- update to 3.17.1 (bsc#1224262, CVE-2024-26306):

* BREAKING CHANGE: iperf3's authentication features, when used
    with OpenSSL prior to 3.2.0, contain a vulnerability to a
    side-channel timing attack. To address this flaw, a change
    has been made to the padding applied to encrypted strings.
    This change is not backwards compatible with older versions of
    iperf3 (before 3.17). To restore
    the older (vulnerable) behavior, and hence
    backwards-compatibility, use the --use-pkcs1-padding flag. The
    iperf3 team thanks Hubert Kario from RedHat for reporting this
    issue and providing feedback on the fix. (CVE-2024-26306)(PR#1695)
  * iperf3 no longer changes its current working directory in --daemon
    mode. This results in more predictable behavior with relative
    paths, in particular finding key and credential files for
    authentication. (PR#1672)
  * A new --json-stream option has been added to enable a streaming
    output format, consisting of a series of JSON objects (for the
    start of the test, each measurement interval, and the end of the
    test) separated by newlines (#444, #923, #1098).
  * UDP tests now work correctly between different endian hosts
  * The --fq-rate parameter now works for --reverse tests
  * The statistics reporting interval is now available in the --json
    start test object (#1663).
  * A negative time test duration is now properly flagged as an error
    (IS#1662 / PR#1666).

OBS-URL: https://build.opensuse.org/package/show/network:utilities/iperf?expand=0&rev=71

iperf-3.16.tar.gz.sha256

@@ -1 +0,0 @@
-cc740c6bbea104398cc3e466befc515a25896ec85e44a662d5f4a767b9cf713e  iperf-3.16.tar.gz

iperf-3.17.1.tar.gz.sha256

@@ -0,0 +1 @@
+84404ca8431b595e86c473d8f23d8bb102810001f15feaf610effd3b318788aa  iperf-3.17.1.tar.gz

iperf.changes

@@ -1,3 +1,32 @@
+-------------------------------------------------------------------
+Wed May 15 10:53:18 UTC 2024 - Dirk Müller <dmueller@suse.com>
+
+- update to 3.17.1 (bsc#1224262, CVE-2024-26306):
+  * BREAKING CHANGE: iperf3's authentication features, when used
+    with OpenSSL prior to 3.2.0, contain a vulnerability to a
+    side-channel timing attack. To address this flaw, a change
+    has been made to the padding applied to encrypted strings.
+    This change is not backwards compatible with older versions of
+    iperf3 (before 3.17). To restore
+    the older (vulnerable) behavior, and hence
+    backwards-compatibility, use the --use-pkcs1-padding flag. The
+    iperf3 team thanks Hubert Kario from RedHat for reporting this
+    issue and providing feedback on the fix. (CVE-2024-26306)(PR#1695)
+  * iperf3 no longer changes its current working directory in --daemon
+    mode. This results in more predictable behavior with relative
+    paths, in particular finding key and credential files for
+    authentication. (PR#1672)
+  * A new --json-stream option has been added to enable a streaming
+    output format, consisting of a series of JSON objects (for the
+    start of the test, each measurement interval, and the end of the
+    test) separated by newlines (#444, #923, #1098).
+  * UDP tests now work correctly between different endian hosts
+  * The --fq-rate parameter now works for --reverse tests
+  * The statistics reporting interval is now available in the --json
+    start test object (#1663).
+  * A negative time test duration is now properly flagged as an error
+    (IS#1662 / PR#1666).
+
 -------------------------------------------------------------------
 Wed Dec 27 11:25:27 UTC 2023 - Dirk Müller <dmueller@suse.com>
 

iperf.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package iperf
 #
-# Copyright (c) 2023 SUSE LLC
+# Copyright (c) 2024 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -18,7 +18,7 @@
 
 %define soname  0
 Name:           iperf
-Version:        3.16
+Version:        3.17.1
 Release:        0
 Summary:        A tool to measure network performance
 License:        BSD-3-Clause