perfSONAR User Q&A and Other Discussion

["Bruce A. Mah" <>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

ESnet (Energy Sciences Network) is proud to announce the release of
iperf-3.19.1. This release includes several security fixes, including one
heap overflow in authentication, which could cause an iperf3 server to crash,
one assertion error that could cause a server to crash, and one buffer 
overflow
using the MSG_TRUNC option in Zerocopy. For more information, please see:


iperf3 Memory-Mapped Buffer Overflow CVE-2025-54351
https://downloads.es.net/pub/iperf/esnet-secadv-2025-0001.txt.asc

iperf3 Crash on Malformed Authentication CVE-2025-54350
https://downloads.es.net/pub/iperf/esnet-secadv-2025-0002.txt.asc

iperf3 Off-by-one Heap-Overflow in Authentication CVE-2025-54349
https://downloads.es.net/pub/iperf/esnet-secadv-2025-0003.txt.asc


ESnet would like to thank Han Lee of Apple Information Security for bringing
these issues to our attention.

More information on these changes can be found in the
iperf-3.19.1 release notes, which are contained in the RELNOTES.md file
in the distribution.

iperf-3.19.1 should be fully backward-compatible with prior iperf3
releases, that is, iperf-3.19.1 clients and servers should
interoperate correctly with all 3.x clients and servers.

The source code for iperf-3.19.1 is available at:

https://downloads.es.net/pub/iperf/iperf-3.19.1.tar.gz

SHA256 hash:

dc63f89ec581ea99f8b558d8eb35109de06383010db5a1906c208a562ba0c270

iperf3 is freely-redistributable under a 3-clause BSD license.  More
information can be found in the LICENSE file inside the source
distribution.

Additional documentation: https://software.es.net/iperf

Source code and issue tracker: https://github.com/esnet/iperf

Discussion forums: https://github.com/esnet/iperf/discussions

Reporting security issues: 

User questions can go to the iperf users list (which is more-or-less
shared between iperf2 and iperf3):



Mailing list information and archives can be found at:

https://lists.sourceforge.net/lists/listinfo/iperf-users

The mailing list for iperf3 development is:



To see the list archives or join the mailing list, visit:

http://groups.google.com/group/iperf-dev






-----BEGIN PGP SIGNATURE-----

iQEzBAEBCgAdFiEE+Fo4IENp9xo01E6DSYSRCoyq7ooFAmiD6JMACgkQSYSRCoyq
7opOsAf9GI0BKEbIMBTSKtj+13NA9nB4WkAYRxBd7Hq7Bkd+turXS0+QOc0m90Wd
ctShqiIUCd+4SHvUVNPnO+gdsETngOtwjGQ4RcSeew1XnGvZDANe6jstT8R6xVTK
7cNH/d9cYUUmR56ZiPbs4lwyTtu1e5X3NZnQ77LKge7kscuWbkGIeC1ATnMERjpJ
A5iW+6RdDkfnG8wW3Lpcs6Fw64TQkvOB6JsxdemnbHoex19GOxHaiB2GPRa6y5D2
uAJ8g6KMLwxlM9sEW+m/jiNlYyGbO/qfDOvK8VVLOxDKdaBmbbMG6F1bct/FF6Zk
F1YXAOaql3I+DEsnAIjA3DzEBn0AfA==
=YwiD
-----END PGP SIGNATURE-----