diff --git a/.checkpackageignore b/.checkpackageignore index 3e274f391f..4df0438291 100644 --- a/.checkpackageignore +++ b/.checkpackageignore @@ -1124,7 +1124,6 @@ package/xinetd/0001-ar.patch lib_patch.Upstream package/xinetd/0002-destdir.patch lib_patch.Upstream package/xinetd/0003-rpc-fix.patch lib_patch.Upstream package/xinetd/0004-configure-rlim_t.patch lib_patch.Upstream -package/xinetd/0005-CVE-2013-4342-xinetd-ignores-user-and-group-directiv.patch lib_patch.Upstream package/xl2tp/xl2tpd lib_shellscript.TrailingSpace package/xml-security-c/0001-fix-build-with-libressl-3.5.0.patch lib_patch.Upstream package/yajl/0001-Let-the-shared-and-the-static-library-have-the-same-.patch lib_patch.Upstream diff --git a/package/xinetd/0005-CVE-2013-4342-xinetd-ignores-user-and-group-directiv.patch b/package/xinetd/0005-CVE-2013-4342-xinetd-ignores-user-and-group-directiv.patch index bb2ee1fc9a..c99879b478 100644 --- a/package/xinetd/0005-CVE-2013-4342-xinetd-ignores-user-and-group-directiv.patch +++ b/package/xinetd/0005-CVE-2013-4342-xinetd-ignores-user-and-group-directiv.patch @@ -6,6 +6,8 @@ Subject: [PATCH] CVE-2013-4342: xinetd: ignores user and group directives for Originally reported to Debian in 2005 and rediscovered , xinetd would execute TCPMUX services without dropping privilege to match the service configuration allowing the service to run with same privilege as the xinetd process (root). +CVE: CVE-2013-4342 +Upstream: https://github.com/xinetd-org/xinetd/commit/e7c1ba41f4f86b436fb82b0d55cd5d387bd4ecc4 Signed-off-by: Peter Korsgaard --- xinetd/builtins.c | 2 +-