Fix CVE-2013-4342:

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4342
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=324678

Patch copied from upstream source repository:

https://github.com/xinetd-org/xinetd/commit/91e2401a219121eae15244a6b25d2e79c1af5864

From 91e2401a219121eae15244a6b25d2e79c1af5864 Mon Sep 17 00:00:00 2001
From: Thomas Swan <thomas.swan@gmail.com>
Date: Wed, 2 Oct 2013 23:17:17 -0500
Subject: [PATCH] CVE-2013-4342: xinetd: ignores user and group directives for
 TCPMUX services

Originally reported to Debian in 2005 <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=324678> and rediscovered <https://bugzilla.redhat.com/show_bug.cgi?id=1006100>, xinetd would execute TCPMUX services without dropping privilege to match the service configuration allowing the service to run with same privilege as the xinetd process (root).
---
 xinetd/builtins.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/xinetd/builtins.c b/xinetd/builtins.c
index 3b85579..34a5bac 100644
--- a/xinetd/builtins.c
+++ b/xinetd/builtins.c
@@ -617,7 +617,7 @@ static void tcpmux_handler( const struct server *serp )
    if( SC_IS_INTERNAL( scp ) ) {
       SC_INTERNAL(scp, nserp);
    } else {
-      exec_server(nserp);
+      child_process(nserp);
    }
 }
 
-- 
2.7.4

>tree</a><a href='/guix/commit/gnu/system/uuid.scm?id=31a55a652f8e4856fd66b47377e214b7d20b4f61'>commit</a><a href='/guix/diff/gnu/system/uuid.scm?id=31a55a652f8e4856fd66b47377e214b7d20b4f61'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/gnu/system/uuid.scm'>
<input type='hidden' name='id' value='31a55a652f8e4856fd66b47377e214b7d20b4f61'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=31a55a652f8e4856fd66b47377e214b7d20b4f61'>root</a>/<a href='/guix/log/gnu?id=31a55a652f8e4856fd66b47377e214b7d20b4f61'>gnu</a>/<a href='/guix/log/gnu/system?id=31a55a652f8e4856fd66b47377e214b7d20b4f61'>system</a>/<a href='/guix/log/gnu/system/uuid.scm?id=31a55a652f8e4856fd66b47377e214b7d20b4f61'>uuid.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/system/uuid.scm?id=31a55a652f8e4856fd66b47377e214b7d20b4f61&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2023-06-18 02:00:10 +0200'>2023-06-18</span></td><td><a href='/guix/commit/gnu/system/uuid.scm?id=65ed7a61f1ad01da440f0e7e08bfc32b43deed73'>uuid: Fix NTFS UUID stringification.</a><span class='msg-avail'>...<span class='msg-tooltip'>Previously, (ntfs-uuid-&gt;string (string-&gt;ntfs-uuid"5234ED0D34ECF53F"))
would yield "5234EDD34ECF53F".

Reported by sughosha in #guix.

* gnu/system/uuid.scm (ntfs-uuid-&gt;string): Pad hex bytes with zero when
needed.
</span></span></td><td>Tobias Geerinckx-Rice</td></tr>