______________________________________________________________________ Mandrake Linux Security Update Advisory ______________________________________________________________________ Package name: xinetd Advisory ID: MDKSA-2002:053 Date: August 26th, 2002 Affected versions: 8.2 ______________________________________________________________________ Problem Description: A vulnerability was discovered by Solar Designer in xinetd. File descriptors for the signal pipe that were introduced in version 2.3.4 are leaked into services started by xinetd, which can then be used to talk to xinetd, resulting in a crash of xinetd. ______________________________________________________________________ References: ______________________________________________________________________ Updated Packages: Mandrake Linux 8.2: 1ae58d1e98290a5ddee12d5befc1ca81 8.2/RPMS/xinetd-2.3.7-1.1mdk.i586.rpm b8b28576800b4c42196dabd9c1fd27be 8.2/RPMS/xinetd-ipv6-2.3.7-1.1mdk.i586.rpm a043a1333f89640004fcf0c6e0bddc8e 8.2/SRPMS/xinetd-2.3.7-1.1mdk.src.rpm Mandrake Linux 8.2/ppc: c1d1fdc1a8de2a8c84dd7f9820affa48 ppc/8.2/RPMS/xinetd-2.3.7-1.1mdk.ppc.rpm 30cfa04fa0b8f5792d0d5b3a3dfac8b6 ppc/8.2/RPMS/xinetd-ipv6-2.3.7-1.1mdk.ppc.rpm a043a1333f89640004fcf0c6e0bddc8e ppc/8.2/SRPMS/xinetd-2.3.7-1.1mdk.src.rpm ______________________________________________________________________ Bug IDs fixed (see https://qa.mandrakesoft.com for more information): ______________________________________________________________________ To upgrade automatically, use MandrakeUpdate. The verification of md5 checksums and GPG signatures is performed automatically for you. If you want to upgrade manually, download the updated package from one of our FTP server mirrors and upgrade with "rpm -Fvh *.rpm". A list of FTP mirrors can be obtained from: http://www.mandrakesecure.net/en/ftp.php Please verify the update prior to upgrading to ensure the integrity of the downloaded package. You can do this with the command: rpm --checksig <filename> All packages are signed by MandrakeSoft for security. You can obtain the GPG public key of the Mandrake Linux Security Team from: https://www.mandrakesecure.net/RPM-GPG-KEYS Please be aware that sometimes it takes the mirrors a few hours to update. You can view other update advisories for Mandrake Linux at: http://www.mandrakesecure.net/en/advisories/ MandrakeSoft has several security-related mailing list services that anyone can subscribe to. Information on these lists can be obtained by visiting: http://www.mandrakesecure.net/en/mlist.php If you want to report vulnerabilities, please contact [email protected] ______________________________________________________________________ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Linux Mandrake Security Team <[email protected]>
Mandrake Linux Advisory: xinetd
By
Get the Free Newsletter!
Subscribe to Developer Insider for top news, trends, & analysis