[Buildroot] [PATCH 1/1] package/iperf3: security bump to version 3.17.1

[Buildroot] [PATCH 1/1] package/iperf3: security bump to version 3.17.1

[Bernd Kuhls]

Removed patch which is included in this release, autoreconf is not needed
anymore.

Updated license hash due to copyright year bump:
https://github.com/esnet/iperf/commit/7b947051d5192388dfa8a18989692e7af4226c62

Fixes CVE-2024-26306.

Release notes:
https://github.com/esnet/iperf/releases/tag/3.17.1
https://github.com/esnet/iperf/releases/tag/3.17

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
---
 ...1-Check-and-link-libatomic-if-needed.patch | 42 -------------------
 package/iperf3/iperf3.hash                    |  6 +--
 package/iperf3/iperf3.mk                      |  5 +--
 3 files changed, 4 insertions(+), 49 deletions(-)
 delete mode 100644 package/iperf3/0001-Check-and-link-libatomic-if-needed.patch

diff --git a/package/iperf3/0001-Check-and-link-libatomic-if-needed.patch b/package/iperf3/0001-Check-and-link-libatomic-if-needed.patch
deleted file mode 100644
index ddb50c4694..0000000000
--- a/package/iperf3/0001-Check-and-link-libatomic-if-needed.patch
+++ /dev/null
@@ -1,42 +0,0 @@
-From bbf710e77e4a0438a2d995fd69b472e5ff054c69 Mon Sep 17 00:00:00 2001
-From: Jan Palus <jpalus@fastmail.com>
-Date: Sun, 3 Dec 2023 12:14:05 +0100
-Subject: [PATCH] Check and link libatomic if needed
-
-Some architectures without native support for 64-bit atomics need
-linking with libatomic.
-
-Signed-off-by: Julien Olivain <ju.o@free.fr>
-Upstream: https://github.com/esnet/iperf/commit/1511e9f85b548891ea53d4e378903344df1fd31e
----
- configure.ac | 14 +++++++++++++-
- 1 file changed, 13 insertions(+), 1 deletion(-)
-
-diff --git a/configure.ac b/configure.ac
-index 2594b39..ad7eaf1 100644
---- a/configure.ac
-+++ b/configure.ac
-@@ -92,7 +92,19 @@ CXX="$PTHREAD_CXX"
- ])
- 
- # Atomics
--AC_CHECK_HEADERS([stdatomic.h])
-+AC_CHECK_HEADERS([stdatomic.h],
-+    [AC_MSG_CHECKING([whether libatomic is required])
-+    AC_LINK_IFELSE([AC_LANG_PROGRAM([[#include <stdatomic.h>]], [[atomic_uint_fast64_t i; i++;]])],
-+        [AC_MSG_RESULT([no])],
-+        [save_LIBS="$LIBS"
-+        LIBS="$LIBS -latomic"
-+        AC_LINK_IFELSE([AC_LANG_PROGRAM([[#include <stdatomic.h>]], [[atomic_uint_fast64_t i; i++;]])],
-+            [AC_MSG_RESULT([yes])],
-+            [AC_MSG_ERROR([failed to find working configuration with atomics])]
-+        )]
-+    )],
-+    []
-+)
- 
- # Check for poll.h (it's in POSIX so everyone should have it?)
- AC_CHECK_HEADERS([poll.h])
--- 
-2.44.0
-
diff --git a/package/iperf3/iperf3.hash b/package/iperf3/iperf3.hash
index a8634c4a7e..ee0149daed 100644
--- a/package/iperf3/iperf3.hash
+++ b/package/iperf3/iperf3.hash
@@ -1,4 +1,4 @@
-# From https://downloads.es.net/pub/iperf/iperf-3.16.tar.gz.sha256
-sha256  cc740c6bbea104398cc3e466befc515a25896ec85e44a662d5f4a767b9cf713e  iperf-3.16.tar.gz
+# From https://downloads.es.net/pub/iperf/iperf-3.17.1.tar.gz.sha256
+sha256  84404ca8431b595e86c473d8f23d8bb102810001f15feaf610effd3b318788aa  iperf-3.17.1.tar.gz
 # Locally computed
-sha256  35aa7c4618b9884d6faa9b43a4e70291b35ea9f89329d5d33becd852e85221b0  LICENSE
+sha256  3dc3e2076dd9cdea2b66d8fe213997ff25fb6171594f055b59fe25321b438f6f  LICENSE
diff --git a/package/iperf3/iperf3.mk b/package/iperf3/iperf3.mk
index 3ab68bd13b..1d2b57208a 100644
--- a/package/iperf3/iperf3.mk
+++ b/package/iperf3/iperf3.mk
@@ -4,16 +4,13 @@
 #
 ################################################################################
 
-IPERF3_VERSION = 3.16
+IPERF3_VERSION = 3.17.1
 IPERF3_SITE = https://downloads.es.net/pub/iperf
 IPERF3_SOURCE = iperf-$(IPERF3_VERSION).tar.gz
 IPERF3_LICENSE = BSD-3-Clause, BSD-2-Clause, MIT
 IPERF3_LICENSE_FILES = LICENSE
 IPERF3_CPE_ID_VENDOR = es
 
-# 0001-Check-and-link-libatomic-if-needed.patch
-IPERF3_AUTORECONF = YES
-
 IPERF3_CONF_ENV += CFLAGS="$(TARGET_CFLAGS) -D_GNU_SOURCE"
 
 ifeq ($(BR2_PACKAGE_OPENSSL),y)
-- 
2.39.2

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH 1/1] package/iperf3: security bump to version 3.17.1

[Thomas Petazzoni via buildroot]

On Sat, 10 Aug 2024 19:38:34 +0200
Bernd Kuhls <bernd@kuhls.net> wrote:

> Removed patch which is included in this release, autoreconf is not needed
> anymore.
> 
> Updated license hash due to copyright year bump:
> https://github.com/esnet/iperf/commit/7b947051d5192388dfa8a18989692e7af4226c62
> 
> Fixes CVE-2024-26306.
> 
> Release notes:
> https://github.com/esnet/iperf/releases/tag/3.17.1
> https://github.com/esnet/iperf/releases/tag/3.17
> 
> Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
> ---
>  ...1-Check-and-link-libatomic-if-needed.patch | 42 -------------------
>  package/iperf3/iperf3.hash                    |  6 +--
>  package/iperf3/iperf3.mk                      |  5 +--
>  3 files changed, 4 insertions(+), 49 deletions(-)
>  delete mode 100644 package/iperf3/0001-Check-and-link-libatomic-if-needed.patch

Applied to master, thanks.

Thomas
-- 
Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH 1/1] package/iperf3: security bump to version 3.17.1

[Peter Korsgaard]

>>>>> "Bernd" == Bernd Kuhls <bernd@kuhls.net> writes:

 > Removed patch which is included in this release, autoreconf is not needed
 > anymore.

 > Updated license hash due to copyright year bump:
 > https://github.com/esnet/iperf/commit/7b947051d5192388dfa8a18989692e7af4226c62

 > Fixes CVE-2024-26306.

 > Release notes:
 > https://github.com/esnet/iperf/releases/tag/3.17.1
 > https://github.com/esnet/iperf/releases/tag/3.17

 > Signed-off-by: Bernd Kuhls <bernd@kuhls.net>

Committed to 2024.02.x and 2024.05.x, thanks.

-- 
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot