[Secure-testing-team] Bug#591443: CVE-2010-2799: Stack overflow by lexical scanning of nested character patterns

[Moritz Muehlenhoff]

Package: socat
Severity: grave
Tags: security

This is CVE-2010-2799:
http://www.dest-unreach.org/socat/contrib/socat-secadv2.html

Cheers,
        Moritz

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-686 (SMP w/1 CPU core)
Locale: LANG=C, LC_CTYPE=de_DE.ISO-8859-15 at euro (charmap=ISO-8859-15)
Shell: /bin/sh linked to /bin/bash

Versions of packages socat depends on:
ii  libc6                         2.11.2-2   Embedded GNU C Library: Shared lib
ii  libreadline5                  5.2-7      GNU readline and history libraries
ii  libssl0.9.8                   0.9.8o-1   SSL shared libraries
ii  libwrap0                      7.6.q-19   Wietse Venema's TCP wrappers libra

socat recommends no packages.

socat suggests no packages.