Skip to contentSkip to conversation

socat: security bump to version 2.0.0-b8

PATCH New Gustavo Zacarias 2 participants 2 messages Apr 8, 2015

lore
Share & tools
lore

Gustavo Zacarias

author
#0 lore raw

PATCH 1/1 socat: security bump to version 2.0.0-b8

Fixes:
CVE-2015-1379 - signal handler implementations are not async-signal-safe and can cause crash or freeze of socat processes.

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/socat/socat.hash | 2 ++
 package/socat/socat.mk   | 2 +-
 2 files changed, 3 insertions(+), 1 deletion(-)
 create mode 100644 package/socat/socat.hash
package/socat/socat.hash new file +2 -0
new file mode 100644
index 0000000..a876ae2
@@ -0,0 +1,2 @@
+# From http://www.dest-unreach.org/socat/download.md5sum
+md5	ff56576703dfdeac221357a348c30760	socat-2.0.0-b8.tar.bz2
package/socat/socat.mk +1 -1
index ecb7621..eaf13bc 100644
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-SOCAT_VERSION = 2.0.0-b7
+SOCAT_VERSION = 2.0.0-b8
 SOCAT_SOURCE = socat-$(SOCAT_VERSION).tar.bz2
 SOCAT_SITE = http://www.dest-unreach.org/socat/download
 SOCAT_LICENSE = GPLv2
Signature · 1 line
2.0.5
Applied
#1 lore raw

PATCH 1/1 socat: security bump to version 2.0.0-b8

Dear Gustavo Zacarias,

Quoted 10 lines · Gustavo Zacarias

Fixes:
CVE-2015-1379 - signal handler implementations are not async-signal-safe and can cause crash or freeze of socat processes.

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/socat/socat.hash | 2 ++
 package/socat/socat.mk   | 2 +-
 2 files changed, 3 insertions(+), 1 deletion(-)
 create mode 100644 package/socat/socat.hash

Applied, thanks!

Thomas

Signature · 3 lines
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com