Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 922073 (CVE-2023-40303) - <net-misc/inetutils-2.5: Multiple vulnerabilities
Summary: <net-misc/inetutils-2.5: Multiple vulnerabilities
Status: RESOLVED FIXED
Alias: CVE-2023-40303
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal trivial (vote)
Assignee: Gentoo Security
URL:
Whiteboard: ~2 [noglsa]
Keywords:
Depends on:
Blocks:
 
Reported: 2024-01-14 04:31 UTC by Sam James
Modified: 2024-01-14 04:33 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Sam James archtester Gentoo Infrastructure gentoo-dev Security 2024-01-14 04:31:38 UTC 
```
+* Noteworthy changes in release 2.5 (2023-12-29) [stable]
+
+** ftpd, rcp, rlogin, rsh, rshd, uucpd
+
+*** Avoid potential privilege escalations by checking set*id() return values.
+Reported by Jeffrey Bencteux in
+<https://lists.gnu.org/archive/html/bug-inetutils/2023-07/msg00000.html>.
+
[...]
```
Comment 1 Larry the Git Cow gentoo-dev 2024-01-14 04:32:51 UTC 
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=a748ff4510fba666684ffb890eca33866fb975a4

commit a748ff4510fba666684ffb890eca33866fb975a4
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2024-01-14 04:31:59 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2024-01-14 04:31:59 +0000

    net-misc/inetutils: drop 2.4
    
    Bug: https://bugs.gentoo.org/922073
    Signed-off-by: Sam James <sam@gentoo.org>

 net-misc/inetutils/Manifest             |  1 -
 net-misc/inetutils/inetutils-2.4.ebuild | 86 ---------------------------------
 2 files changed, 87 deletions(-)

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c551cede5af40726167bd46c2a2fa2007bf20c36

commit c551cede5af40726167bd46c2a2fa2007bf20c36
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2024-01-14 04:31:49 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2024-01-14 04:31:49 +0000

    net-misc/inetutils: add 2.5
    
    Bug: https://bugs.gentoo.org/922073
    Signed-off-by: Sam James <sam@gentoo.org>

 net-misc/inetutils/Manifest             |  1 +
 net-misc/inetutils/inetutils-2.5.ebuild | 86 +++++++++++++++++++++++++++++++++
 2 files changed, 87 insertions(+)