iperf3 (3.9-1+deb11u1ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: missing timeout while reading input from network
    - debian/patches/CVE-2023-7250.patch: implements a timeout mechanism in
      Nread function located in src/net.c
    - CVE-2023-7250

  * SECURITY UPDATE: Information disclosure using time side channel
    - debian/patches/CVE-2024-26306.patch: use OAEP padding instead of
      PKCS1 padding for OpenSSL
    - CVE-2024-26306

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2024-53580.patch: add a variant of
      cJSON_GetObjectItem that does type-checking avoiding crash with
      malformed input
    - CVE-2024-53580

  * SECURITY UPDATE: Heap based buffer overflow
    - debian/patches/CVE-2025-54349.patch: fix off-by-one heap overflow
      in src/iperf_auth.c by allocating additional byte for null terminator
    - CVE-2025-54349

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2025-54350.patch: remove assertion that could
      cause crashes on malformed authentication attempts
    - CVE-2025-54350

 -- Shishir Subedi <shishir.subedi@canonical.com>  Mon, 19 Jan 2026 20:01:49 +0545

iperf3 (3.9-1+deb11u1build0.22.04.1) jammy-security; urgency=medium

  * fake sync from Debian

 -- Jorge Sancho Larraz <jorge.sancho.larraz@canonical.com>  Tue, 10 Oct 2023 12:28:51 +0200

iperf3 (3.9-1+deb11u1) bullseye-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * Fix memory allocation hazard and crash (Closes: #1040830)

 -- Aron Xu <aron@debian.org>  Mon, 17 Jul 2023 16:49:40 +0800

iperf3 (3.9-1) unstable; urgency=medium

  * New upstream version.
  * Updated standards.

 -- Roberto Lumbreras <rover@debian.org>  Tue, 06 Oct 2020 22:22:00 +0200

iperf3 (3.7-3) unstable; urgency=medium

  * Fix missing symbols on kfreebsd and hurd.
  * Fix minor issues: watch file, not-installed files.

 -- Roberto Lumbreras <rover@debian.org>  Tue, 14 Jan 2020 20:06:25 +0100

iperf3 (3.7-2) unstable; urgency=medium

  * Fix sctp patch (Closes: #948798).

 -- Roberto Lumbreras <rover@debian.org>  Tue, 14 Jan 2020 08:54:12 +0100

iperf3 (3.7-1) unstable; urgency=low

  * New upstream version.
  * Updated standards. Use github in watch file.
  * Workaround to compile on kfreebsd (sctp in the kernel but no libsctp-dev)

 -- Roberto Lumbreras <rover@debian.org>  Sun, 12 Jan 2020 21:59:12 +0100

iperf3 (3.6-2) unstable; urgency=low

  * Fix Build-Depends for non-Linux architectures.

 -- Roberto Lumbreras <rover@debian.org>  Fri, 27 Jul 2018 07:08:04 +0200

iperf3 (3.6-1) unstable; urgency=low

  * Enabled SCTP support (Closes: #858944).
  * Enabled OpenSSL support.
  * New maintainer.
  * New upstream version. (Closes: #840545).
  * Updated standards.

 -- Roberto Lumbreras <rover@debian.org>  Thu, 26 Jul 2018 16:43:49 +0200

iperf3 (3.1.3-1) unstable; urgency=medium

  * new upstream version which fixes CVE-2016-4303 (Closes: #827116)
  * enabled hardening flags
  * bumped standards version to 3.9.8

 -- Raoul Gunnar Borenius <borenius@dfn.de>  Wed, 22 Jun 2016 17:01:13 +0200

iperf3 (3.1.2-1) unstable; urgency=medium

  * new upstream version (Closes: #808820)

 -- Raoul Gunnar Borenius <borenius@dfn.de>  Fri, 19 Feb 2016 09:28:49 +0100

iperf3 (3.0.11-1) unstable; urgency=medium

  * new upstream version
  * added multiarch support
  * bumped standards version to 3.9.6

 -- Raoul Gunnar Borenius <borenius@dfn.de>  Mon, 20 Jul 2015 08:08:59 +0200

iperf3 (3.0.7-1) unstable; urgency=medium

  * new upstream version
  * tarball repackaging not necessary anymore

 -- Raoul Gunnar Borenius <borenius@dfn.de>  Thu, 11 Sep 2014 11:57:57 +0200

iperf3 (3.0.5+dfsg1-1) unstable; urgency=low

  * Initial release (Closes: #739921)
  * Repackage tarball to delete bootstrap.sh file with restrictive copyright.

 -- Raoul Gunnar Borenius <borenius@dfn.de>  Sat, 21 Jun 2014 15:57:27 +0200
