linux/meta-openembedded.git/meta-oe/recipes-benchmark/iperf3, branch kirkstone

iperf3: remove incorrect CVE_PRODUCT setting

2026-02-26T12:36:35+00:00

This CVE_PRODUCT setting seems to be copied from the iperf2 recipe. But the CVE_PRODUCT for iperf3 should be just iperf3. For example, https://nvd.nist.gov/vuln/detail/CVE-2023-38403. Signed-off-by: Chen Qi Signed-off-by: Khem Raj Signed-off-by: Gyorgy Sarvari

iperf3: upgrade 3.14 -> 3.15

2025-09-29T18:15:31+00:00

Changelog: =========== Several bugs that could allow the iperf3 server to hang waiting for input on the control connection has been fixed. A bug that caused garbled output with UDP tests on 32-bit hosts has been fixed (PR #1554, PR #1556). This bug was introduced in iperf-3.14. A bug in counting UDP messages has been fixed (PR #1367, PR #1380). Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj (cherry picked from commit 8765f02ffb85ddff21e461b716ef3f86d368cb4e) Signed-off-by: Gyorgy Sarvari

iperf3: Fix CVE-2024-53580

2025-09-26T13:13:03+00:00

iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters() function. References: https://nvd.nist.gov/vuln/detail/CVE-2024-53580 https://security-tracker.debian.org/tracker/CVE-2024-53580 Upstream patch: https://github.com/esnet/iperf/commit/3f66f604df7f1038a49108c48612c2f4fe71331f Signed-off-by: Soumya Sambu Signed-off-by: Gyorgy Sarvari

iperf3: Fix CVE-2024-26306

2025-09-26T13:12:59+00:00

iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side channel in RSA decryption operations. This side channel could be sufficient for an attacker to recover credential plaintext. It requires the attacker to send a large number of messages for decryption, as described in "Everlasting ROBOT: the Marvin Attack" by Hubert Kario. References: https://nvd.nist.gov/vuln/detail/CVE-2024-26306 https://security-tracker.debian.org/tracker/CVE-2024-26306 Upstream patch: https://github.com/esnet/iperf/commit/299b356df6939f71619bf45bf7a7d2222e17d840 Signed-off-by: Soumya Sambu Signed-off-by: Gyorgy Sarvari

iperf3: Fix CVE-2023-7250

2025-09-26T13:01:57+00:00

A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP. A malicious or malfunctioning client can send less than the expected amount of data to the iperf server, which can cause the server to hang indefinitely waiting for the remainder or until the connection gets closed. This will prevent other connections to the server, leading to a denial of service. References: https://nvd.nist.gov/vuln/detail/CVE-2023-7250 https://security-tracker.debian.org/tracker/CVE-2023-7250 Upstream patch: https://github.com/esnet/iperf/commit/5e3704dd850a5df2fb2b3eafd117963d017d07b4 Signed-off-by: Soumya Sambu Signed-off-by: Gyorgy Sarvari

iperf3: Fix CVE-2025-54349

2025-09-26T13:01:57+00:00

This commit fix heap overflow for iperf3 package Reference: https://github.com/esnet/iperf/commit/4e5313bab0b9b3fe03513ab54f722c8a3e4b7bdf Signed-off-by: Nitin Wankhade Signed-off-by: Gyorgy Sarvari

iperf3: Fix CVE-2025-54350

2025-09-26T13:01:57+00:00

remove assert to prevent crash due to assertion failure on malformed authentication attempt Reference: https://github.com/esnet/iperf/commit/4eab661da0bbaac04493fa40164e928c6df7934a Signed-off-by: Nitin Wankhade Signed-off-by: Gyorgy Sarvari

iperf3: upgrade 3.11 -> 3.14

2023-09-06T13:12:59+00:00

Upgrade iperf3 to 3.14 Fix CVE-2023-38403 and other bugs. The iperf3 release notes are available at: https://github.com/esnet/iperf/blob/99d738f496c96fd4fb50f45142e0bbc96bf71698/RELNOTES.md The only change in the LICENSE file was the year update: https://github.com/esnet/iperf/commit/6bfe27d82a3f74ad1239aba987a4fb75c1005078 Signed-off-by: Soumya Sambu Signed-off-by: Armin Kuster

iperf: Set CVE_PRODUCT to "iperf_project:iperf"

2022-06-15T13:58:23+00:00

Set CVE_PRODUCT as 'iperf_project:iperf' for iperf2 and iperf3 recipes, cve-check class is setting default CVE_PRODUCT to 'iperf2' and 'iperf3' respectively which ignores the iperf CVEs from NVD Database. Reference: CVE-2016-4303 Link: https://nvd.nist.gov/vuln/detail/CVE-2016-4303 Signed-off-by: Akash Hadke Signed-off-by: Akash Hadke Signed-off-by: Armin Kuster

iperf3: upgrade from 3.9 to 3.11

2022-03-21T15:25:11+00:00

The copyright dates were exteneded to 2022 so the LICENSE hash changed. Add some blank lines in the recipe to make it easier to read and refresh the patches to eliminate patch fuzz warnings. Signed-off-by: Randy MacLeod Signed-off-by: Khem Raj