linux/meta-openembedded.git/meta-oe/recipes-benchmark, branch kirkstone

iperf3: remove incorrect CVE_PRODUCT setting

2026-02-26T12:36:35+00:00

This CVE_PRODUCT setting seems to be copied from the iperf2 recipe. But the CVE_PRODUCT for iperf3 should be just iperf3. For example, https://nvd.nist.gov/vuln/detail/CVE-2023-38403. Signed-off-by: Chen Qi Signed-off-by: Khem Raj Signed-off-by: Gyorgy Sarvari

fio: ignore CVE-2025-10824

2026-01-08T21:03:03+00:00

Details: https://nvd.nist.gov/vuln/detail/CVE-2025-10824 The upstream maintainer wasn't able to reproduce the issue[1], and the related bug is closed without further action. [1]: https://github.com/axboe/fio/issues/1981 Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj (cherry picked from commit a275078cbeaa0fafcfa4eb60ca69f05a8fe3df99) Adapted to Kirkstone (CVE_STATUS -> CVE_CHECK_STATUS) Signed-off-by: Gyorgy Sarvari

fio: fix CVE-2025-10823

2025-10-17T08:51:27+00:00

Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-10823 https://github.com/axboe/fio/issues/1982 Upstream-patch: https://github.com/axboe/fio/commit/6a39dfaffdb8a6c2080eec0dc7fb1ee532d54025 Signed-off-by: Saravanan Signed-off-by: Gyorgy Sarvari

iperf2: ignore irrelevant CVEs

2025-10-17T08:51:26+00:00

These CVEs are for iperf3 - which is a similar application in its goals (and name), but an independent project from this, and the projects are independent implementations also, they share no common code. Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj (cherry picked from commit aedf74e08230f60c270032e8b937d1ab9bd2fc9c) Reworked for Kirkstone (CVE_STATUS -> CVE_CHECK_IGNORE)) Signed-off-by: Gyorgy Sarvari

iperf3: upgrade 3.14 -> 3.15

2025-09-29T18:15:31+00:00

Changelog: =========== Several bugs that could allow the iperf3 server to hang waiting for input on the control connection has been fixed. A bug that caused garbled output with UDP tests on 32-bit hosts has been fixed (PR #1554, PR #1556). This bug was introduced in iperf-3.14. A bug in counting UDP messages has been fixed (PR #1367, PR #1380). Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj (cherry picked from commit 8765f02ffb85ddff21e461b716ef3f86d368cb4e) Signed-off-by: Gyorgy Sarvari

iperf3: Fix CVE-2024-53580

2025-09-26T13:13:03+00:00

iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters() function. References: https://nvd.nist.gov/vuln/detail/CVE-2024-53580 https://security-tracker.debian.org/tracker/CVE-2024-53580 Upstream patch: https://github.com/esnet/iperf/commit/3f66f604df7f1038a49108c48612c2f4fe71331f Signed-off-by: Soumya Sambu Signed-off-by: Gyorgy Sarvari

iperf3: Fix CVE-2024-26306

2025-09-26T13:12:59+00:00

iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side channel in RSA decryption operations. This side channel could be sufficient for an attacker to recover credential plaintext. It requires the attacker to send a large number of messages for decryption, as described in "Everlasting ROBOT: the Marvin Attack" by Hubert Kario. References: https://nvd.nist.gov/vuln/detail/CVE-2024-26306 https://security-tracker.debian.org/tracker/CVE-2024-26306 Upstream patch: https://github.com/esnet/iperf/commit/299b356df6939f71619bf45bf7a7d2222e17d840 Signed-off-by: Soumya Sambu Signed-off-by: Gyorgy Sarvari

iperf3: Fix CVE-2023-7250

2025-09-26T13:01:57+00:00

A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP. A malicious or malfunctioning client can send less than the expected amount of data to the iperf server, which can cause the server to hang indefinitely waiting for the remainder or until the connection gets closed. This will prevent other connections to the server, leading to a denial of service. References: https://nvd.nist.gov/vuln/detail/CVE-2023-7250 https://security-tracker.debian.org/tracker/CVE-2023-7250 Upstream patch: https://github.com/esnet/iperf/commit/5e3704dd850a5df2fb2b3eafd117963d017d07b4 Signed-off-by: Soumya Sambu Signed-off-by: Gyorgy Sarvari

iperf3: Fix CVE-2025-54349

2025-09-26T13:01:57+00:00

This commit fix heap overflow for iperf3 package Reference: https://github.com/esnet/iperf/commit/4e5313bab0b9b3fe03513ab54f722c8a3e4b7bdf Signed-off-by: Nitin Wankhade Signed-off-by: Gyorgy Sarvari

iperf3: Fix CVE-2025-54350

2025-09-26T13:01:57+00:00

remove assert to prevent crash due to assertion failure on malformed authentication attempt Reference: https://github.com/esnet/iperf/commit/4eab661da0bbaac04493fa40164e928c6df7934a Signed-off-by: Nitin Wankhade Signed-off-by: Gyorgy Sarvari