------------------------------------------------------------------- Tue Jun 18 12:42:37 UTC 2024 - Marcus Meissner - 0004-udp-listen-bind4.patch: fixed a UDP listen error (bsc#1226459) ------------------------------------------------------------------- Wed May 1 18:50:03 UTC 2024 - Georg Pfuetzenreuter - Update to 1.8.0.0: * Support for network namespaces (option netns) * TCP client now automatically tries all addresses (IPv4 and IPv6) provided by nameserver until success * Implementation of POSIX message queue (mq) control and access on Linux (addresses POSIXMQ-READ and following) * New wrapper script socat-chain.sh allows to stack two addresses, e.g.HTTP proxy connect over SSL * New script socat-mux.sh allows n-to-1 / 1-to-n communications * New script socat-broker.sh allows group communications * Experimental socks5 client feature * Address ACCEPT-FD for systemd "inetd" mode * UDP-Lite and DCCP address types * Addresses SOCKETPAIR and SHELL * New option bind-tmpname allows forked off children to bind UNIX domain client sockets to random unique pathes * New option retrieve-vlan (with INTERFACE addresses) now makes kernel keep VLAN tags in incoming packets * Simple statistics output with Socat option --statistics and with SIGUSR1 * A couple of new options, many fixes and corrections, see file CHANGES - Drop socat-common-fixes.patch (no longer necessary) - Refactor socat-ignore-tests-failure-boo1078346.patch (test suite no longer exits at this stage) - Add socat-test-dhparam fixture (reduce build load and time) - Add socat-test-without-tty.patch for testing without tty. - Note: This version introduces "socat1", linking to "socat" - Note: This version introduces additional shell scripts, those are shipped in a new "socat-extra" subpackage ------------------------------------------------------------------- Tue Dec 6 13:46:41 UTC 2022 - Paolo Stivanin - Update to 1.7.4.4: * FIX: In error.c msg2() there was a stack overflow on long messages: The terminating \0 Byte was written behind the last position. * FIX: UDP-RECVFROM with fork sometimes terminated when multiple packets arrived. * FIX: a couple of weaknesses and errors when accessing invalid or  incompatible file system entries with UNIX domain, file, and generic addresses. * FIX: bad parser error message on "socat /tmp/x\"x/x -" - Drop socat-fix-asan-error.patch ------------------------------------------------------------------- Wed Apr 13 07:41:15 UTC 2022 - Martin Liška - Use autosetup - Add socat-fix-asan-error.patch that is offered to upstream and that fixes an ASAN error seen for 'test 313 NESTEDOVFL'. ------------------------------------------------------------------- Sat Jan 22 20:54:21 UTC 2022 - Dirk Müller - update to 1.7.4.3: * fixes the TCP_INFO issue that broke building on non-Linux platforms. * building on AIX works again. * A few more corrections and improvements have been added ------------------------------------------------------------------- Mon Nov 1 18:46:42 UTC 2021 - Martin Hauke - Update to version 1.7.4.2: * Fixes a lot of bugs, e.g., for options -r and -R. * Further bugfixes, see the CHANGES file ------------------------------------------------------------------- Mon Jan 11 22:24:07 UTC 2021 - Dirk Müller - update to 1.7.4.1: Security: * Buffer size option (-b) is internally doubled for CR-CRLF conversion, but not checked for integer overflow. This could lead to heap based buffer overflow, assuming the attacker could provide this parameter. * Many further bugfixes and new features, see the CHANGES file ------------------------------------------------------------------- Fri Apr 17 06:58:23 UTC 2020 - Martin Pluskal - Update to version 1.7.3.4: * bugfix release, see the CHANGES file for all changes - Refresh patches: * socat-common-fixes.patch * socat-ignore-tests-failure-boo1078346.patch ------------------------------------------------------------------- Tue Feb 4 12:41:58 UTC 2020 - Marcus Meissner - socat-common-fixes.patch: include tcpd.h where needed to fix -fno-common bsc#1160293 ------------------------------------------------------------------- Sat Apr 6 13:34:11 UTC 2019 - Martin Hauke - Update to version 1.7.3.3: * bugfix release, see the CHANGES file for all changes - Drop patch: * socat-openssl-1.1-tests.patch (not longer needed) - Run