From a2a174aafc706cb565a287da884201ee8c8d9fcf Mon Sep 17 00:00:00 2001 From: Gyorgy Sarvari Date: Thu, 9 Oct 2025 19:16:51 +0200 Subject: [PATCH] iperf2: ignore irrelevant CVEs These CVEs are for iperf3 - which is a similar application in its goals (and name), but an independent project from this, and the projects are independent implementations also, they share no common code. Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj (cherry picked from commit aedf74e08230f60c270032e8b937d1ab9bd2fc9c) Signed-off-by: Gyorgy Sarvari Signed-off-by: Anuj Mittal --- meta-oe/recipes-benchmark/iperf2/iperf2_2.0.13.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta-oe/recipes-benchmark/iperf2/iperf2_2.0.13.bb b/meta-oe/recipes-benchmark/iperf2/iperf2_2.0.13.bb index 86e5fef530..05a905b98f 100644 --- a/meta-oe/recipes-benchmark/iperf2/iperf2_2.0.13.bb +++ b/meta-oe/recipes-benchmark/iperf2/iperf2_2.0.13.bb @@ -21,3 +21,6 @@ PACKAGECONFIG ??= "${@bb.utils.contains('DISTRO_FEATURES', 'ipv6', 'ipv6', '', d PACKAGECONFIG[ipv6] = "--enable-ipv6,--disable-ipv6," CVE_PRODUCT = "iperf_project:iperf" +CVE_STATUS[CVE-2025-54349] = "cpe-incorrect: the vulnerability is in iperf3, which is a different project" +CVE_STATUS[CVE-2025-54350] = "cpe-incorrect: the vulnerability is in iperf3, which is a different project" +CVE_STATUS[CVE-2025-54351] = "cpe-incorrect: the vulnerability is in iperf3, which is a different project"