 iperf3-debuginfo-3.5-12.el8_10.1.ppc64le.rpm SHA-256: 1d7d1e32818000f4dc43b1d7245bf660cba5ef3f24cd51e2569e34d160b38bed iperf3-debugsource-3.5-12.el8_10.1.ppc64le.rpm SHA-256: ac04beeb50d49fa82ffc8136a71647f372950c29aad8d9323348502128790f9f Red Hat Enterprise Linux for ARM 64 8 SRPM iperf3-3.5-12.el8_10.1.src.rpm SHA-256: 7d789cd5b3bf8c5c1e371c509dadb50e7ba978c127539c86d95fcdc3ab28e341 aarch64 iperf3-3.5-12.el8_10.1.aarch64.rpm SHA-256: 64141d357f9908330e79d9750422764a7663952f4757db0c3460938aba8f85bc iperf3-debuginfo-3.5-12.el8_10.1.aarch64.rpm SHA-256: 950e82c7fa9807972cc6407257b87bc556b233eaf9b161d08dc6886a2b3d724e iperf3-debugsource-3.5-12.el8_10.1.aarch64.rpm SHA-256: 3e84556ab068182e188dc4d98583eaacb26d0a7f4bcf6bb96d4f2e0fed12adbf Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 SRPM iperf3-3.5-12.el8_10.1.src.rpm SHA-256: 7d789cd5b3bf8c5c1e371c509dadb50e7ba978c127539c86d95fcdc3ab28e341 x86_64 iperf3-3.5-12.el8_10.1.i686.rpm SHA-256: 3f0e5c84344f5b334de77d94d8fd97611b921515ca9113fa47d73a5bceae37b6 iperf3-3.5-12.el8_10.1.x86_64.rpm SHA-256: c346b8ac897e2b897f2b837afe56ad38bc1ae9065b772527c4f2220a2136fe81 iperf3-debuginfo-3.5-12.el8_10.1.i686.rpm SHA-256: ba691f69888972739cac473d4d1debcce9f617ae55d0dab0556a226b1a802932 iperf3-debuginfo-3.5-12.el8_10.1.x86_64.rpm SHA-256: 81d730b424b7884333bd9bac9b9eb7a5f3d16db806ff784b3642bc78bbb2baf5 iperf3-debugsource-3.5-12.el8_10.1.i686.rpm SHA-256: 473839d5ec16fc37912c6215ff00847cce4bf0352054fa6a8f67cf5422b1eee6 iperf3-debugsource-3.5-12.el8_10.1.x86_64.rpm SHA-256: 43224ade2d46755cf905d8fa09a1466d51cc78803896524a169fa7ee6cc721c3 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 SRPM iperf3-3.5-12.el8_10.1.src.rpm SHA-256: 7d789cd5b3bf8c5c1e371c509dadb50e7ba978c127539c86d95fcdc3ab28e341 aarch64 iperf3-3.5-12.el8_10.1.aarch64.rpm SHA-256: 64141d357f9908330e79d9750422764a7663952f4757db0c3460938aba8f85bc iperf3-debuginfo-3.5-12.el8_10.1.aarch64.rpm SHA-256: 950e82c7fa9807972cc6407257b87bc556b233eaf9b161d08dc6886a2b3d724e iperf3-debugsource-3.5-12.el8_10.1.aarch64.rpm SHA-256: 3e84556ab068182e188dc4d98583eaacb26d0a7f4bcf6bb96d4f2e0fed12adbf Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 SRPM iperf3-3.5-12.el8_10.1.src.rpm SHA-256: 7d789cd5b3bf8c5c1e371c509dadb50e7ba978c127539c86d95fcdc3ab28e341 ppc64le iperf3-3.5-12.el8_10.1.ppc64le.rpm SHA-256: 1c48f1b5fce936c9c21f77c3cb53ffedfeecd90692691c67a21eda33a993fe39 iperf3-debuginfo-3.5-12.el8_10.1.ppc64le.rpm SHA-256: 1d7d1e32818000f4dc43b1d7245bf660cba5ef3f24cd51e2569e34d160b38bed iperf3-debugsource-3.5-12.el8_10.1.ppc64le.rpm SHA-256: ac04beeb50d49fa82ffc8136a71647f372950c29aad8d9323348502128790f9f Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 SRPM iperf3-3.5-12.el8_10.1.src.rpm SHA-256: 7d789cd5b3bf8c5c1e371c509dadb50e7ba978c127539c86d95fcdc3ab28e341 s390x iperf3-3.5-12.el8_10.1.s390x.rpm SHA-256: 3570a7debb565256d99d6d3c709cb8cc3c697a6529e4ca6df0dc1867f3dedb3e iperf3-debuginfo-3.5-12.el8_10.1.s390x.rpm SHA-256: 54a0a8250223376c810f9dac0eeb833755e086c6f5319f3ce31291e11c30b0be iperf3-debugsource-3.5-12.el8_10.1.s390x.rpm SHA-256: 04440df511e65500f92c75efdca67be8a8786e0ac6ae64c3fa660f8b48aa3c1e The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .