-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ESnet (Energy Sciences Network) is proud to announce the release of iperf-3.19.1. This release includes several security fixes, including one heap overflow in authentication, which could cause an iperf3 server to crash, one assertion error that could cause a server to crash, and one buffer overflow using the MSG_TRUNC option in Zerocopy. For more information, please see:
iperf3 Memory-Mapped Buffer Overflow CVE-2025-54351 https://downloads.es.net/pub/iperf/esnet-secadv-2025-0001.txt.asc iperf3 Crash on Malformed Authentication CVE-2025-54350 https://downloads.es.net/pub/iperf/esnet-secadv-2025-0002.txt.asc iperf3 Off-by-one Heap-Overflow in Authentication CVE-2025-54349 https://downloads.es.net/pub/iperf/esnet-secadv-2025-0003.txt.asc ESnet would like to thank Han Lee of Apple Information Security for bringing these issues to our attention. More information on these changes can be found in the iperf-3.19.1 release notes, which are contained in the RELNOTES.md file in the distribution. iperf-3.19.1 should be fully backward-compatible with prior iperf3 releases, that is, iperf-3.19.1 clients and servers should interoperate correctly with all 3.x clients and servers. The source code for iperf-3.19.1 is available at: https://downloads.es.net/pub/iperf/iperf-3.19.1.tar.gz SHA256 hash: dc63f89ec581ea99f8b558d8eb35109de06383010db5a1906c208a562ba0c270 iperf3 is freely-redistributable under a 3-clause BSD license. More information can be found in the LICENSE file inside the source distribution. Additional documentation: https://software.es.net/iperf Source code and issue tracker: https://github.com/esnet/iperf Discussion forums: https://github.com/esnet/iperf/discussions Reporting security issues: ip...@es.net User questions can go to the iperf users list (which is more-or-less shared between iperf2 and iperf3): iperf-users@lists.sourceforge.net Mailing list information and archives can be found at: https://lists.sourceforge.net/lists/listinfo/iperf-users The mailing list for iperf3 development is: iperf-...@googlegroups.com To see the list archives or join the mailing list, visit: http://groups.google.com/group/iperf-dev -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEE+Fo4IENp9xo01E6DSYSRCoyq7ooFAmiD6JMACgkQSYSRCoyq 7opOsAf9GI0BKEbIMBTSKtj+13NA9nB4WkAYRxBd7Hq7Bkd+turXS0+QOc0m90Wd ctShqiIUCd+4SHvUVNPnO+gdsETngOtwjGQ4RcSeew1XnGvZDANe6jstT8R6xVTK 7cNH/d9cYUUmR56ZiPbs4lwyTtu1e5X3NZnQ77LKge7kscuWbkGIeC1ATnMERjpJ A5iW+6RdDkfnG8wW3Lpcs6Fw64TQkvOB6JsxdemnbHoex19GOxHaiB2GPRa6y5D2 uAJ8g6KMLwxlM9sEW+m/jiNlYyGbO/qfDOvK8VVLOxDKdaBmbbMG6F1bct/FF6Zk F1YXAOaql3I+DEsnAIjA3DzEBn0AfA== =YwiD -----END PGP SIGNATURE----- _______________________________________________ Iperf-users mailing list Iperf-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/iperf-users
