CVE and update status of the FreeBSD ports tree3,296 unaddressed CVEs in 671 portsAll times are CET
Port details

net/socat 1.8.1.3

Multipurpose relay and more

Port info

Maintainer
ehaupt@FreeBSD.org
Packages
latest: 1.8.1.3
Upstream
up to date
Last update
to 1.8.1.3 · cd442443eb
Quarterly
2026Q4: 1.8.1.3
WWW
http://www.dest-unreach.org/socat/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install socat
installs 1.8.1.3 from latest; from quarterly (2026Q4) 1.8.1.3
Port
# cd /usr/ports/net/socat && make install clean
# make -C /usr/ports/net/socat config  # change options first
Size
221 KiB download · 622 KiB installed
Depends on
nothing
License
GPLv2
Options
1 of 3 on in the package: DOCS
Show the 2 options that are off
IPV6DEFAULT READLINE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.8.1.31.8.1.3–
FreeBSD 151.8.1.31.8.1.3–
FreeBSD 141.8.1.31.8.1.31.8.1.3

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.8.1.31.8.1.3–
FreeBSD 141.8.1.31.8.1.31.8.1.3

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.8.1.3.

Fixed (5)

Show 5 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (107)

Emanuel Haupt (ehaupt) · 1.7.2.3
Now that this port is staged and DOCS defined we can stop testing for DOCS in any install target.
4fd65ef49f
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.7.2.3
- Respect PREFIX - Use procname instead of hardcoded /usr/local/bin/socat

Submitted by:	sunpoet (myself)
Approved by:	ehaupt (maintainer)
4940ae5cd4
Emanuel Haupt (ehaupt) · 1.7.2.3
Update to 1.7.2.3, this fixes a security issue, where socats PROXY-CONNECT address was vulnerable to a buffer overflow with data provided on the command line.

Security:       CVE-2014-0019
e5c07fb5d3
Emanuel Haupt (ehaupt) · 1.7.2.2_2
This patch will make the socat rc script more reliable. [1]

While here, use 'compiler' USES macro to determine compiler type.

PR:		185946 [1]
Submitted by:	feld
f091a2b471
Emanuel Haupt (ehaupt) · 1.7.2.2_1
Support staging.
f38b64d9e6
Baptiste Daroussin (bapt) · 1.7.2.2_1
Add NO_STAGE all over the place in preparation for the staging support (cat: net)
0c710c7b4e
Emanuel Haupt (ehaupt) · 1.7.2.2_1
Change the clang detector to use a pattern match instead of a conditional define and always test. This fixes build on 9-STABLE and saves some shell commands.

PR:		181007
Submitted by:	"r4721@tormail.org" <r4721@tormail.org>
dc56080374
Emanuel Haupt (ehaupt) · 1.7.2.2_1
Fix logic in clang detection.

Notified by:	crees
75e127f595
Emanuel Haupt (ehaupt) · 1.7.2.2_1
Remove MAKE_JOBS_SAFE which is now default.
ea0f02dfeb
Emanuel Haupt (ehaupt) · 1.7.2.2_1
Make sure the binaries are linked against the port OpenSSL libraries when and only when WITH_OPENSSL_PORT is defined.

PR:             180395 (based on)
Submitted by:   "r4721@tormail.org" <r4721@tormail.org>
5b8e439847
Emanuel Haupt (ehaupt) · 1.7.2.2
Rework previous commit. The problem is not clang 3.3 but rather the fact that with 1000024 CC became 'cc' rather than 'clang'.
794b49d028
Emanuel Haupt (ehaupt) · 1.7.2.2
Handle clang 3.3 fallout. I wish we had a __FreeBSD_version tag from when the clang 3.3 import happened, that way we wouldn't have to resort to such hacks.
16bdd1c586
Emanuel Haupt (ehaupt) · 1.7.2.2
Update to 1.7.2.2

Security:	CVE-2013-3571
b4a9146715
Emanuel Haupt (ehaupt) · 1.7.2.1_1
Change rc script to launch socat using daemon and remove the unnecessary wrapper script.

PR:		176321
Submitted by:	Mark Felder <feld@feld.me>
ef17068bee
Emanuel Haupt (ehaupt) · 1.7.2.1
- Use DOC instead of NOPORTDOCS - Pacify portlint - Convert header
c4c14fd156
Mark Linimon (linimon) · 1.7.2.1
Mark as broken on ARM.

