.gitignore

@@ -1 +1,13 @@
-SOURCES/socat-1.7.4.1.tar.gz
+socat-1.6.0.1.tar.bz2
+socat-1.7.0.0.tar.bz2
+socat-1.7.1.1.tar.bz2
+socat-1.7.1.2.tar.gz
+socat-1.7.1.3.tar.gz
+socat-1.7.2.0.tar.gz
+/socat-1.7.2.2.tar.gz
+/socat-1.7.2.3.tar.gz
+/socat-1.7.2.4.tar.gz
+/socat-1.7.3.1.tar.gz
+/socat-1.7.3.2.tar.gz
+/socat-1.7.3.3.tar.gz
+/socat-1.7.4.1.tar.gz

.socat.metadata

@@ -1 +0,0 @@
-9fe5a0a0b13dded556a66259b68eb672b900f1d1 SOURCES/socat-1.7.4.1.tar.gz

gating.yaml

@@ -0,0 +1,7 @@
+--- !Policy
+product_versions:
+  - rhel-8
+decision_context: osci_compose_gate
+rules:
+  - !PassingTestCaseRule {test_case_name: baseos-ci.brew-build.tier1.functional}
+  - !PassingTestCaseRule {test_case_name: baseos-ci.brew-build.tedude.validation}

socat-1.7.4.4-CVE-2024-54661.patch

@@ -0,0 +1,22 @@
+http://www.dest-unreach.org/socat/contrib/socat-secadv9.html
+
+--- socat-1.8.0.1/readline.sh	2019-04-04 10:59:55.000000000 +0200
++++ socat-1.8.0.2/readline.sh	2024-12-06 11:44:17.376502570 +0100
+@@ -22,9 +22,15 @@
+ else
+     HISTOPT=
+ fi
+-mkdir -p /tmp/$USER || exit 1
+ #
+ #
+ 
+-exec socat -d readline"$HISTOPT",noecho='[Pp]assword:' exec:"$PROGRAM",sigint,pty,setsid,ctty,raw,echo=0,stderr 2>/tmp/$USER/stderr2
++if test -w .; then
++    STDERR=./socat-readline.${1##*/}.log
++    rm -f $STDERR
++else
++    STDERR=/dev/null
++fi
++
++exec socat -d readline"$HISTOPT",noecho='[Pp]assword:' exec:"$PROGRAM",sigint,pty,setsid,ctty,raw,echo=0,stderr 2>$STDERR
+ 

socat.spec

@@ -3,12 +3,14 @@
 Summary: Bidirectional data relay between two data channels ('netcat++')
 Name: socat
 Version: 1.7.4.1
-Release: 1%{?dist}
+Release: 2%{?dist}
 License: GPLv2
 Url:  http://www.dest-unreach.org/socat/
 Source: http://www.dest-unreach.org/socat/download/%{name}-%{version}.tar.gz
 Group: Applications/Internet
 
+Patch1: socat-1.7.4.4-CVE-2024-54661.patch
+
 BuildRequires: openssl-devel readline-devel ncurses-devel
 BuildRequires: autoconf kernel-headers > 2.6.18
 # for make test
@@ -27,6 +29,8 @@ line editor (readline), a program, or a combination of two of these.
 iconv -f iso8859-1 -t utf-8 CHANGES > CHANGES.utf8
 mv CHANGES.utf8 CHANGES
 
+%autopatch -p1
+
 %build
 %configure  \
         --enable-help --enable-stdio \
@@ -65,6 +69,11 @@ export OD_C=/usr/bin/od
 %doc %{_mandir}/man1/*
 
 %changelog
+* Tue Jun  3 2025 Stepan Broz <sbroz@redhat.com> - 1.7.4.1-2
+- add fix for CVE-2024-54661
+  Resolves: RHEL-70095
+- switch to autopatch, remove unused patches
+
 * Tue Mar 30 2021 Paul Wouters <pwouters@redhat.com> - 1.7.4.1-1
 - Resolves: rhbz#1805132 socat does not recognize IP addresses of the SAN extensions in ssl mode
 - Resolves: rhbz#1870279 Transfer via socat fails with openssl enabled

sources

@@ -0,0 +1 @@
+SHA512 (socat-1.7.4.1.tar.gz) = e43c8b23a841aea5ecc3ac324185ee4ada552a8284ec41b99245def2d8b493bca9caea1af6f646f434a7eda67a1dd71e4e037eea65fce0444840236eadb126a6