spec-cleaner ------------------------------------------------------------------- Mon Sep 10 12:14:48 UTC 2018 - Jan Engelhardt - Replace old variables by modern counterparts. ------------------------------------------------------------------- Thu Aug 30 16:32:32 UTC 2018 - crrodriguez@opensuse.org - We HAVE_SSLv23_*_method, just not as functions, but macros add the relevant defines in the command line so support for autonegotiation of the highest TLS version is restored. ------------------------------------------------------------------- Tue Apr 3 13:53:32 CEST 2018 - kukuk@suse.de - Use %license instead of %doc [bsc#1082318] ------------------------------------------------------------------- Fri Feb 2 06:50:32 UTC 2018 - normand@linux.vnet.ibm.com - Add socat-ignore-tests-failure-boo1078346.patch flaky test failures PowerPC and s390 , bypass boo#1078346 ------------------------------------------------------------------- Thu Aug 17 13:42:49 UTC 2017 - meissner@suse.com - socat-openssl-1.1-tests.patch: make tests work on openssl1. (bsc#1042674) ------------------------------------------------------------------- Mon Apr 10 14:56:19 UTC 2017 - sweet_f_a@gmx.de - update to 1.7.3.2, bug fixes: * fixes uninterruptable hang / CPU loop on host resolution problems * some compile problems, and lots of other bugs and porting issues - remove fix-linux-errqueue.h-not-found.patch, this build issue was fixed by upstream ------------------------------------------------------------------- Tue Feb 2 12:19:40 UTC 2016 - sweet_f_a@gmx.de - update to 1.7.3.1, security fixes: * Socat security advisory 7 and MSVR-1499: "Bad DH p parameter in OpenSSL" (bnc#938913 and CVE-2015-4000). * Socat security advisory 8: "Stack overflow in arguments parser" (bnc#964844) ------------------------------------------------------------------- Mon Apr 20 05:54:10 UTC 2015 - sweet_f_a@gmx.de - test-suite, use a small but safe subset of all tests - don't remove "example" scripts from builddir, they are needed for tests ------------------------------------------------------------------- Tue Apr 14 15:57:19 UTC 2015 - sweet_f_a@gmx.de - remove socat-remove_date.patch, export BUILD_DATE instead (new feature since 1.7.2.4) - run tests, don't abort yet - require tcpd-devel only on SUSE systems at build time ------------------------------------------------------------------- Wed Mar 25 15:29:21 UTC 2015 - p.drouand@gmail.com - Update to version 1.7.3.0 * Too many changes to list; please read the CHANGES file for news - Remove redundant %clean section - Update fix-linux-errqueue.h-not-found.patch and socat-remove_date.patch ------------------------------------------------------------------- Sat Oct 25 06:53:21 UTC 2014 - coolo@suse.com - correctly apply the patch ------------------------------------------------------------------- Fri Oct 24 10:02:01 UTC 2014 - javier@opensuse.org - Add fix-linux-errqueue.h-not-found.patch ------------------------------------------------------------------- Tue Mar 11 07:05:34 UTC 2014 - meissner@suse.com - updated to 1.7.2.4: minor bugfixes: This version contains fixes for most of the bugs and porting issues reported or found in more than two years. ------------------------------------------------------------------- Mon Mar 3 19:35:45 UTC 2014 - andreas.stieger@gmx.de - mention patch in changelog entry, annotate patch ------------------------------------------------------------------- Sun Feb 02 10:09:04 UTC 2014 - pascal.bleser@opensuse.org - update to 1.7.2.3: security fix: * CVE-2014-0019: socats PROXY-CONNECT address was vulnerable to a buffer overflow with data from command line (see socat-secadv5.txt) - added esocat-remove_date.patch to prevent unneccessary rebuilds, fixes W: file-contains-date-and-time ------------------------------------------------------------------- Tue May 28 13:27:12 UTC 2013 - meissner@suse.com - updated to 1.7.2.2 This release fixes a security issue: Under certain circumstances, an FD leak occurs and may be misused for denial-of-service attacks against socat running in server mode (CVE-2013-3571) ------------------------------------------------------------------- Mon Mar 4 11:20:27 UTC 2013 - cfarrell@suse.com - license update: SUSE-GPL-2.0-with-openssl-exception and MIT See README ------------------------------------------------------------------- Sat Mar 2 08:13:52 UTC 2013 - coolo@suse.com - update license to new format ------------------------------------------------------------------- Fri May 25 14:15:08 UTC 2012 - meissner@suse.com - udapted to 1.7.2.1 security fix for READLINE bnc#759859 ------------------------------------------------------------------- Wed Dec 21 10:31:49 UTC 2011 - coolo@suse.com - remove call to suse_update_config (very old work around) ------------------------------------------------------------------- Wed Dec 7 17:49:55 CET 2011 - meissner@suse.de - updated to 1.7.2.0 This release allows tun/tap interfaces without IP addresses and introduces the options openssl-compress and max-children. It fixes 18 bugs and has 11 changes for improved platform support, especially Mac OS X Lion, DragonFly, and Android. - socat-unixsalen.patch now upstream. ------------------------------------------------------------------- Wed Feb 2 18:23:27 CET 2011 - meissner@suse.de - Handle case where a AF_LOCAL socket has no name. bnc#668319 ------------------------------------------------------------------- Mon Aug 2 08:31:55 UTC 2010 - pascal.bleser@opensuse.org - update to 1.7.3: * a stack overflow vulnerability has been fixed that could be triggered when command line arguments were longer than 512 bytes ------------------------------------------------------------------- Mon Jan 11 08:24:32 UTC 2010 - pascal.bleser@opensuse.org - upgraded to 1.7.1.2: + fixes OpenSSL "nonblock" failure + fixes 64-bit issues and some minor bugs - changes from 1.7.1.1: + fixes a couple of bugs, some of which could crash socat under some circumstances - changes from 1.7.1.0: + provides a few new address options to better control its closing behavior - changes from 1.7.0.1: * fixes a possible SIGSEGV in listening addresses * fixes client connections with option connect-timeout failed when the connections succeeded * fixes the option end-close "did not apply" to some addresses * half close of EXEC and SYSTEM addresses might have failed for pipes and socketpair ------------------------------------------------------------------- Thu Oct 16 09:56:41 CEST 2008 - meissner@suse.de - upgraded to 1.7.0.0 - support for SCTP stream sockets, raw interface, and generic sockets. - A new option escape allows it to interrupt raw terminal connections. - Listening and receiving sockets can set a couple of environment variables. - Base control of System V STREAMS has been added. - Many corrections were performed. ------------------------------------------------------------------- Mon Feb 11 10:24:33 CET 2008 - lmuelle@suse.de - Update to version 1.6.0.1. + exec:...,pty did not kill child process under some circumstances; fixed by correcting typo in xio-progcall.c + service name resolution failed due to byte order mistake + socat would hang when invoked with many file descriptors already opened fix: replaced FOPEN_MAX with FD_SETSIZE + fixed bugs where sub processes would become zombies because the master process did not catch SIGCHLD. this affected addresses UDP-LISTEN, UDP-CONNECT, TCP-CONNECT, OPENSSL, PROXY, UNIX-CONNECT, UNIX-CLIENT, ABSTRACT-CONNECT, ABSTRACT-CLIENT, SOCKSA, SOCKS4A + fixed a bug where sub processes would become zombies because the master process caught SIGCHLD but did not wait(). this affected addresses UDP-RECVFROM, IP-RECVFROM, UNIX-RECVFROM, ABSTRACT-RECVFROM + corrected option handling with STDIO; usecase: cool-write + configure --disable-pty also disabled option waitlock + fixed small bugs on systems with struct ip_mreq without struct ip_mreqn - Update to version 1.6.0.0. + new addresses IP-DATAGRAM and UDP-DATAGRAM allow versatile broadcast and multicast modes + new option ip-add-membership for control of multicast group membership + new address TUN for generation of Linux TUN/TAP pseudo network interfaces (suggested by Mat Caughron); associated options tun-device, tun-name, tun-type; iff-up, iff-promisc, iff-noarp, iff-no-pi etc. + new addresses ABSTRACT-CONNECT, ABSTRACT-LISTEN, ABSTRACT-SENDTO, ABSTRACT-RECV, and ABSTRACT-RECVFROM for abstract UNIX domain addresses on Linux (requested by Zeeshan Ali); option unix-tightsocklen controls socklen parameter on system calls. + option end-close for control of connection closing allows FD