Fix CVE-2013-4342:

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4342
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=324678

Patch copied from upstream source repository:

https://github.com/xinetd-org/xinetd/commit/91e2401a219121eae15244a6b25d2e79c1af5864

From 91e2401a219121eae15244a6b25d2e79c1af5864 Mon Sep 17 00:00:00 2001
From: Thomas Swan <thomas.swan@gmail.com>
Date: Wed, 2 Oct 2013 23:17:17 -0500
Subject: [PATCH] CVE-2013-4342: xinetd: ignores user and group directives for
 TCPMUX services

Originally reported to Debian in 2005 <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=324678> and rediscovered <https://bugzilla.redhat.com/show_bug.cgi?id=1006100>, xinetd would execute TCPMUX services without dropping privilege to match the service configuration allowing the service to run with same privilege as the xinetd process (root).
---
 xinetd/builtins.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/xinetd/builtins.c b/xinetd/builtins.c
index 3b85579..34a5bac 100644
--- a/xinetd/builtins.c
+++ b/xinetd/builtins.c
@@ -617,7 +617,7 @@ static void tcpmux_handler( const struct server *serp )
    if( SC_IS_INTERNAL( scp ) ) {
       SC_INTERNAL(scp, nserp);
    } else {
-      exec_server(nserp);
+      child_process(nserp);
    }
 }
 
-- 
2.7.4

682'>tree</a><a href='/guix/commit/tests/networking.scm?id=3d0c0ae661ccafcab030f27a77179c772039f682'>commit</a><a href='/guix/diff/tests/networking.scm?id=3d0c0ae661ccafcab030f27a77179c772039f682'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/tests/networking.scm'>
<input type='hidden' name='id' value='3d0c0ae661ccafcab030f27a77179c772039f682'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=3d0c0ae661ccafcab030f27a77179c772039f682'>root</a>/<a href='/guix/log/tests?id=3d0c0ae661ccafcab030f27a77179c772039f682'>tests</a>/<a href='/guix/log/tests/networking.scm?id=3d0c0ae661ccafcab030f27a77179c772039f682'>networking.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/tests/networking.scm?id=3d0c0ae661ccafcab030f27a77179c772039f682&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2019-10-30 18:15:54 -0400'>2019-10-30</span></td><td><a href='/guix/commit/tests/networking.scm?id=97bc3cbea5fc281a299c03eaaa3be5baf21ea673'>services: ntp: Ensure no double quotes are output to config file.</a><span class='msg-avail'>...</span></td><td>Maxim Cournoyer</td></tr>
<tr><td><span title='2019-09-08 23:15:32 +0900'>2019-09-08</span></td><td><a href='/guix/commit/tests/networking.scm?id=2625abc6aa5df66a6503e906b7592691452954f5'>services: openntpd: Add test for issue #3731.</a><span class='msg-avail'>...</span></td><td>Maxim Cournoyer</td></tr>
<tr><td><span title='2019-09-08 23:15:31 +0900'>2019-09-08</span></td><td><a href='/guix/commit/tests/networking.scm?id=5658ae8a0ad5d988765944b7e783b2bdc23a7f48'>services: ntp: Support different NTP server types and options.</a><span class='msg-avail'>...</span></td><td>Maxim Cournoyer</td></tr>