From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Fri, 13 Nov 2026 09:40:45 +0100 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1xRmpx-00AMNl-1d for lore@lore.pengutronix.de; Fri, 13 Nov 2026 09:40:45 +0100 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xRmpv-0003Ja-9U; Fri, 13 Nov 2026 09:40:43 +0100 Received: from mx1.white.stw.pengutronix.de ([2a0a:edc0:0:b01:1d::107]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xRmoY-0005YK-6g for ptxdist@pengutronix.de; Fri, 13 Nov 2026 09:39:18 +0100 Received: from dude05.red.stw.pengutronix.de (dude05.red.stw.pengutronix.de [IPv6:2a0a:edc0:0:1101:1d::54]) (Authenticated sender: relay-from-dude05.red.stw.pengutronix.de) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPSA id 2776A2059D0; Fri, 13 Nov 2026 09:39:18 +0100 (CET) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=pengutronix.de; s=20260414; t=1794559158; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=yefZNepE9YcaZLur8B5/R+9h7MrvX8I9XUUCgZYQvx4=; b=WaDMBfKf664+FcWQMXFVE660zFHPxy+ZrGRgTOHZlcPNOfXC0g18VBpGOt0nIb9pfnRCja YfGEbDZqT11WhEEnz07En3WaAVFmsuMWJ1masIiPiRMb2qprxwpEv/2aAr5wIANG/4sCgi TwG6r156a6FoMDEDtlmjWkeGxBXXeFeOQth7BUXSa4wn3PRoZtkVvJlBcuVJ5m0qE8Npl6 l1yKrb9toMXqPE9M/OZLRTQSMwBicmRFh5z3r5VSNuKD2LQtRuy0wwwyNe1qRaBhpsyiEE /8tzN9CweiUAUkWfaZrl26p6u6t+HSdRvm36UtlU6cXnTeflHtEEzMi7LZcNYA== ARC-Seal: i=1; s=20260414; d=pengutronix.de; t=1794559158; a=rsa-sha256; cv=none; b=A7xq+8/2gxqs23n+RhWDugzRi6hCr1LbcV5iq7NWV6m2BfrBHujUY60FWuQ8Z/06cTmqpj oOo82PdZRjEwVQ6UC/52zdBM2C9yd0/SjA8c6SYHyyEcdLbT16FU/LZQ5H2g1vsqDQXhR7 GIspim7t5RxAyS+K+8UJgH2NhkhDcEYROaHOPFhl6MB37ZEX5/auJyjf7zzXeEHwYgoy2M zEX1zPOs5IHII7UnBKMwpnwY051NkM+qR3GM+L9nOteBJQx+gWCvSxT4x/ap29s9+RrWwI RBRL2cjoN+LTJ9cHJCgrBZ2BRZlqWuAGvUSJDg64eTxqT5HIuR1CegrXZFY/jQ== ARC-Authentication-Results: i=1; ORIGINATING; auth=pass smtp.auth=relay-from-dude05.red.stw.pengutronix.de smtp.mailfrom=mol@pengutronix.de Received: by dude05.red.stw.pengutronix.de (Postfix, from userid 1014) id 18C36743103; Fri, 13 Nov 2026 09:39:18 +0100 (CET) From: Michael Olbrich To: ptxdist@pengutronix.de Date: Fri, 13 Nov 2026 09:39:18 +0100 Message-ID: <20261113083918.1380066-1-m.olbrich@pengutronix.de> X-Mailer: git-send-email 2.47.3 In-Reply-To: <20261027151002.3756134-1-s.pueschel@pengutronix.de> References: <20261027151002.3756134-1-s.pueschel@pengutronix.de> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Subject: Re: [ptxdist] [APPLIED] socat: version bump 1.8.0.3 -> 1.8.1.3 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Cc: =?UTF-8?q?Sven=20P=C3=BCschel?= Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Thanks, applied as 336f8f7723e1a7012b1f1feab6c6c65414ab7762. Michael [sent from post-receive hook] On Fri, 13 Nov 2026 09:39:17 +0100, Sven Püschel wrote: > socat 1.8.1.2 fixes a heap buffer overflow for SOCKS5 (CVE-2026-56123): > http://www.dest-unreach.org/socat/CHANGES > > Version 1.8.1 introduces two new addresses (STALL, TEXT). Enable them > similar to how all other adresses are enabled. > > The license location in the README changed due to README updates, but > the actual license hash stayed the same. > > Also add the CVE product id for socat. > > Furthermore copy the socat1 file to resolve an symlink error message > generated during the targetinstall stage: > > ptxdist: error: file '[redact]/socat-1.8.1.3/usr/bin/socat' is a link > using '[redact]/socat-1.8.1.3/usr/bin/socat1' instead > > Signed-off-by: Sven Püschel > Message-Id: <20261027151002.3756134-1-s.pueschel@pengutronix.de> > Signed-off-by: Michael Olbrich > > diff --git a/rules/socat.make b/rules/socat.make > index 3b2a8e6fa736..786d89c6b40a 100644 > --- a/rules/socat.make > +++ b/rules/socat.make > @@ -12,8 +12,8 @@ PACKAGES-$(PTXCONF_SOCAT) += socat > # Paths and names > # > > -SOCAT_VERSION := 1.8.0.3 > -SOCAT_SHA256 := a9f9eb6cfb9aa6b1b4b8fe260edbac3f2c743f294db1e362b932eb3feca37ba4 > +SOCAT_VERSION := 1.8.1.3 > +SOCAT_SHA256 := 06602ffd591e98c75b3dc1d66f0f19136cc666b0b2d95caad987d6ab2cb28097 > SOCAT := socat-$(SOCAT_VERSION) > SOCAT_SUFFIX := tar.gz > SOCAT_URL := \ > @@ -24,8 +24,9 @@ SOCAT_DIR := $(BUILDDIR)/$(SOCAT) > SOCAT_LICENSE := GPL-2.0-only AND MIT > SOCAT_LICENSE_FILES := \ > file://COPYING;md5=b234ee4d69f5fce4486a80fdaf4a4263 \ > - file://README;startline=248;endline=281;md5=4e953b796133e1470eb57b3f59611720 \ > + file://README;startline=252;endline=285;md5=4e953b796133e1470eb57b3f59611720 \ > file://install-sh;startline=6;endline=16;md5=6c39b6a36ad775d09cc9ee0e33fe9e6c > +SOCAT_CVE_PRODUCT := dest-unreach:socat > > # ---------------------------------------------------------------------------- > # Prepare > @@ -50,6 +51,8 @@ SOCAT_CONF_OPT := \ > --enable-creat \ > --enable-gopen \ > --enable-pipe \ > + --enable-stall \ > + --enable-text \ > --enable-socketpair \ > --enable-termios \ > --enable-unix \ > @@ -107,7 +110,7 @@ $(STATEDIR)/socat.targetinstall: > > @$(call install_copy, socat, 0, 0, 0755, -, /usr/bin/procan) > @$(call install_copy, socat, 0, 0, 0755, -, /usr/bin/filan) > - @$(call install_copy, socat, 0, 0, 0755, -, /usr/bin/socat) > + @$(call install_copy, socat, 0, 0, 0755, $(SOCAT_PKGDIR)/usr/bin/socat1, /usr/bin/socat) > > @$(call install_finish, socat) >