From fff1d56fe1f4006a1f82ba36e6c57250f54c6a87 Mon Sep 17 00:00:00 2001 From: Gyorgy Sarvari Date: Thu, 9 Oct 2025 19:24:21 +0200 Subject: [PATCH] iperf2: ignore irrelevant CVEs These CVEs are for iperf3 - which is a similar application in its goals (and name), but an independent project from this, and the projects are independent implementations also, they share no common code. Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj (cherry picked from commit aedf74e08230f60c270032e8b937d1ab9bd2fc9c) Reworked for Kirkstone (CVE_STATUS -> CVE_CHECK_IGNORE)) Signed-off-by: Gyorgy Sarvari --- meta-oe/recipes-benchmark/iperf2/iperf2_2.0.13.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta-oe/recipes-benchmark/iperf2/iperf2_2.0.13.bb b/meta-oe/recipes-benchmark/iperf2/iperf2_2.0.13.bb index 86e5fef530..30575590aa 100644 --- a/meta-oe/recipes-benchmark/iperf2/iperf2_2.0.13.bb +++ b/meta-oe/recipes-benchmark/iperf2/iperf2_2.0.13.bb @@ -21,3 +21,6 @@ PACKAGECONFIG ??= "${@bb.utils.contains('DISTRO_FEATURES', 'ipv6', 'ipv6', '', d PACKAGECONFIG[ipv6] = "--enable-ipv6,--disable-ipv6," CVE_PRODUCT = "iperf_project:iperf" + +# cpe-incorrect: the vulnerabilities are in iperf3, which is a different project +CVE_CHECK_IGNORE += "CVE-2025-54349 CVE-2025-54350 CVE-2025-54351"