rpms/iperf3
7
0
Fork 1
Code Issues Pull Requests Releases Activity
Measurement tool for TCP/UDP bandwidth performance
13 Commits 10 Branches 32 Tags 224 KiB
Diff 100%
c8s
Go to file
RHEL Packaging Agent 2c8669efac Fix CVE-2026-71217: add JSON value bounds checks in iperf3 
Backport upstream fix (commit 494dd377) for CVE-2026-71217
to iperf3 3.5. The patch adds bounds checking for all
peer-controlled JSON parameters in get_parameters() and
additional bounds checks in iperf_parse_arguments(), preventing
malicious clients/servers from injecting out-of-range values
for parameters such as num_streams, window size, MSS, TOS,
bandwidth, burst, and others.

CVE: CVE-2026-71217
Upstream patches:
 - 494dd377ec.patch
Resolves: RHEL-236174

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-08-12 09:38:03 +00:00
.fmf Improving testing files 2024-06-14 12:19:29 +02:00
.gitignore Import rpm: c8s 2023-02-27 13:43:43 -05:00
0002-udp-counters-manpage.patch Auto sync2gitlab import of iperf3-3.5-6.el8.src.rpm 2022-05-26 09:49:59 -04:00
0003-covscan-sctp.patch Auto sync2gitlab import of iperf3-3.5-6.el8.src.rpm 2022-05-26 09:49:59 -04:00
0004-cve-2023-38403.patch Resolves: RHEL-17069 - possible denial of service 2024-06-04 10:32:08 +02:00
0005-cve-2023-7250.patch Resolves: RHEL-17069 - possible denial of service 2024-06-04 10:32:08 +02:00
0006-cve-2024-26306.patch Resolves: RHEL-29578 - vulnerable to marvin attack if the authentication option is used 2024-06-12 13:27:27 +02:00
0007-cve-2024-53580.patch Resolves: RHEL-72924 - Denial of Service in iperf Due to Improper JSON Handling 2025-01-08 16:58:47 +01:00
0008-cve-2025-54349.patch Resolves: RHEL-136175 - iperf Heap Buffer Overflow (CVE-2025-54349) 2026-01-23 10:29:48 +01:00
0009-cve-2026-71217.patch Fix CVE-2026-71217: add JSON value bounds checks in iperf3 2026-08-12 09:38:03 +00:00
ci.fmf Improving testing files 2024-06-14 12:19:29 +02:00
gating.yaml Improving testing files 2024-06-14 12:19:29 +02:00
iperf3.spec Fix CVE-2026-71217: add JSON value bounds checks in iperf3 2026-08-12 09:38:03 +00:00
plans.fmf Update location of fmf plans 2025-08-11 10:37:33 +02:00
sources Auto sync2gitlab import of iperf3-3.5-6.el8.src.rpm 2022-05-26 09:49:59 -04:00