Fix CVE-2013-4342:

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4342
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=324678

Patch copied from upstream source repository:

https://github.com/xinetd-org/xinetd/commit/91e2401a219121eae15244a6b25d2e79c1af5864

From 91e2401a219121eae15244a6b25d2e79c1af5864 Mon Sep 17 00:00:00 2001
From: Thomas Swan <thomas.swan@gmail.com>
Date: Wed, 2 Oct 2013 23:17:17 -0500
Subject: [PATCH] CVE-2013-4342: xinetd: ignores user and group directives for
 TCPMUX services

Originally reported to Debian in 2005 <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=324678> and rediscovered <https://bugzilla.redhat.com/show_bug.cgi?id=1006100>, xinetd would execute TCPMUX services without dropping privilege to match the service configuration allowing the service to run with same privilege as the xinetd process (root).
---
 xinetd/builtins.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/xinetd/builtins.c b/xinetd/builtins.c
index 3b85579..34a5bac 100644
--- a/xinetd/builtins.c
+++ b/xinetd/builtins.c
@@ -617,7 +617,7 @@ static void tcpmux_handler( const struct server *serp )
    if( SC_IS_INTERNAL( scp ) ) {
       SC_INTERNAL(scp, nserp);
    } else {
-      exec_server(nserp);
+      child_process(nserp);
    }
 }
 
-- 
2.7.4

i.scm?id=5feb567385849df168164959479a35bb8a5b9ceb'>commit</a><a href='/guix/diff/gnu/ci.scm?id=5feb567385849df168164959479a35bb8a5b9ceb'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/gnu/ci.scm'>
<input type='hidden' name='id' value='5feb567385849df168164959479a35bb8a5b9ceb'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=5feb567385849df168164959479a35bb8a5b9ceb'>root</a>/<a href='/guix/log/gnu?id=5feb567385849df168164959479a35bb8a5b9ceb'>gnu</a>/<a href='/guix/log/gnu/ci.scm?id=5feb567385849df168164959479a35bb8a5b9ceb'>ci.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/ci.scm?id=5feb567385849df168164959479a35bb8a5b9ceb&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2022-08-17 11:29:38 +0200'>2022-08-17</span></td><td><a href='/guix/commit/gnu/ci.scm?id=5bbb9af5d99314a79d7f6535d9a3176c2c10e60b'>ci: Fix the images specification.</a><span class='msg-avail'>...<span class='msg-tooltip'>If the current-guix-package parameter is not set, Cuirass will try to update
the in-store Git checkout used by the evaluate.scm inferior:

ice-9/boot-9.scm:1685:16: In procedure raise-exception: ERROR:
1. &amp;inferior-exception: arguments: (git-error #&lt;inferior-object #&lt;&lt;git-error&gt;
code: -3 message: "could not find repository from
'/gnu/store/v33m82qzkvd96dlp2g83dvz62n4pkad2-guix-20d8081'" class: 6&gt;&gt;)
inferior: #&lt;inferior pipe (0 1 1) 7f7948957dc0&gt;
stack: ((#f ("ice-9/boot-9.scm" 1779 13)) (raise-exception ("ice-9/boot-9.scm"
1682 16)) (raise-exception ("ice-9/boot-9.scm" 1684 16)) (#f ("guix/git.scm"
395 13))

This is a follow-up of: 5bce4c82422de6beb3ce6120ba1592be898c2b72.

* gnu/ci.scm (image-jobs): Add source and commit arguments.
Use them to set the current-guix-package parameter.
(cuirass-jobs): Adapt accordingly.
</span></span></td><td>Mathieu Othacehe</td></tr>
<tr><td><span title='2022-08-09 15:16:06 +0200'>2022-08-09</span></td><td><a href='/guix/commit/gnu/ci.scm?id=5bce4c82422de6beb3ce6120ba1592be898c2b72'>build-system: Add 'channel-build-system'.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/ci.scm (channel-build-system, channel-source-&gt;package): Remove.
* gnu/packages/package-management.scm (channel-source-&gt;package): New
procedure, moved from (gnu ci).
* guix/build-system/channel.scm: New file, with code moved from (gnu ci).
* doc/guix.texi (Build Systems): Document it.
</span></span></td><td>Ludovic Courtès</td></tr>