Fix CVE-2013-4342:

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4342
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=324678

Patch copied from upstream source repository:

https://github.com/xinetd-org/xinetd/commit/91e2401a219121eae15244a6b25d2e79c1af5864

From 91e2401a219121eae15244a6b25d2e79c1af5864 Mon Sep 17 00:00:00 2001
From: Thomas Swan <thomas.swan@gmail.com>
Date: Wed, 2 Oct 2013 23:17:17 -0500
Subject: [PATCH] CVE-2013-4342: xinetd: ignores user and group directives for
 TCPMUX services

Originally reported to Debian in 2005 <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=324678> and rediscovered <https://bugzilla.redhat.com/show_bug.cgi?id=1006100>, xinetd would execute TCPMUX services without dropping privilege to match the service configuration allowing the service to run with same privilege as the xinetd process (root).
---
 xinetd/builtins.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/xinetd/builtins.c b/xinetd/builtins.c
index 3b85579..34a5bac 100644
--- a/xinetd/builtins.c
+++ b/xinetd/builtins.c
@@ -617,7 +617,7 @@ static void tcpmux_handler( const struct server *serp )
    if( SC_IS_INTERNAL( scp ) ) {
       SC_INTERNAL(scp, nserp);
    } else {
-      exec_server(nserp);
+      child_process(nserp);
    }
 }
 
-- 
2.7.4

otstrap/aarch64-linux/xz?showmsg=1'>log</a><a href='/guix/tree/gnu/packages/bootstrap/aarch64-linux/xz?id=9bb98f6425f2d9bd45a7dd432b2480e5a8cb7306'>tree</a><a href='/guix/commit/gnu/packages/bootstrap/aarch64-linux/xz?id=9bb98f6425f2d9bd45a7dd432b2480e5a8cb7306'>commit</a><a href='/guix/diff/gnu/packages/bootstrap/aarch64-linux/xz?id=9bb98f6425f2d9bd45a7dd432b2480e5a8cb7306'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/gnu/packages/bootstrap/aarch64-linux/xz'>
<input type='hidden' name='id' value='9bb98f6425f2d9bd45a7dd432b2480e5a8cb7306'/><input type='hidden' name='showmsg' value='1'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=9bb98f6425f2d9bd45a7dd432b2480e5a8cb7306&amp;showmsg=1'>root</a>/<a href='/guix/log/gnu?id=9bb98f6425f2d9bd45a7dd432b2480e5a8cb7306&amp;showmsg=1'>gnu</a>/<a href='/guix/log/gnu/packages?id=9bb98f6425f2d9bd45a7dd432b2480e5a8cb7306&amp;showmsg=1'>packages</a>/<a href='/guix/log/gnu/packages/bootstrap?id=9bb98f6425f2d9bd45a7dd432b2480e5a8cb7306&amp;showmsg=1'>bootstrap</a>/<a href='/guix/log/gnu/packages/bootstrap/aarch64-linux?id=9bb98f6425f2d9bd45a7dd432b2480e5a8cb7306&amp;showmsg=1'>aarch64-linux</a>/<a href='/guix/log/gnu/packages/bootstrap/aarch64-linux/xz?id=9bb98f6425f2d9bd45a7dd432b2480e5a8cb7306&amp;showmsg=1'>xz</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/packages/bootstrap/aarch64-linux/xz?id=9bb98f6425f2d9bd45a7dd432b2480e5a8cb7306'>Collapse</a>)</th><th class='left'>Author</th></tr>
<tr class='logheader'><td><span title='2017-02-20 12:58:07 +0200'>2017-02-20</span></td><td class='logsubject'><a href='/guix/commit/gnu/packages/bootstrap/aarch64-linux/xz?id=3b88f3767d9f3ad2cc64173525cd53d429bfe7e7'>gnu: Add bootstrap-binaries for 'aarch64-linux'.</a></td><td>Efraim Flashner</td></tr>
<tr class='nohover-highlight'><td/><td colspan='3' class='logmsg'>
These bootstrap-binaries were built against commit
8f8f250bdca917b3ce38aa0902f01b19081859a4.

* gnu/packages/bootstrap/aarch64-linux/bash,
gnu/packages/bootstrap/aarch64-linux/mkdir,
gnu/packages/bootstrap/aarch64-linux/xz,
gnu/packages/bootstrap/aarch64-linux/tar: New files.

* gnu/local.mk (bootstrap_aarch64_linuxdir)
(dist_bootstrap_aarch64_linux_DATA)
(nodist_bootstrap_aarch64_linux_DATA): New variables.
(DISTCLEANFILES): Add $(nodist_bootstrap_aarch64_linux_DATA).
(gnu/packages/bootstrap/aarch64-linux/guile-2.0.14.tar.xz): New target.
* build-aux/download.scm (filename-&gt;uri): Add aarch64-linux entry.
* gnu/packages/bootstrap.scm (raw-build): Use guile-2.0.14.tar.xz on
aarch64-linux.
(glibc-dynamic-linker, %bootstrap-coreutils&amp;co, %boostrap-binutils)
(%bootstrap-glibc, %bootstrap-gcc): Add aarch64-linux cases.
* m4/guix.m4 (GUIX_SYSTEM_TYPE): Add aarch64 case.
(GUIX_ASSERT_SUPPORTED_SYSTEM): Add aarch64-linux to supported list.
* doc/guix.texi (GNU Distribution): Add aarch64-linux to the list of
supported systems.
* tests/packages.scm (package-search-derivation, snippet): Add aarch64
case.


</td></tr>