iperf3 (3.16-1ubuntu0.1~esm1) noble-security; urgency=medium

  * SECURITY UPDATE: Information disclosure using time side channel
    - debian/patches/CVE-2024-26306.patch: use OAEP padding instead of
      PKCS1 padding for OpenSSL
    - CVE-2024-26306

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2024-53580.patch: add a variant of
      cJSON_GetObjectItem that does type-checking avoiding crash with
      malformed input
    - CVE-2024-53580

  * SECURITY UPDATE: Heap based buffer overflow
    - debian/patches/CVE-2025-54349.patch: fix off-by-one heap overflow
      in src/iperf_auth.c by allocating additional byte for null terminator
    - CVE-2025-54349

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2025-54350.patch: remove assertion that could
      cause crashes on malformed authentication attempts
    - CVE-2025-54350

 -- Shishir Subedi <shishir.subedi@canonical.com>  Mon, 19 Jan 2026 16:27:25 +0545

iperf3 (3.16-1build2) noble; urgency=medium

  * No-change rebuild for CVE-2024-3094

 -- Steve Langasek <steve.langasek@ubuntu.com>  Sun, 31 Mar 2024 18:31:36 +0000

iperf3 (3.16-1build1) noble; urgency=medium

  * No-change rebuild against libssl3t64

 -- Steve Langasek <steve.langasek@ubuntu.com>  Mon, 04 Mar 2024 18:15:23 +0000

iperf3 (3.16-1) unstable; urgency=low

  * New upstream version. Fix watch file by Boyuan Yang. (Closes: #1060303)

 -- Roberto Lumbreras <rover@debian.org>  Mon, 29 Jan 2024 09:50:33 +0100

iperf3 (3.15-1) unstable; urgency=low

  * New upstream version.
  * Add Italian debconf translation. (Closes: #1050109)

 -- Roberto Lumbreras <rover@debian.org>  Mon, 16 Oct 2023 17:14:01 +0200

iperf3 (3.14-1) unstable; urgency=high

  * New upstream version (ESNET-SECADV-2023-0001 security fix).
    (Closes: #1040830)

 -- Roberto Lumbreras <rover@debian.org>  Tue, 11 Jul 2023 16:29:54 +0200

iperf3 (3.13-2) unstable; urgency=low

  * Add Romanian translation. (Closes: #1031915)

 -- Roberto Lumbreras <rover@debian.org>  Sun, 05 Mar 2023 09:10:45 +0100

iperf3 (3.13-1) unstable; urgency=low

  * New upstream version.

 -- Roberto Lumbreras <rover@debian.org>  Sat, 04 Mar 2023 20:25:34 +0100

iperf3 (3.12-1) unstable; urgency=low

  * New upstream version. (Closes: #1022160)
  * Add Brazilian Portuguese translation. (Closes: #1025208)

 -- Roberto Lumbreras <rover@debian.org>  Thu, 01 Dec 2022 18:27:21 +0100

iperf3 (3.11-3) unstable; urgency=low

  * Add Deutch translation. (Closes: #1010773).
  * Fix default file being modified by postinst.

 -- Roberto Lumbreras <rover@debian.org>  Sat, 02 Jul 2022 20:34:10 +0200

iperf3 (3.11-2) unstable; urgency=low

  * Add ufw profile. (Closes: #990046)
  * Add debconf question + systemd service file to run iperf3 as daemon.
    (Closes: 810072)
  * Add debconf translations. (Closes: #990509, #991092, #991487, #992077)
  * This upstream version also closes: #972109.

 -- Roberto Lumbreras <rover@debian.org>  Sun, 01 May 2022 11:44:50 +0200

iperf3 (3.11-1) unstable; urgency=low

  * New upstream version.
  * Updated standards.

 -- Roberto Lumbreras <rover@debian.org>  Wed, 27 Apr 2022 11:46:16 +0200

iperf3 (3.9-1) unstable; urgency=medium

  * New upstream version.
  * Updated standards.

 -- Roberto Lumbreras <rover@debian.org>  Tue, 06 Oct 2020 22:22:00 +0200

iperf3 (3.7-3) unstable; urgency=medium

  * Fix missing symbols on kfreebsd and hurd.
  * Fix minor issues: watch file, not-installed files.

 -- Roberto Lumbreras <rover@debian.org>  Tue, 14 Jan 2020 20:06:25 +0100

iperf3 (3.7-2) unstable; urgency=medium

  * Fix sctp patch (Closes: #948798).

 -- Roberto Lumbreras <rover@debian.org>  Tue, 14 Jan 2020 08:54:12 +0100

iperf3 (3.7-1) unstable; urgency=low

  * New upstream version.
  * Updated standards. Use github in watch file.
  * Workaround to compile on kfreebsd (sctp in the kernel but no libsctp-dev)

 -- Roberto Lumbreras <rover@debian.org>  Sun, 12 Jan 2020 21:59:12 +0100

iperf3 (3.6-2) unstable; urgency=low

  * Fix Build-Depends for non-Linux architectures.

 -- Roberto Lumbreras <rover@debian.org>  Fri, 27 Jul 2018 07:08:04 +0200

iperf3 (3.6-1) unstable; urgency=low

  * Enabled SCTP support (Closes: #858944).
  * Enabled OpenSSL support.
  * New maintainer.
  * New upstream version. (Closes: #840545).
  * Updated standards.

 -- Roberto Lumbreras <rover@debian.org>  Thu, 26 Jul 2018 16:43:49 +0200

iperf3 (3.1.3-1) unstable; urgency=medium

  * new upstream version which fixes CVE-2016-4303 (Closes: #827116)
  * enabled hardening flags
  * bumped standards version to 3.9.8

 -- Raoul Gunnar Borenius <borenius@dfn.de>  Wed, 22 Jun 2016 17:01:13 +0200

iperf3 (3.1.2-1) unstable; urgency=medium

  * new upstream version (Closes: #808820)

 -- Raoul Gunnar Borenius <borenius@dfn.de>  Fri, 19 Feb 2016 09:28:49 +0100

iperf3 (3.0.11-1) unstable; urgency=medium

  * new upstream version
  * added multiarch support
  * bumped standards version to 3.9.6

 -- Raoul Gunnar Borenius <borenius@dfn.de>  Mon, 20 Jul 2015 08:08:59 +0200

iperf3 (3.0.7-1) unstable; urgency=medium

  * new upstream version
  * tarball repackaging not necessary anymore

 -- Raoul Gunnar Borenius <borenius@dfn.de>  Thu, 11 Sep 2014 11:57:57 +0200

iperf3 (3.0.5+dfsg1-1) unstable; urgency=low

  * Initial release (Closes: #739921)
  * Repackage tarball to delete bootstrap.sh file with restrictive copyright.

 -- Raoul Gunnar Borenius <borenius@dfn.de>  Sat, 21 Jun 2014 15:57:27 +0200
