Fix CVE-2013-4342:

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4342
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=324678

Patch copied from upstream source repository:

https://github.com/xinetd-org/xinetd/commit/91e2401a219121eae15244a6b25d2e79c1af5864

From 91e2401a219121eae15244a6b25d2e79c1af5864 Mon Sep 17 00:00:00 2001
From: Thomas Swan <thomas.swan@gmail.com>
Date: Wed, 2 Oct 2013 23:17:17 -0500
Subject: [PATCH] CVE-2013-4342: xinetd: ignores user and group directives for
 TCPMUX services

Originally reported to Debian in 2005 <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=324678> and rediscovered <https://bugzilla.redhat.com/show_bug.cgi?id=1006100>, xinetd would execute TCPMUX services without dropping privilege to match the service configuration allowing the service to run with same privilege as the xinetd process (root).
---
 xinetd/builtins.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/xinetd/builtins.c b/xinetd/builtins.c
index 3b85579..34a5bac 100644
--- a/xinetd/builtins.c
+++ b/xinetd/builtins.c
@@ -617,7 +617,7 @@ static void tcpmux_handler( const struct server *serp )
    if( SC_IS_INTERNAL( scp ) ) {
       SC_INTERNAL(scp, nserp);
    } else {
-      exec_server(nserp);
+      child_process(nserp);
    }
 }
 
-- 
2.7.4

edir.sh?id=77f3bf6270a37daef984a81b4ca37399d1fda0b1'>tree</a><a href='/guix/commit/tests/guix-pack-localstatedir.sh?id=77f3bf6270a37daef984a81b4ca37399d1fda0b1'>commit</a><a href='/guix/diff/tests/guix-pack-localstatedir.sh?id=77f3bf6270a37daef984a81b4ca37399d1fda0b1'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/tests/guix-pack-localstatedir.sh'>
<input type='hidden' name='id' value='77f3bf6270a37daef984a81b4ca37399d1fda0b1'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=77f3bf6270a37daef984a81b4ca37399d1fda0b1'>root</a>/<a href='/guix/log/tests?id=77f3bf6270a37daef984a81b4ca37399d1fda0b1'>tests</a>/<a href='/guix/log/tests/guix-pack-localstatedir.sh?id=77f3bf6270a37daef984a81b4ca37399d1fda0b1'>guix-pack-localstatedir.sh</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/tests/guix-pack-localstatedir.sh?id=77f3bf6270a37daef984a81b4ca37399d1fda0b1&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>