LWN.net Logo

Fedora alert FEDORA-2012-8041 (xinetd)

From:  updates@fedoraproject.org
To:  package-announce@lists.fedoraproject.org
Subject:  [SECURITY] Fedora 15 Update: xinetd-2.3.14-37.fc15
Date:  Tue, 29 May 2012 10:28:15 +0000
Message-ID:  <20120529102815.667F320DED@bastion01.phx2.fedoraproject.org>
Archive-link:  Article, Thread

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2012-8041 2012-05-18 10:03:41 -------------------------------------------------------------------------------- Name : xinetd Product : Fedora 15 Version : 2.3.14 Release : 37.fc15 URL : http://www.xinetd.org Summary : A secure replacement for inetd Description : Xinetd is a secure replacement for inetd, the Internet services daemon. Xinetd provides access control for all services based on the address of the remote host and/or on time of access and can prevent denial-of-access attacks. Xinetd provides extensive logging, has no limit on the number of server arguments, and lets you bind specific services to specific IP addresses on your host machine. Each service has its own specific configuration file for Xinetd; the files are located in the /etc/xinetd.d directory. -------------------------------------------------------------------------------- Update Information: Fix tcpmux security -------------------------------------------------------------------------------- ChangeLog: * Thu May 17 2012 Jan Synáček <jsynacek@redhat.com> - 2:2.3.14-37 - Fix tcpmux security - Resolves: #820318 (CVE-2012-0862) * Thu Apr 21 2011 Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 2:2.3.14-36 - Fix build warning about "dereferencing type-punned pointer" Related: #695674 - Avoid possible hang while logging an unexpected signal Related: #501604 - Let RPC services bind to a specific port Related: #624800 -------------------------------------------------------------------------------- References: [ 1 ] Bug #790940 - CVE-2012-0862 xinetd: enables unintentional services over tcpmux port https://bugzilla.redhat.com/show_bug.cgi?id=790940 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update xinetd' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-...


(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds