From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Tue, 27 Oct 2026 16:10:20 +0100 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1xLiod-003xje-2T for lore@lore.pengutronix.de; Tue, 27 Oct 2026 16:10:20 +0100 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xLiod-0000dy-0b; Tue, 27 Oct 2026 16:10:19 +0100 Received: from dude04.red.stw.pengutronix.de ([2a0a:edc0:0:1101:1d::ac]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xLioN-0000dh-5I; Tue, 27 Oct 2026 16:10:03 +0100 From: =?UTF-8?q?Sven=20P=C3=BCschel?= To: ptxdist@pengutronix.de Date: Tue, 27 Oct 2026 16:09:47 +0100 Message-ID: <20261027151002.3756134-1-s.pueschel@pengutronix.de> X-Mailer: git-send-email 2.47.3 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Subject: [ptxdist] [PATCH] socat: version bump 1.8.0.3 -> 1.8.1.3 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Cc: =?UTF-8?q?Sven=20P=C3=BCschel?= Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false socat 1.8.1.2 fixes a heap buffer overflow for SOCKS5 (CVE-2026-56123): http://www.dest-unreach.org/socat/CHANGES Version 1.8.1 introduces two new addresses (STALL, TEXT). Enable them similar to how all other adresses are enabled. The license location in the README changed due to README updates, but the actual license hash stayed the same. Also add the CVE product id for socat. Furthermore copy the socat1 file to resolve an symlink error message generated during the targetinstall stage: ptxdist: error: file '[redact]/socat-1.8.1.3/usr/bin/socat' is a link using '[redact]/socat-1.8.1.3/usr/bin/socat1' instead Signed-off-by: Sven Püschel --- rules/socat.make | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/rules/socat.make b/rules/socat.make index 3b2a8e6fa..786d89c6b 100644 --- a/rules/socat.make +++ b/rules/socat.make @@ -12,8 +12,8 @@ PACKAGES-$(PTXCONF_SOCAT) += socat # Paths and names # -SOCAT_VERSION := 1.8.0.3 -SOCAT_SHA256 := a9f9eb6cfb9aa6b1b4b8fe260edbac3f2c743f294db1e362b932eb3feca37ba4 +SOCAT_VERSION := 1.8.1.3 +SOCAT_SHA256 := 06602ffd591e98c75b3dc1d66f0f19136cc666b0b2d95caad987d6ab2cb28097 SOCAT := socat-$(SOCAT_VERSION) SOCAT_SUFFIX := tar.gz SOCAT_URL := \ @@ -24,8 +24,9 @@ SOCAT_DIR := $(BUILDDIR)/$(SOCAT) SOCAT_LICENSE := GPL-2.0-only AND MIT SOCAT_LICENSE_FILES := \ file://COPYING;md5=b234ee4d69f5fce4486a80fdaf4a4263 \ - file://README;startline=248;endline=281;md5=4e953b796133e1470eb57b3f59611720 \ + file://README;startline=252;endline=285;md5=4e953b796133e1470eb57b3f59611720 \ file://install-sh;startline=6;endline=16;md5=6c39b6a36ad775d09cc9ee0e33fe9e6c +SOCAT_CVE_PRODUCT := dest-unreach:socat # ---------------------------------------------------------------------------- # Prepare @@ -50,6 +51,8 @@ SOCAT_CONF_OPT := \ --enable-creat \ --enable-gopen \ --enable-pipe \ + --enable-stall \ + --enable-text \ --enable-socketpair \ --enable-termios \ --enable-unix \ @@ -107,7 +110,7 @@ $(STATEDIR)/socat.targetinstall: @$(call install_copy, socat, 0, 0, 0755, -, /usr/bin/procan) @$(call install_copy, socat, 0, 0, 0755, -, /usr/bin/filan) - @$(call install_copy, socat, 0, 0, 0755, -, /usr/bin/socat) + @$(call install_copy, socat, 0, 0, 0755, $(SOCAT_PKGDIR)/usr/bin/socat1, /usr/bin/socat) @$(call install_finish, socat) -- 2.47.3