[arch-commits] Commit in xinetd/trunk (PKGBUILD fix-CVE-2013-4342.patch)

[Tobias Powalowski]

    Date: Monday, October 14, 2013 @ 09:59:52
  Author: tpowa
Revision: 196475

upgpkg: xinetd 2.3.15-4

fix #37310

Added:
  xinetd/trunk/fix-CVE-2013-4342.patch
Modified:
  xinetd/trunk/PKGBUILD

-------------------------+
 PKGBUILD                |   11 ++++++++---
 fix-CVE-2013-4342.patch |   13 +++++++++++++
 2 files changed, 21 insertions(+), 3 deletions(-)

Modified: PKGBUILD
===================================================================
--- PKGBUILD	2013-10-14 07:42:40 UTC (rev 196474)
+++ PKGBUILD	2013-10-14 07:59:52 UTC (rev 196475)
@@ -4,7 +4,7 @@
 
 pkgname=xinetd
 pkgver=2.3.15
-pkgrel=3
+pkgrel=4
 pkgdesc="A secure replacement for inetd"
 arch=('i686' 'x86_64')
 url="http://www.xinetd.org/"
@@ -15,16 +15,21 @@
         xinetd.conf
         servers
         services
-        xinetd.service)
+        xinetd.service
+        fix-CVE-2013-4342.patch)
 md5sums=('77358478fd58efa6366accae99b8b04c'
          'f109f699a07bc8cfb5791060f5e87f9e'
          '21f47b4aa20921cfaddddd9f9a407f81'
          '9fa2061dc7dd738c8424251deb86f81e'
-         '38be35b6e7146dc59902e243d9063b4c')
+         '38be35b6e7146dc59902e243d9063b4c'
+         'b14615c73753ceffbcc96d5e08f3c18d')
 
 prepare() {
   cd $srcdir/$pkgname-$pkgver
   sed -i "s#${prefix}/man#${prefix}/share/man#" configure
+  # fix #37310
+  # https://bugzilla.redhat.com/show_bug.cgi?id=1006100#c
+  patch -Np1 -i $srcdir/fix-CVE-2013-4342.patch
 }
 
 build() {

Added: fix-CVE-2013-4342.patch
===================================================================
--- fix-CVE-2013-4342.patch	                        (rev 0)
+++ fix-CVE-2013-4342.patch	2013-10-14 07:59:52 UTC (rev 196475)
@@ -0,0 +1,13 @@
+diff --git a/xinetd/builtins.c b/xinetd/builtins.c
+index e61502f..a414cf3 100644
+--- a/xinetd/builtins.c
++++ b/xinetd/builtins.c
+@@ -695,7 +695,7 @@ static void tcpmux_handler( const struct server *serp )
+    if( SC_IS_INTERNAL( scp ) ) {
+       SC_INTERNAL(scp, nserp);
+    } else {
+-      exec_server(nserp);
++      child_process(nserp);
+    }
+ }
+