Skip to contentSkip to conversation

socat: security bump to version 2.0.0-b9

PATCH Superseded Gustavo Zacarias 2 participants 3 messages Feb 2, 2016

v1 of 2 Superseded Latest is v2 →

lore
Share & tools
lore

Gustavo Zacarias

author
#0 lore raw

PATCH 1/1 socat: security bump to version 2.0.0-b9

Fixes:
Socat security advisory 7 and MSVR-1499: "Bad DH p parameter in OpenSSL" Socat security advisory 8: "Stack overflow in arguments parser"

Signed-off-by Gustavo Zacarias <[email protected]>
---
 .../0002-ptrdiff_t-is-defined-in-stddef.h.patch    | 26 ++++++++++++++++++++++
 package/socat/socat.hash                           |  4 +++-
 package/socat/socat.mk                             |  2 +-
 3 files changed, 30 insertions(+), 2 deletions(-)
 create mode 100644 package/socat/0002-ptrdiff_t-is-defined-in-stddef.h.patch
package/socat/0002-ptrdiff_t-is-defined-in-stddef.h.patch new file +26 -0
new file mode 100644
index 0000000..7b435a9
@@ -0,0 +1,26 @@
+From 99c55f2694fe8621ca2344eb002610dac7f9c969 Mon Sep 17 00:00:00 2001
+From: Gustavo Zacarias <[email protected]>
+Date: Tue, 2 Feb 2016 09:34:24 -0300
+Subject: [PATCH] ptrdiff_t is defined in stddef.h
+
+Signed-off-by: Gustavo Zacarias <[email protected]>
+---
+ nestlex.c | 2 ++
+ 1 file changed, 2 insertions(+)
+
+diff --git a/nestlex.c b/nestlex.c
+index f7950f0..f49482d 100644
+--- a/nestlex.c
++++ b/nestlex.c
+@@ -4,6 +4,8 @@
+ 
+ /* a function for lexical scanning of nested character patterns */
+ 
++#include <stddef.h>	/* ptrdiff_t */
++
+ #include "config.h"
+ #include "mytypes.h"
+ 
+-- 
+2.4.10
+
package/socat/socat.hash +3 -1
index a876ae2..3f586ac 100644
@@ -1,2 +1,4 @@
 # From http://www.dest-unreach.org/socat/download.md5sum
-md5	ff56576703dfdeac221357a348c30760	socat-2.0.0-b8.tar.bz2
+md5	553b1593d0a192cb09cbdc687ef1baac	socat-2.0.0-b9.tar.bz2
+#
+sha256	49efb0a5c66b94b279014addc2851faf8ebbd1ec4b7e31c1de7e912d7b4983d2	socat-2.0.0-b9.tar.bz2
package/socat/socat.mk +1 -1
index eaf13bc..754b210 100644
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-SOCAT_VERSION = 2.0.0-b8
+SOCAT_VERSION = 2.0.0-b9
 SOCAT_SOURCE = socat-$(SOCAT_VERSION).tar.bz2
 SOCAT_SITE = http://www.dest-unreach.org/socat/download
 SOCAT_LICENSE = GPLv2
Signature · 1 line
2.4.10
#1 lore raw

PATCH 1/1 socat: security bump to version 2.0.0-b9

Quoted 21 lines
Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line

"Gustavo" == Gustavo Zacarias <[email protected]> writes:

Fixes:
Socat security advisory 7 and MSVR-1499: "Bad DH p parameter in OpenSSL" Socat security advisory 8: "Stack overflow in arguments parser"

Signed-off-by Gustavo Zacarias <[email protected]>
---
 .../0002-ptrdiff_t-is-defined-in-stddef.h.patch    | 26 ++++++++++++++++++++++
 package/socat/socat.hash                           |  4 +++-
 package/socat/socat.mk                             |  2 +-
 3 files changed, 30 insertions(+), 2 deletions(-)
 create mode 100644 package/socat/0002-ptrdiff_t-is-defined-in-stddef.h.patch
package/socat/0002-ptrdiff_t-is-defined-in-stddef.h.patch new file +0 -0
new file mode 100644
index 0000000..7b435a9

package/socat/0002-ptrdiff_t-is-defined-in-stddef.h.patch line 4

Quoted 4 lines
package/socat/0002-ptrdiff_t-is-defined-in-stddef.h.patch new file +4 -0
@@ -0,0 +1,26 @@
+From 99c55f2694fe8621ca2344eb002610dac7f9c969 Mon Sep 17 00:00:00 2001
+From: Gustavo Zacarias <[email protected]>
+Date: Tue, 2 Feb 2016 09:34:24 -0300
+Subject: [PATCH] ptrdiff_t is defined in stddef.h

What is this about? A new issue introduced in 2.0.0-b9? Musl fix? Your commit message didn't mention anything about it?

package/socat/0002-ptrdiff_t-is-defined-in-stddef.h.patch

Quoted 4 lines
package/socat/0002-ptrdiff_t-is-defined-in-stddef.h.patch new file +2 -1
 # From http://www.dest-unreach.org/socat/download.md5sum
-md5	ff56576703dfdeac221357a348c30760	socat-2.0.0-b8.tar.bz2
+md5	553b1593d0a192cb09cbdc687ef1baac	socat-2.0.0-b9.tar.bz2
+#

Missing text? Locally calculated?

Signature · 1 line
Bye, Peter Korsgaard
author
#2 lore raw

PATCH 1/1 socat: security bump to version 2.0.0-b9

Quoted 2 lines · Peter Korsgaard

What is this about? A new issue introduced in 2.0.0-b9? Musl fix? Your commit message didn't mention anything about it?

It's a general build fix.

Quoted 6 lines

package/socat/socat.hash line 3

Quoted 4 lines

# From http://www.dest-unreach.org/socat/download.md5sum

package/socat/socat.hash +2 -1
-md5	ff56576703dfdeac221357a348c30760	socat-2.0.0-b8.tar.bz2
+md5	553b1593d0a192cb09cbdc687ef1baac	socat-2.0.0-b9.tar.bz2
+#

Missing text? Locally calculated?

Sent v2 addressing this.
Regards.