mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-10 00:04:06 -09:00
2d5c298d5a
Fixes the following vulnerability:
In iperf before 3.19.1, iperf_auth.c has a Base64Decode assertion
failure and application exit upon a malformed authentication attempt.
For more information, see:
- https://www.cve.org/CVERecord?id=CVE-2025-54350
- 4eab661da0
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
32 lines
977 B
Makefile
32 lines
977 B
Makefile
################################################################################
|
|
#
|
|
# iperf3
|
|
#
|
|
################################################################################
|
|
|
|
IPERF3_VERSION = 3.18
|
|
IPERF3_SITE = https://downloads.es.net/pub/iperf
|
|
IPERF3_SOURCE = iperf-$(IPERF3_VERSION).tar.gz
|
|
IPERF3_LICENSE = BSD-3-Clause, BSD-2-Clause, MIT
|
|
IPERF3_LICENSE_FILES = LICENSE
|
|
IPERF3_CPE_ID_VENDOR = es
|
|
|
|
# 0001-Fix-off-by-one-head-overflow-in-auth.patch
|
|
IPERF3_IGNORE_CVES += CVE-2025-54349
|
|
|
|
# 0002-Prevent-crash-due-to-assertion-failures-on-malformed-authentication-attempt.patch
|
|
IPERF3_IGNORE_CVES += CVE-2025-54350
|
|
|
|
IPERF3_CONF_ENV += CFLAGS="$(TARGET_CFLAGS) -D_GNU_SOURCE"
|
|
|
|
ifeq ($(BR2_PACKAGE_OPENSSL),y)
|
|
# We intentionally don't pass --with-openssl, otherwise pkg-config is
|
|
# not used, and indirect libraries are not picked up when static
|
|
# linking.
|
|
IPERF3_DEPENDENCIES += host-pkgconf openssl
|
|
else
|
|
IPERF3_CONF_OPTS += --without-openssl
|
|
endif
|
|
|
|
$(eval $(autotools-package))
|