From 9fa033bb1d64d87d80e9b509dac0cfd86388bf47 Mon Sep 17 00:00:00 2001 From: Akhilesh Nema Date: Tue, 12 Aug 2025 00:52:37 -0700 Subject: [PATCH] package/iperf3: security bump to version 3.19.1 Release notes: https://github.com/esnet/iperf/releases/tag/3.19.1 Fixes the following security issues: - An off-by-one heap overflow has been fixed in authentication. CVE-2025-54349, ESNET-SECADV-2025-0003) https://github.com/advisories/GHSA-8xx8-qrh3-q8mq - An assert in authentication has been removed. (CVE-2025-54350, ESNET-SECADV-2025-0002) https://github.com/advisories/GHSA-r6x8-74x9-5mc9 - A buffer overflow in the --skip-rx-copy option for zerocopy has been fixed. (CVE-2025-54351, ESNET-SECADV-2025-0001) https://github.com/advisories/GHSA-xjwm-4pfw-49g2 Signed-off-by: Akhilesh Nema Signed-off-by: Julien Olivain (cherry picked from commit 96febd9c16082c0f09bfaa7ebb2d3848c5836e3e) Signed-off-by: Thomas Perale --- package/iperf3/iperf3.hash | 4 ++-- package/iperf3/iperf3.mk | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package/iperf3/iperf3.hash b/package/iperf3/iperf3.hash index 1ffb2c6c02..3d9ff0cf5d 100644 --- a/package/iperf3/iperf3.hash +++ b/package/iperf3/iperf3.hash @@ -1,4 +1,4 @@ -# From https://downloads.es.net/pub/iperf/iperf-3.19.tar.gz.sha256 -sha256 040161da1555ec7411a9d81191049830ef37717d429a94ee6cf0842618e0e29c iperf-3.19.tar.gz +# From https://downloads.es.net/pub/iperf/iperf-3.19.1.tar.gz.sha256 +sha256 dc63f89ec581ea99f8b558d8eb35109de06383010db5a1906c208a562ba0c270 iperf-3.19.1.tar.gz # Locally computed sha256 7c9ba0385fcf35c4c9e08ad0c0cba72d4315f36f0f742fef4de826a28cc33a97 LICENSE diff --git a/package/iperf3/iperf3.mk b/package/iperf3/iperf3.mk index 69c4792f98..df6b32abc1 100644 --- a/package/iperf3/iperf3.mk +++ b/package/iperf3/iperf3.mk @@ -4,7 +4,7 @@ # ################################################################################ -IPERF3_VERSION = 3.19 +IPERF3_VERSION = 3.19.1 IPERF3_SITE = https://downloads.es.net/pub/iperf IPERF3_SOURCE = iperf-$(IPERF3_VERSION).tar.gz IPERF3_LICENSE = BSD-3-Clause, BSD-2-Clause, MIT