Changelog for iperf-3.17.1-85.1.x86_64.rpm :

* Wed May 15 2024 dmuellerAATTsuse.com- update to 3.17.1 (bsc#1224262, CVE-2024-26306):
* BREAKING CHANGE: iperf3\'s authentication features, when used with OpenSSL prior to 3.2.0, contain a vulnerability to a side-channel timing attack. To address this flaw, a change has been made to the padding applied to encrypted strings. This change is not backwards compatible with older versions of iperf3 (before 3.17). To restore the older (vulnerable) behavior, and hence backwards-compatibility, use the --use-pkcs1-padding flag. The iperf3 team thanks Hubert Kario from RedHat for reporting this issue and providing feedback on the fix. (CVE-2024-26306)(PR#1695)
* iperf3 no longer changes its current working directory in --daemon mode. This results in more predictable behavior with relative paths, in particular finding key and credential files for authentication. (PR#1672)
* A new --json-stream option has been added to enable a streaming output format, consisting of a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines (#444, #923, #1098).
* UDP tests now work correctly between different endian hosts
* The --fq-rate parameter now works for --reverse tests
* The statistics reporting interval is now available in the --json start test object (#1663).
* A negative time test duration is now properly flagged as an error (IS#1662 / PR#1666).
* Wed Dec 27 2023 dmuellerAATTsuse.com- update to 3.16:
* Multiple test streams started with -P/--parallel will now be serviced by different threads. This allows iperf3 to take advantage of multiple CPU cores on modern processors, and will generally result in significant throughput increases
* OpenSSL 3 is now detected at build time. If OpenSSL 3 is found, various older, deprecated, APIs will not be used. iperf3 will continue to work with OpenSSL 1.1.1. OpenSSL is used as a part of the iperf3 authentication functionality
* The authorized users file used by the authentication functionality is now checked for accessibility much earlier during the program startup, as opposed to being checked near the start of a test (Issue #1583, PR #1585).
* BREAKING CHANGE: iperf3 now requires pthreads and C atomic variables to compile and run.
* Sat Sep 23 2023 dmuellerAATTsuse.com- update to 3.15 (bsc#1215662, ESNET-SECADV-2023-0002):
* Several bugs that could allow the iperf3 server to hang waiting for input on the control connection has been fixed (ESnet Software Security Advisory ESNET-SECADV-2023-0002)
* A bug that caused garbled output with UDP tests on 32-bit hosts has been fixed (PR #1554, PR #1556). This bug was introduced in iperf-3.14.
* A bug in counting UDP messages has been fixed
* Thu Jul 20 2023 dmuellerAATTsuse.com- update to 3.14 (bsc#1213430, CVE-2023-38403):
* fixes a memory allocation hazard that allowed a remote user to crash an iperf3 process
* see https://downloads.es.net/pub/iperf/esnet-secadv-2023-0001.txt.asc
* obsoletes CVE-2023-38403.patch in older dists
* Tue Mar 07 2023 dmuellerAATTsuse.com- update to 3.13:
* Added missing bind_dev getter and setter.
* a fix for A resource leak bug in function iperf_create_pidfile (#1443)
* doc: Fix copy-and-paste error leading to wrong error message
* Fix crash on rcv-timeout with JSON logfile
* Sat Dec 03 2022 dmuellerAATTsuse.com- update to 3.12:
* cJSON has been updated to version 1.7.15 (#1383).
* The --bind % option syntax now works properly (#1360 /
* A server-side file descriptor leak with the --logfile option has been fixed (#1369 / #1360 / #1369 / #1389 / #1393).
* A bug that caused some large values from TCP_INFO to be misprinted as negative numbers has been fixed (#1372).
* Using the -k or -n flags with --reverse no longer leak into future tests (#1363 / #1364).
* There are now various debug level options available with the - -debug option. These can be used to adjust the amount of debugging output (#1327).
* A new --snd-timeout option has been added to set a termination timeout for idle TCP connections (#1215 / #1282).
* iperf3 is slightly more robust to out-of-order packets during UDP connection setup in --reverse mode (#914 / #1123 / #1182 / #1212 /
* iperf3 will now use different ports for each direction when the - -cport and --bdir options are set (#1249 / #1259).
* The iperf3 server will now exit if it can\'t open its log file
* Various help message and output fixes have been made (#1299 /
* Various compiler warnings have been fixed (#1211 / #1316).
