Bug 53202 - xinetd-2.3.0-3 obsolete; please upgrade at least to 2.3.3
Summary: xinetd-2.3.0-3 obsolete; please upgrade at least to 2.3.3
Alias: None
Product: Red Hat Public Beta
Classification: Retired
Component: xinetd
Version: roswell
Hardware: All
OS: Linux
Target Milestone: ---
Assignee: Trond Eivind Glomsrxd
QA Contact: Ben Levenson
: 53278 (view as bug list)
Depends On:
TreeView+ depends on / blocked
Reported: 2001-09-05 02:11 UTC by Erich Schwarz
Modified: 2007-04-18 16:36 UTC (History)
0 users

Clone Of:
Last Closed: 2001-09-05 02:12:03 UTC

Attachments (Terms of Use)

Description Erich Schwarz 2001-09-05 02:11:59 UTC
From Bugzilla Helper:
User-Agent: Mozilla/4.76 [en] (X11; U; Linux 2.4.1-0.1.9 i686)

Description of problem:
1. A bug was found in xinetd's string handling routines. All versions of
xinetd prior to 2.3.1 are vulnerable. 

2. The mailing list for xinetd shows that there are at least two serious 
bugs in xinetd that have only just been fixed and so cannot be in Red Hat
These bugs manifest themselves when xinetd is heavily loaded and also for 
daemons where you have to specify the "wait" option.

Version-Release number of selected component (if applicable): 2.3.0-3

How reproducible:
Didn't try

Additional info:

I haven't reproduced these bugs because they're already public knowledge on
www.xinetd.org and on the xinetd mailing lists.  That doesn't mean that
keeping xinetd-2.3.0-3 instead of upgrading to 2.3.3 wouldn't be a serious

Comment 1 Trond Eivind Glomsrxd 2001-09-05 16:30:54 UTC
2.3.3 is already in rawhide, and if you read the changelog you'll find that some
of the fixes originate from here - we are aware of these issues.

Comment 2 Trond Eivind Glomsrxd 2001-09-06 00:15:17 UTC
*** Bug 53278 has been marked as a duplicate of this bug. ***

Note You need to log in before you can comment on or make changes to this bug.