[Bug 1756870] Re: [MIR] socat

[Matthias Klose]

Override component to main
socat 1.7.3.2-2ubuntu2 in bionic: universe/net -> main
socat 1.7.3.2-2ubuntu2 in bionic amd64: universe/net/extra/100% -> main
socat 1.7.3.2-2ubuntu2 in bionic arm64: universe/net/extra/100% -> main
socat 1.7.3.2-2ubuntu2 in bionic armhf: universe/net/extra/100% -> main
socat 1.7.3.2-2ubuntu2 in bionic i386: universe/net/extra/100% -> main
socat 1.7.3.2-2ubuntu2 in bionic ppc64el: universe/net/extra/100% -> main
socat 1.7.3.2-2ubuntu2 in bionic s390x: universe/net/extra/100% -> main
7 publications overridden.


** Changed in: socat (Ubuntu)
       Status: New => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to socat in Ubuntu.
https://bugs.launchpad.net/bugs/1756870

Title:
  [MIR] socat

Status in socat package in Ubuntu:
  Fix Released

Bug description:
  [Availability]
  Available in universe, built on all architectures.

  [Rationale]
  socat is a tool like netcat, but with support for ssl. It has recently become a requirement for GKE and thus should be in main.

  [Security]
  The tracker lists two open CVEs, but it is wrong - they have been fixed quite some time ago.

  [Quality assurance]
  Upstream has a test suite, but it is not run. socat has an important bug in Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=793384 - it uses to few bits for DH parameters by default. But that was marked as fixed, so OK.

  [Dependencies]
  Build-Depends: debhelper (>= 10), libssl-dev, libwrap0-dev.

  [Standards compliance]

  [Maintenance]
  The package is relatively small, but since it interfaces with (potentially SSL) sockets, it might need some security updates. Otherwise it can be kept in sync with Debian.

  [Background information]
  There was a previous MIR attempt in https://bugs.launchpad.net/ubuntu/+source/socat/+bug/829234

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/socat/+bug/1756870/+subscriptions