pjp
Administrator
Joined: 16 Apr 2002
Posts: 20589
|
 Posted: Mon May 19, 2003 6:54 pm Post subject: [gentoo-security] GLSA: xinetd (200305-08) |
 |
|
| Daniel Ahlberg wrote: | - - - ---------------------------------------------------------------------
GENTOO LINUX SECURITY ANNOUNCEMENT 200305-08
- - - ---------------------------------------------------------------------
PACKAGE : xinetd
SUMMARY : memory leak
DATE : 2003-05-19 14:00 UTC
EXPLOIT : remote
VERSIONS AFFECTED : <xinetd-2.3.11
FIXED VERSION : >=xinetd-2.3.11
CVE : CAN-2003-0211
- - - ---------------------------------------------------------------------
Steve Stubb has discovered that xinetd leaks 144 bytes for every
connection it rejects.
Read the full advisory at:
http://marc.theaimsgroup.com/?l=bugtraq&m=105068673220605&w=2
SOLUTION
It is recommended that all Gentoo Linux users who are running
sys-apps/xinetd upgrade to xinetd-2.3.11 as follows
emerge sync
emerge xinetd
emerge clean
- - - ---------------------------------------------------------------------
aliz@gentoo.org - GnuPG key is available at http://cvs.gentoo.org/~aliz
- - - --------------------------------------------------------------------- |
Mailing List Archive: Unavailable
_________________
Quis separabit? Quo animo? |
|
News & Announcements
