Skip to contentSkip to conversation

socat: security bump to version 2.0.0-b9

PATCH New Gustavo Zacarias 2 participants 2 messages Feb 2, 2016 – Feb 7, 2016

lore
Share & tools
lore

Gustavo Zacarias

author
#0 lore raw

PATCH v2 1/1 socat: security bump to version 2.0.0-b9

Fixes:
Socat security advisory 7 and MSVR-1499: "Bad DH p parameter in OpenSSL" Socat security advisory 8: "Stack overflow in arguments parser"

Signed-off-by Gustavo Zacarias <[email protected]>

---
v2: add patch status, computed hash comment

 .../0002-ptrdiff_t-is-defined-in-stddef.h.patch    | 28 ++++++++++++++++++++++
 package/socat/socat.hash                           |  4 +++-
 package/socat/socat.mk                             |  2 +-
 3 files changed, 32 insertions(+), 2 deletions(-)
 create mode 100644 package/socat/0002-ptrdiff_t-is-defined-in-stddef.h.patch
package/socat/0002-ptrdiff_t-is-defined-in-stddef.h.patch new file +28 -0
new file mode 100644
index 0000000..acae641
@@ -0,0 +1,28 @@
+From 99c55f2694fe8621ca2344eb002610dac7f9c969 Mon Sep 17 00:00:00 2001
+From: Gustavo Zacarias <[email protected]>
+Date: Tue, 2 Feb 2016 09:34:24 -0300
+Subject: [PATCH] ptrdiff_t is defined in stddef.h
+
+Status: sent upstream via email.
+
+Signed-off-by: Gustavo Zacarias <[email protected]>
+---
+ nestlex.c | 2 ++
+ 1 file changed, 2 insertions(+)
+
+diff --git a/nestlex.c b/nestlex.c
+index f7950f0..f49482d 100644
+--- a/nestlex.c
++++ b/nestlex.c
+@@ -4,6 +4,8 @@
+ 
+ /* a function for lexical scanning of nested character patterns */
+ 
++#include <stddef.h>	/* ptrdiff_t */
++
+ #include "config.h"
+ #include "mytypes.h"
+ 
+-- 
+2.4.10
+
package/socat/socat.hash +3 -1
index a876ae2..d867d8a 100644
@@ -1,2 +1,4 @@
 # From http://www.dest-unreach.org/socat/download.md5sum
-md5	ff56576703dfdeac221357a348c30760	socat-2.0.0-b8.tar.bz2
+md5	553b1593d0a192cb09cbdc687ef1baac	socat-2.0.0-b9.tar.bz2
+# Calculated based on the hash above
+sha256	49efb0a5c66b94b279014addc2851faf8ebbd1ec4b7e31c1de7e912d7b4983d2	socat-2.0.0-b9.tar.bz2
package/socat/socat.mk +1 -1
index eaf13bc..754b210 100644
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-SOCAT_VERSION = 2.0.0-b8
+SOCAT_VERSION = 2.0.0-b9
 SOCAT_SOURCE = socat-$(SOCAT_VERSION).tar.bz2
 SOCAT_SITE = http://www.dest-unreach.org/socat/download
 SOCAT_LICENSE = GPLv2
Signature · 1 line
2.4.10
Applied
#1 lore raw

PATCH v2 1/1 socat: security bump to version 2.0.0-b9

Dear Gustavo Zacarias,

Quoted 7 lines · Gustavo Zacarias

Fixes:
Socat security advisory 7 and MSVR-1499: "Bad DH p parameter in OpenSSL" Socat security advisory 8: "Stack overflow in arguments parser"

Signed-off-by Gustavo Zacarias <[email protected]>

---
v2: add patch status, computed hash comment

Applied, thanks.

Thomas

Signature · 3 lines
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com