Approved by:	maintainer
e106e3cfcd
Emanuel Haupt (ehaupt) · 1.7.2.1
Fix build with clang

PR:		168164
Submitted by:	bapt
883c2e090d
Emanuel Haupt (ehaupt) · 1.7.2.1
Update to 1.7.2.1
96c60da470
Emanuel Haupt (ehaupt) · 1.7.2.0_1
Fix startup script issue with a wrapper script obtained from www/gatling.

This wrapper tries to emulate part of the functionality usually supplied by
software like daemontools or runit. It is used to start socat which does not
daemonize itself and logs to stdout/stderr. It redirects stdout and stderr to
logger(1) via a fifo.

While here also remove if-statement around PORTDOCS based on NOPORTDOCS since
it's redundant with checks in ports/Mk/bsd.ports.mk.

PR:		166947
Submitted by:	Mark Felder <feld@feld.me>
5bfdda4b31
Doug Barton (dougb) · 1.7.2.0
In the rc.d scripts, change assignments to rcvar to use the literal name_enable wherever possible, and ${name}_enable when it's not, to prepare for the demise of set_rcvar().

In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
83eb2c3700
Emanuel Haupt (ehaupt) · 1.7.2.0
- Update to 1.7.2.0 (this release allows tun/tap interfaces without IP   addresses) - Remove the option to build without OpenSSL, we're supposed to provide   sensible default configurations and options. Building a port without   OpenSSL support in 2011 makes no sense. This has also been discussed at the   Dev Summit 2011

Feature safe:   yes
bea4b1a6d8
Emanuel Haupt (ehaupt) · 1.7.1.3
Add LICENSE and remove MD5 sums.

Feature safe:	yes
ce1197e105
Emanuel Haupt (ehaupt) · 1.7.1.3
Update to 1.7.1.3
109532dc7f
Doug Barton (dougb) · 1.7.1.2
Begin the process of deprecating sysutils/rc_subr by s#. %%RC_SUBR%%#. /etc/rc.subr#
1d6b4b3f91
Emanuel Haupt (ehaupt) · 1.7.1.2
Update to 1.7.1.2
998878abac
Emanuel Haupt (ehaupt) · 1.7.1.1
Update to 1.7.1.1
68629e0942
Doug Barton (dougb) · 1.7.0.0
Fix a few "bad example" problems in the rc.d scripts that have been propogated by copy and paste.

1. Primarily the "empty variable" default assignment, which is mostly
${name}_flags="", but fix a few others as well.
2. Where they are not already documented, add the existence of the _flags
(or other deleted empties) option to the comments, and in some cases add
comments from scratch.
3. Replace things that look like:
prefix=%%PREFIX%%
command=${prefix}/sbin/foo
to just use %%PREFIX%%. In many cases the $prefix variable is only used
once, and in some cases it is not used at all.
4. In a few cases remove ${name}_flags from command_args
5. Remove a long-stale comment about putting the port's rc.d script in
/etc/rc.d (which is no longer necessary).

No PORTREVISION bumps because all of these changes are noops.
0175383f0a
Emanuel Haupt (ehaupt) · 1.7.0.0
Mark MAKE_JOBS_SAFE
c810fd3c3f
Emanuel Haupt (ehaupt) · 1.7.0.0
Set PORTSCOUT in order to skip beta version of the distfile
c9f73421be
Emanuel Haupt (ehaupt) · 1.7.0.0
- Update to 1.7.0.0 - Add ipv6 sub category - Add additional master sites - Provide an rc script - Take maintainer-ship
6cb68511e9
Mark Linimon (linimon) · 1.6.0.0_1
Reset nivo+kw+ports.bfa274@is-root.com due to lack of time to work on FreeBSD at the moment.

