This CVE_PRODUCT setting seems to be copied from the iperf2 recipe.
But the CVE_PRODUCT for iperf3 should be just iperf3. For example,
https://nvd.nist.gov/vuln/detail/CVE-2023-38403.
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Changelog:
===========
Several bugs that could allow the iperf3 server to hang waiting
for input on the control connection has been fixed.
A bug that caused garbled output with UDP tests on 32-bit hosts
has been fixed (PR #1554, PR #1556). This bug was introduced in
iperf-3.14.
A bug in counting UDP messages has been fixed (PR #1367, PR
#1380).
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 8765f02ffb85ddff21e461b716ef3f86d368cb4e)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA
authentication, allows a timing side channel in RSA decryption operations. This
side channel could be sufficient for an attacker to recover credential plaintext.
It requires the attacker to send a large number of messages for decryption, as
described in "Everlasting ROBOT: the Marvin Attack" by Hubert Kario.
References:
https://nvd.nist.gov/vuln/detail/CVE-2024-26306https://security-tracker.debian.org/tracker/CVE-2024-26306
Upstream patch:
299b356df6
Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
A flaw was found in iperf, a utility for testing network performance using TCP, UDP,
and SCTP. A malicious or malfunctioning client can send less than the expected amount
of data to the iperf server, which can cause the server to hang indefinitely waiting
for the remainder or until the connection gets closed. This will prevent other
connections to the server, leading to a denial of service.
References:
https://nvd.nist.gov/vuln/detail/CVE-2023-7250https://security-tracker.debian.org/tracker/CVE-2023-7250
Upstream patch:
5e3704dd85
Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Upgrade iperf3 to 3.14
Fix CVE-2023-38403 and other bugs.
The iperf3 release notes are available at:
99d738f496/RELNOTES.md
The only change in the LICENSE file was the year update:
6bfe27d82a
Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Set CVE_PRODUCT as 'iperf_project:iperf' for iperf2 and iperf3
recipes, cve-check class is setting default CVE_PRODUCT to
'iperf2' and 'iperf3' respectively which ignores the iperf
CVEs from NVD Database.
Reference:
CVE-2016-4303
Link: https://nvd.nist.gov/vuln/detail/CVE-2016-4303
Signed-off-by: Akash Hadke <akash.hadke@kpit.com>
Signed-off-by: Akash Hadke <hadkeakash4@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
The copyright dates were exteneded to 2022 so the LICENSE hash changed.
Add some blank lines in the recipe to make it easier to read and
refresh the patches to eliminate patch fuzz warnings.
Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This patch updates SRC_URIs using git to include branch=master if no branch is set
and also to use protocol=https for github urls as generated by the conversion script
in OE-Core.
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Add patch that checks for CPP prog, which helps to resolve build
errors:
../git/configure: line 14427: CPP: command not found
| ../git/configure: line 14553: ac_fn_c_try_cpp: command not found
| ../git/configure: line 14553: ac_fn_c_try_cpp: command not found
Signed-off-by: Andrey Zhizhikin <andrey.z@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Make building with OpenSSL optional but enabled by default as today.
Signed-off-by: Alexander Vickberg <wickbergster@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
$ bitbake iperf3-native
configure: error: --with-openssl was given, but test for OpenSSL failed
It's a broken native recipe which means no ones need it any more, so remove it.
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Licence-Update:
- Copyright years are updated to 2019
* Remove automake-foreign.patch as the logic included
in the new version
* Rebase 0002-Remove-pg-from-profile_CFLAGS.patch
to new version
Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Licence-Update:
- Copyright years are updated to 2018
- Remove the part about src/tcp_window_size.{c,h}
as iperf3 uses get/setsockopt() with SO_SNDBUF
and SO_RCVBUF directly now
* Update the path parameter for --with-openssl as
${RECIPE_SYSROOT}${prefix} to fix the below do_configure
error
| checking for openssl/ssl.h in /poky-build/tmp/work/i586-poky-linux/iperf3/3.6-r0/recipe-sysroot... no
| checking whether compiling and linking against OpenSSL works... no
| configure: error: in `/poky-build/tmp/work/i586-poky-linux/iperf3/3.6-r0/build':
| configure: error: --with-openssl was given, but test for OpenSSL failed
Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
WARNING: iperf3-3.2-r0 do_patch:
Some of the context lines in patches were ignored. This can lead to incorrectly applied patches.
The context lines in the patches can be updated with devtool:
devtool modify <recipe>
devtool finish --force-patch-refresh <recipe> <layer_path>
Then the updated patches and the source tree (in devtool's workspace)
should be reviewed to make sure the patches apply in the correct place
and don't introduce duplicate lines (which can, and does happen
when some of the context is ignored). Further information:
http://lists.openembedded.org/pipermail/openembedded-core/2018-March/148675.htmlhttps://bugzilla.yoctoproject.org/show_bug.cgi?id=10450
Details:
Applying patch 0001-include-stdint.h-for-various-std-c99-int-types.patch
patching file src/cjson.h
Hunk #1 succeeded at 28 with fuzz 2 (offset 5 lines).
patching file src/timer.h
Now at patch 0001-include-stdint.h-for-various-std-c99-int-types.patch
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Upgrade iperf3 from 3.1.3 to 3.2.
* update md5 checksum of license file which update year info and add
same bsd license for src/net.c
* add dependency openssl
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Version 3.1.3 includes security fix and all users are encouraged by the
developers to update to this or newer version as soon as possible.
Signed-off-by: Oleksandr Kravchuk <oleksandr.kravchuk@pelagicore.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
license md5 updated for copyright date modifications
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Add PACKAGECONFIG lksctp to fix qa warning:
| WARNING: QA Issue: iperf3 rdepends on lksctp-tools, but it isn't a
| build dependency? [build-deps]
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
If you want to use iperf3 to measure your board's IP performance, you
may also want to compile if for the build host, because unlike iperf,
iperf3 isn't readily available as a standard Ubuntu package for example.
Add a BBCLASSEXTEND="native" to the recipe so that you just can build
iperf3-native and have bitbake compile it for you, instead of having to
download, compile and install it manually on the build machine.
Signed-off-by: Mike Looijmans <mike.looijmans@topic.nl>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
iperf3 is the new successor of iperf. The project is now mature enough
as it started in 2009 and has stable releases. It supports reporting
results in the portable JSON format, provides more information than
iperf does and also adds some features from other tools such as nuttcp
and netperf that were missing from the original iperf.
This recipe is based on the iperf v3.0.8 recipe posted to the list by
Guy Morand
(http://lists.openembedded.org/pipermail/openembedded-devel/2014-October/098403.html)
with the following changes:
- Pass the 'foreign' option to automake.
- The Makefiles for the examples only work properly when the build is
done in the same directory as the source. Fix this in Makefile.am and
run bootstrap.sh to regenerate Makefile.in.
- Bump the version to the latest stable release.
Signed-off-by: Ben Shelton <ben.shelton@ni.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