* Operation of bootstrap.sh has been fixed and simplified (#1335 /
* Flow label support / compatibility under Linux has been improved
* Various minor memory leaks have been fixed (#1332 / #1333).
* A getter/setter has been added for the bind_port parameter (--cport option). (#1303, #1305)
* Various internal documentation improvements (#1265 / #1285 / #1304).
* Thu Mar 03 2022 msvecAATTsuse.com- update to 3.11:
* Update links to Discussions in documentation
* Fix DSCP so that TOS = DSCP
* 4 (#1162)
* Fix --bind-dev for TCP streams (#1153)
* Fix interface specification so doesn\'t overlap with IPv6 link-local addresses for -c and -B (#1157, #1180)
* Add get/set test_unit_format function declaration to iperf_api.h
* Auto adjustment of test-end condition for file transfers (-F), if no end condition is set, it will automatically adjust it to file size in bytes
* Exit if idle time expires waiting for a connection in one-off mode (#1187, #1197)
* Support zerocopy by reverse mode (#1204)
* Update help and manpage text for #1157, support bind device
* Consistently print target_bandwidth in JSON start section (#1177)
* Test bitrate added to JSON output (#1168)
* Remove fsync call after every write to receiving --file (#1176, #1159)
* Update documentation for -w (#1175)
* Fix for #952, different JSON object names for bidir reverse channel
* Mon Jun 07 2021 msvecAATTsuse.com- update to 3.10.1:
* Fixed a problem with autoconf scripts that made builds fail in some environments (#1154 / #1155).
* GNU autoconf 2.71 or newer is now required to regenerate iperf3\'s configure scripts.
* Mon Jun 07 2021 msvecAATTsuse.com- update to 3.10:
* Fix a bug where some --reverse tests didn\'t terminate (#982 / [#1054]).
* Responsiveness of control connections is slightly improved (#1045 / #1046 / #1063).
* The allowable clock skew when doing authentication between client and server is now configurable with the new --time-skew-threshold (#1065 / #1070).
* Bitrate throttling using the -b option now works when a burst size is specified (#1090).
* A bug with calculating CPU utilization has been fixed (#1076 / [#1077]).
* A --bind-dev option to support binding sockets to a given network interface has been added to make iperf3 work better with multi-homed machines and/or VRFs (#817 / #1089 / #1097).
* --pidfile now works with --client mode (#1110).
* The server is now less likely to get stuck due to network errors (#1101, #1125), controlled by the new --rcv-timeout option.
* Fixed a few bugs in termination conditions for byte or block-limited tests (#1113, #1114, #1115).
* Added tcp_info.snd_wnd to JSON output (#1148).
* Some bugs with garbled JSON output have been fixed (#1086, #1118, [#1143] / #1146).
* Support for setting the IPv4 don\'t-fragment (DF) bit has been added with the new --dont-fragment option (#1119).
* A failure with not being able to read the congestion control algorithm under WSL1 has been fixed (#1061 / #1126).
* Error handling and error messages now make more sense in cases where sockets were not successfully opened (#1129 / #1132 / [#1136], #1135 / #1138, #1128 / #1139).
* Some buffer overflow hazards were fixed (#1134).
* It is now possible to use the API to set/get the congestion control algorithm (#1036 / #1112).
* Mon Sep 14 2020 dmuellerAATTsuse.com- update to 3.9:
* A --timestamps flag has been added, which prepends a timestamp to each output line. An optional argument to this flag, which is a format specification to strftime(3), allows for custom timestamp formats (#909, #1028).
* A --server-bitrate-limit flag has been added as a server-side command-line argument. It allows a server to enforce a maximum throughput rate; client connections that specify a higher bitrate or exceed this bitrate during a test will be terminated. The bitrate is expressed in bits per second, with an optional trailing slash and integer count that specifies an averaging interval over which to enforce the limit (#999).
* A bug that caused increased CPU usage with the --bidir option has been fixed (#1011).
* Fixed various minor memory leaks (#1023).
