From ccbe303f504858ee39d9d958240aa5cd51ab3a3f Mon Sep 17 00:00:00 2001 From: Gyorgy Sarvari Date: Thu, 9 Oct 2025 19:16:02 +0200 Subject: [PATCH] iperf2: ignore irrelevant CVEs These CVEs are for iperf3 - which is a similar application in its goals (and name), but an independent project from this, and the projects are independent implementations also, they share no common code. Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj (cherry picked from commit aedf74e08230f60c270032e8b937d1ab9bd2fc9c) Signed-off-by: Gyorgy Sarvari --- meta-oe/recipes-benchmark/iperf2/iperf2_2.2.1.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta-oe/recipes-benchmark/iperf2/iperf2_2.2.1.bb b/meta-oe/recipes-benchmark/iperf2/iperf2_2.2.1.bb index c353ce02e1..9341bb3c2d 100644 --- a/meta-oe/recipes-benchmark/iperf2/iperf2_2.2.1.bb +++ b/meta-oe/recipes-benchmark/iperf2/iperf2_2.2.1.bb @@ -20,3 +20,6 @@ PACKAGECONFIG ??= "${@bb.utils.contains('DISTRO_FEATURES', 'ipv6', 'ipv6', '', d PACKAGECONFIG[ipv6] = "--enable-ipv6,--disable-ipv6," CVE_PRODUCT = "iperf_project:iperf" +CVE_STATUS[CVE-2025-54349] = "cpe-incorrect: the vulnerability is in iperf3, which is a different project" +CVE_STATUS[CVE-2025-54350] = "cpe-incorrect: the vulnerability is in iperf3, which is a different project" +CVE_STATUS[CVE-2025-54351] = "cpe-incorrect: the vulnerability is in iperf3, which is a different project"