File usbmuxd-CVE-2016-5104.patch of Package usbmuxd.2701
From 4397b3376dc4e4cb1c991d0aed61ce6482614196 Mon Sep 17 00:00:00 2001
From: Joshua Hill <posixninja@gmail.com>
Date: Tue, 29 Dec 2015 23:09:37 +0100
Subject: [PATCH] common: [security fix] Make sure sockets only listen locally
Backport by Mike Gorse <mgorse@suse.com>
---
diff -urp usbmuxd-1.0.8.orig/libusbmuxd/sock_stuff.c usbmuxd-1.0.8/libusbmuxd/sock_stuff.c
--- usbmuxd-1.0.8.orig/libusbmuxd/sock_stuff.c 2012-04-07 17:50:09.000000000 -0500
+++ usbmuxd-1.0.8/libusbmuxd/sock_stuff.c 2016-05-27 14:30:01.628969302 -0500
@@ -174,7 +174,7 @@ int create_socket(uint16_t port)
memset((void *) &saddr, 0, sizeof(saddr));
saddr.sin_family = AF_INET;
- saddr.sin_addr.s_addr = htonl(INADDR_ANY);
+ saddr.sin_addr.s_addr = htonl(INADDR_LOOPBACK);
saddr.sin_port = htons(port);
if (0 > bind(sfd, (struct sockaddr *) &saddr, sizeof(saddr))) {