sharing by sub processes + range option supports form address:mask with IPv4 + changed behaviour of SSL-LISTEN to require and verify client certificate per default + options f-setlkw-rd, f-setlkw-wr, f-setlk-rd, f-setlk-wr allow finer grained locking on regular files + fixed bug where only first tcpwrap option was applied; fixed bug where tcpwrap IPv6 check always failed and fixing this bug) + filan (and socat -D) could hang when a socket was involved + corrected PTYs on HP-UX (and maybe others) using STREAMS + correct bind with udp6-listen + corrected filan.c peekbuff[0] which did not compile with Sun Studio Pro + corrected problem with read data buffered in OpenSSL layer + corrected problem with option readbytes when input stream stayed idle after so many bytes + fixed a bug where a datagram receiver with option fork could fork two sub processes per packet - Don't call test.sh as it doesn't pass if called as non root. - Don't remove the buildroot in the install section. - Remove patch as linux/fs.h is included if HAVE_LINUX_FS_H is available. ------------------------------------------------------------------- Thu Mar 22 10:18:31 CET 2007 - ssommer@suse.de - fix build with newer kernel headers: some common FS-specific ioctls moved to linux/fs.h ------------------------------------------------------------------- Mon Jul 17 12:43:39 CEST 2006 - lmuelle@suse.de - Update to version 1.5.0.0. + new datagram modes for udp, rawip, unix domain sockets + socat option -T specifies inactivity timeout + rewrote lexical analysis to allow nested socat calls + addresses tcp, udp, tcp-l, udp-l, and rawip now support IPv4 and IPv6 + socat options -4, -6 and environment variables SOCAT_DEFAULT_LISTEN_IP, SOCAT_PREFERRED_RESOLVE_IP for control of protocol selection + addresses ssl, ssl-l, socks, proxy now support IPv4 and IPv6 + option protocol-family (pf), esp. for openssl-listen + range option supports IPv6 - syntax: range=[::1/128] + option ipv6-v6only (ipv6only) + new tcp-wrappers options allow-table, deny-table, tcpwrap-etc + FIPS version of OpenSSL can be integrated - initial patch provided by David Acker. See README.FIPS + support for resolver options res-debug, aaonly, usevc, primary, igntc, recurse, defnames, stayopen, dnsrch + options for file attributes on advanced filesystems (ext2, ext3, reiser): secrm, unrm, compr, ext2-sync, immutable, ext2-append, nodump, ext2-noatime, journal-data etc. + option cool-write controls severeness of write failure (EPIPE, ECONNRESET) + option o-noatime + socat option -lh for hostname in log output + traffic dumping provides packet headers + configure.in became part of distribution + socats unpack directory now has full version, e.g. socat-1.5.0.0/ + corrected docu of option verify ------------------------------------------------------------------- Wed Jan 25 21:41:44 CET 2006 - mls@suse.de - converted neededforbuild to BuildRequires ------------------------------------------------------------------- Tue Apr 26 15:20:20 CEST 2005 - uli@suse.de - disabled test on ARM (hangs QEMU) ------------------------------------------------------------------- Sun Mar 20 20:14:32 CET 2005 - lmuelle@suse.de - Update to version 1.4.2.0. ------------------------------------------------------------------- Sun Dec 12 15:51:50 CET 2004 - lmuelle@suse.de - Update to version 1.4.1.0. ------------------------------------------------------------------- Tue Oct 26 23:18:18 CEST 2004 - lmuelle@suse.de - Update to version 1.4.0.3. ------------------------------------------------------------------- Mon Sep 27 00:26:39 CEST 2004 - lmuelle@suse.de - Update to version 1.4.0.2. ------------------------------------------------------------------- Sat Aug 28 15:33:21 CEST 2004 - lmuelle@suse.de - Add readline.sh to the examples. ------------------------------------------------------------------- Fri Aug 27 16:25:49 CEST 2004 - lmuelle@suse.de - Update to version 1.4.0.1. ------------------------------------------------------------------- Mon Jun 14 15:21:13 CEST 2004 - lmuelle@suse.de - Add openssl-devel, readline-devel, and tcpd-devel to neededforbuild/ BuildRequires. ------------------------------------------------------------------- Mon Jun 14 12:30:55 CEST 2004 - lmuelle@suse.de - Inital SuSE RPM based on source tar ball spec file.