Hat:		portmgr
acb10421db
Pav Lucistnik (pav) · 1.6.0.0_1
- Incorporate Sainsbury's service name resolution patch:   http://www.dest-unreach.org/socat/contrib/socat-servicenames.html - Incorporate Lucq's file descriptor patch:   http://www.dest-unreach.org/socat/contrib/socat-maxfds.html

PR:		ports/113283
Submitted by:	bf <bf2006a@yahoo.com>
Approved by:	Nils Vogels <nivo@is-root.com> (maintainer)
83521b52d0
Rong-En Fan (rafan) · 1.6.0.0
- Update to 1.6.0.0

PR:		ports/111372
Submitted by:	Nils Vogels <nivo+kw+ports.bfa274 at is-root.com> (maintainer)
7422fc2ae0
Boris Samorodov (bsam) · 1.5.0.0
- Update to 1.5.0.0 - Transfer maintainership to submitter

PR:		103556
Submitted by:	Nils Vogels <nivo+kw+ports.bfa274 at is-root.com>
aceb495a63
Mark Linimon (linimon) · 1.4.3.1_1
Reset inactive maintainer who has not responded to email.

Hat:		portmgr
3ccbc4b6f5
Marcus Alves Grando (mnag) · 1.4.3.1_1
- Patches to make libwrap usage functional - Bump PORTREVISION - portlint(1)

PR:		93708
Submitted by:	Rudolf Cejka <cejkar___fit.vutbr.cz>
Approved by:	maintainer timeout (66 days)
fab105ff9b
Christian Brueffer (brueffer) · 1.4.3.1
Update to version 1.4.3.1.

The changes since 1.4.2.0 are listed on http://www.dest-unreach.org/socat/

Approved by:	markus, maintainer
a38c380648
Edwin Groothuis (edwin) · 1.4.2.0
SHA256ify

Approved by: krion@
dbef3380d2
Jean-Yves Lefort (jylefort) · 1.4.2.0
- Update to 1.4.2.0 [1] - OPTIONSify - Fix the packing list when NOPORTDOCS is defined - Polish the Makefile

PR:		ports/82387 [1]
Submitted by:	maintainer [1]
e3c65c7544
David E. O'Brien (obrien) · 1.4.0.3
At Kris's request, back out the MACHINE_ARCH spelling correction until after 5.4-RELEASE.
c3d8037aeb
David E. O'Brien (obrien) · 1.4.0.3
Assist getting more ports working on AMD64 by obeying the Ports Collection documentation and use 'ARCH' rather than 'MACHINE_ARCH'.
f2fc2d60ae
Pav Lucistnik (pav) · 1.4.0.3
- Update to 1.4.0.3 and close vulnerability

PR:		ports/73783
Submitted by:	rik <freebsd-ports@rikrose.net> (maintainer)
b7cc8624d2
Oliver Eikemeier (eik) · 1.4.0.0_1
socat 1.4.0.0 has buggy SOCKS4A code. The maintainer patch on the web site has (probably had, now) a platform-specific bug, which was resolved in conjunction with the socat author earlier. The problem will be corrected in socat 1.4.0.1, but in the meantime is provided separately. This patch adds the fix as a replacement xio-socks.c.

I have also set myself as the maintainer as part of the patch below. I am willing to take on maintainership of this port.

PR:		69317
Submitted by:	rik <freebsd-ports@rikrose.net>
fbe675af18
Kirill Ponomarev (krion) · 1.4.0.0
Update to 1.4.0.0

PR:		ports/68483
Submitted by:	Nicolas Jombart <ecu@ipv42.net>
b84e72c19f
Trevor Johnson (trevor) · 1.3.2.2
SIZEify.
f15b845ebe
Sergei Kolobov (sergei) · 1.3.2.2
- Update to 1.3.2.2

PR:		58291
Submmitted by:	Nicolas Jombart <ecu@ipv42.net>
Approved by:	krion (implicitly)
888aee6f30
Sergey A. Osokin (osa) · 1.3.2.1
Update to 1.3.2.1

Submitted by:	Nicolas Jombart <ecu@ipv42.net>
PR:		56032
e2b82139a0
Erwin Lansing (erwin) · 1.3.2.0
Update net/socat: 1.3.1.0 -> 1.3.2.0

* A new mode allows you to directly connect an
  executed program to the other side of the relay.
* A couple of minor improvements and corrections
  have been made.

PR:		54284
Submitted by:	Kirill Ponomarew <ponomarew@oberon.net>
2b677bdf59
Erwin Lansing (erwin) · 1.3.1.0
Update net/socat to 1.3.1.0 Add a few docs Change COMMENT to something < 70 chars

PR:		53083
Submitted by:	Nicolas Jombart <ecu@ipv42.net>
Approved by:	edwin (mentor)
1e1074d998
Akinori MUSHA (knu) · 1.3.0.1
De-pkg-comment.
2c41b9e5f3