Bug 922073 (CVE-2023-40303) – <net-misc/inetutils-2.5: Multiple vulnerabilities

• Product: Gentoo Security
• Status: RESOLVED FIXED

[Description Sam James 2024-01-14 04:31:38 UTC]

```
+* Noteworthy changes in release 2.5 (2023-12-29) [stable]
+
+** ftpd, rcp, rlogin, rsh, rshd, uucpd
+
+*** Avoid potential privilege escalations by checking set*id() return values.
+Reported by Jeffrey Bencteux in
+<https://lists.gnu.org/archive/html/bug-inetutils/2023-07/msg00000.html>.
+
[...]
```

[Comment 1 Larry the Git Cow 2024-01-14 04:32:51 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=a748ff4510fba666684ffb890eca33866fb975a4

commit a748ff4510fba666684ffb890eca33866fb975a4
Author:     Sam James <[e-mail]>
AuthorDate: 2024-01-14 04:31:59 +0000
Commit:     Sam James <[e-mail]>
CommitDate: 2024-01-14 04:31:59 +0000

    net-misc/inetutils: drop 2.4
    
    Bug: https://bugs.gentoo.org/922073
    Signed-off-by: Sam James <[e-mail]>

 net-misc/inetutils/Manifest             |  1 -
 net-misc/inetutils/inetutils-2.4.ebuild | 86 ---------------------------------
 2 files changed, 87 deletions(-)

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c551cede5af40726167bd46c2a2fa2007bf20c36

commit c551cede5af40726167bd46c2a2fa2007bf20c36
Author:     Sam James <[e-mail]>
AuthorDate: 2024-01-14 04:31:49 +0000
Commit:     Sam James <[e-mail]>
CommitDate: 2024-01-14 04:31:49 +0000

    net-misc/inetutils: add 2.5
    
    Bug: https://bugs.gentoo.org/922073
    Signed-off-by: Sam James <[e-mail]>

 net-misc/inetutils/Manifest             |  1 +
 net-misc/inetutils/inetutils-2.5.ebuild | 86 +++++++++++++++++++++++++++++++++
 2 files changed, 87 insertions(+)