* Sat Jul 11 2020 msvecAATTsuse.com- update to 3.8.1
* Minor bugfixes and enhancements- don\'t apply the profiling patch any more (removed iperf-disable-profiling.patch)
* Thu Nov 14 2019 msvecAATTsuse.com- update to 3.7
* Support for simultaneous bidirectional tests with the --bidir flag
* Use POSIX standard clock_gettime(3) interface for timekeeping where available
* Passwords for authentication can be provided via environment variable
* Specifying --repeating-payload and --reverse now works
* Failed authentication doesn\'t count for --one-off
* Several memory leaks related to authenticated use were fixed
* The delay for tearing down the control connection for the default timed tests has been increased, to more gracefully handle high-delay paths
* Various improvements to the libiperf APIs
* Fixed build behavior when OpenSSL is absent
* Portability fixes- spec file cleanup
* Fri Jul 06 2018 liedkeAATTrz.uni-mannheim.de- update to 3.6
* A new --extra-data option can be used to fill in a user-defined string field that appears in JSON output.
* A new --repeating-payload option makes iperf3 use a payload pattern similar to that used by iperf2, which could help in recreating results that might be affected by payload entropy (for example, compression).
* -B now works properly with SCTP tests.
* A compile fix for Solaris 10 was added.
* Some minor bug fixes for JSON output. In particular, warnings for debug and/or verbose modes with --json output and a fix for JSON output on CentOS 6
* Mon Mar 12 2018 msvecAATTsuse.com- update to 3.5
* Bug fixes mostly
* Tue Nov 07 2017 msvecAATTsuse.com- update to 3.3
* Bug fixes
* Fri Sep 22 2017 msvecAATTsuse.com- update to 3.2
* Authentication mechanism added
* New --dscp option allows specifying the DSCP value
* Details: https://github.com/esnet/iperf/blob/master/RELEASE_NOTES
* Bug fixes
* Thu Aug 11 2016 ajAATTajaissle.de- update to version 3.1.3
* fixes [boo#984453] [CVE-2016-4303] JSON parsing vulnerability
* also includes support for fair-queueing, per-socket based pacing of tests on platforms that support it (currently recent Linux distributions), as well as several other fixes.
* Mon Feb 08 2016 msvecAATTsuse.com- update to version 3.1.2
* Bug fixes
* Mon Feb 08 2016 plinnellAATTopensuse.org- Fix url so OBS is happy.
* Mon Dec 14 2015 msvecAATTsuse.com- update to version 3.1.1
* Minor bugfixes
* Mon Nov 30 2015 p.drouandAATTgmail.com- Update to version 3.1
* SCTP support has been added (with the --sctp flag), on Linux, FreeBSD, and Solaris (issue #131).
* Setting CPU affinity now works on FreeBSD.
* Selection of TCP congestion now works on FreeBSD, and is now called --congestion (the old --linux-congestion option works but is now deprecated).
* A new -I option for the server causes it to write a PID file, mostly useful for daemon mode (issue #120).
* A --logfile argument can now force all output to go to a file, rather than to a file. This is especially useful when running an iperf3 server in daemon mode (issue #119).
* Various compatibility fixes for Android (issue #184, issue #185), iOS (issue #288), NetBSD (issue #248), Solaris (issue #175, issue [#178], issue #180, issue #211), vxWorks (issue #268).
* A --udp-counters-64bit flag has been added to support very long-running UDP tests, which could cause a counter to overflow (issue #191).
* A --cport option to specify the client-side port has been added (issue #207, issue #209, issue #239).
* Some calculation errors with the -O feature have been fixed (issue [#236]).
* A potential crash in the iperf3 server has been fixed (issue #257, issue #258).
* Many miscellaneous bug fixes.
* Consumers of libiperf can now get the JSON output for a just-completed test (issue #147).
* Detection of various optional features has been improved to check for the presence or absence of platform functionality, not the name of platforms.
* Out-of-tree builds now work (issue #265).- Do not provide static library- Update iperf-3.0.5_disable-profiling.patch > iperf-disable-profiling.patch
* Sun Apr 05 2015 ajAATTajaissle.de- iperf 3.0.11
* This maintenance release adds a -1 flag to make the iperf3 execute a single test and exit, needed for an upcoming bwctl release. A few other bugs are also fixed.
* Thu Jan 08 2015 seife+obsAATTb1-systems.com- iperf 3.0.10, user-visible changes:
* UDP tests now honor the -w option for setting the socket buffer sizes (issue #219).
* Fri Dec 26 2014 schwabAATTlinux-m68k.org- Apply profiling patch whenever %optflags includes -fomit-frame-pointer