Your message dated Sun, 20 Apr 2008 14:02:03 +0000 with message-id <[EMAIL PROTECTED]> and subject line Bug#436803: fixed in openbsd-inetd 0.20080125-1 has caused the Debian Bug report #436803, regarding openbsd-inetd: denial of service, cpu loop, select returns fd that is not handled to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [EMAIL PROTECTED] immediately.) -- 436803: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=436803 Debian Bug Tracking System Contact [EMAIL PROTECTED] with problems
--- Begin Message ---Package: openbsd-inetd Version: 0.20050402-6 Severity: normal inetd can enter a state where select(2) is returning a file descriptor that is active due to an incoming connection, yet it does not handle the connection, so causing a CPU loop until it is restarted. The problem is reproducible by preparing a UDP service and bombarding a system with UDP packets. Since one has to actually prepare a UDP service, the package isn't vulnerable to start with, as far as I can tell. /etc/inetd.conf: 9988 dgram udp nowait root /usr/local/bin/9988 9988 /usr/local/bin/9988 is a shell script that performs "echo 'ok'" strace: select(12, [4 5 6 7 8 9 10 11], NULL, NULL, NULL) = 1 (in [11]) rt_sigprocmask(SIG_BLOCK, [HUP ALRM CHLD], NULL, 8) = 0 gettimeofday({1186634606, 858530}, NULL) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 select(12, [4 5 6 7 8 9 10 11], NULL, NULL, NULL) = 1 (in [11]) lsof: COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME inetd 16547 root cwd DIR 3,1 4096 2 / inetd 16547 root rtd DIR 3,1 4096 2 / inetd 16547 root txt REG 3,1 29192 1333385 /usr/sbin/inetd inetd 16547 root mem REG 3,1 83712 301649 /lib/libnsl-2.6.so inetd 16547 root mem REG 3,1 1331780 301208 /lib/libc-2.6.so inetd 16547 root mem REG 3,1 31224 294942 /lib/libwrap.so.0.7.6 inetd 16547 root mem REG 3,1 38416 301652 /lib/libnss_files-2.6.so inetd 16547 root mem REG 3,1 117336 295672 /lib/ld-2.6.so inetd 16547 root 0u CHR 1,3 870 /dev/null inetd 16547 root 1u CHR 1,3 870 /dev/null inetd 16547 root 2u CHR 1,3 870 /dev/null inetd 16547 root 4u IPv4 31852 TCP *:discard (LISTEN) inetd 16547 root 5u IPv4 31854 UDP *:discard inetd 16547 root 6u IPv4 31856 TCP *:daytime (LISTEN) inetd 16547 root 7u IPv4 31858 TCP *:time (LISTEN) inetd 16547 root 8u IPv4 31860 TCP *:distcc (LISTEN) inetd 16547 root 9u IPv4 31862 TCP *:tojander (LISTEN) inetd 16547 root 10u IPv4 31864 TCP *:9802 (LISTEN) inetd 16547 root 11u IPv4 31866 UDP *:9988 -- System Information: Debian Release: lenny/sid APT prefers testing APT policy: (500, 'testing') Architecture: i386 (i686) Kernel: Linux 2.6.18-4-686 (SMP w/1 CPU core) Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Shell: /bin/sh linked to /bin/bash Versions of packages openbsd-inetd depends on: ii libc6 2.6-2 GNU C Library: Shared libraries ii libwrap0 7.6.dbs-14 Wietse Venema's TCP wrappers libra ii lsb-base 3.1-24 Linux Standard Base 3.1 init scrip ii tcpd 7.6.dbs-14 Wietse Venema's TCP wrapper utilit ii update-inetd 4.27-0.5 inetd.conf updater openbsd-inetd recommends no packages. -- no debconf information
--- End Message ---
--- Begin Message ---Source: openbsd-inetd Source-Version: 0.20080125-1 We believe that the bug you reported is fixed in the latest version of openbsd-inetd, which is due to be installed in the Debian FTP archive: openbsd-inetd_0.20080125-1.diff.gz to pool/main/o/openbsd-inetd/openbsd-inetd_0.20080125-1.diff.gz openbsd-inetd_0.20080125-1.dsc to pool/main/o/openbsd-inetd/openbsd-inetd_0.20080125-1.dsc openbsd-inetd_0.20080125-1_i386.deb to pool/main/o/openbsd-inetd/openbsd-inetd_0.20080125-1_i386.deb openbsd-inetd_0.20080125.orig.tar.gz to pool/main/o/openbsd-inetd/openbsd-inetd_0.20080125.orig.tar.gz A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [EMAIL PROTECTED], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Marco d'Itri <[EMAIL PROTECTED]> (supplier of updated openbsd-inetd package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [EMAIL PROTECTED]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Sun, 20 Apr 2008 15:12:31 +0200 Source: openbsd-inetd Binary: openbsd-inetd Architecture: source i386 Version: 0.20080125-1 Distribution: unstable Urgency: low Maintainer: Marco d'Itri <[EMAIL PROTECTED]> Changed-By: Marco d'Itri <[EMAIL PROTECTED]> Description: openbsd-inetd - The OpenBSD Internet Superserver Closes: 125181 416010 435658 436803 458564 465613 465732 Changes: openbsd-inetd (0.20080125-1) unstable; urgency=low . * New CVS snapshot. * Package painfully converted to quilt. * Fixed a typo in debian/control. (Closes: #125181) * Fixed a typo in the init script. (Closes: #465613, #465732) * Delete /etc/rc[2345].d/S20inetd too when upgrading from netkit-inetd. (Closes: #416010) * Do not use log_warning_msg in the init script when inetd.conf is emtpy, this is not something deserving extra attention. (Closes: #435658) * Document in inetd(8) that datagram services must read some network input or inetd will continue spawning them. Many thanks to James Cameron for the analysis. (Closes: #436803) * Use a real characters class instead of character ranges with grep in the init script, because some locales have weird ranges. Spotted by Meelis Roos. (Closes: #458564) Checksums-Sha1: e2a14ad51fdd677f2ceb7e4516548ea32c8e5027 1042 openbsd-inetd_0.20080125-1.dsc 0037cba36d0369f9557653022a3a99144bee5cb9 24627 openbsd-inetd_0.20080125.orig.tar.gz 9adb8bf6d6c5d9f48dac3e261aa83d49a2b08b57 14599 openbsd-inetd_0.20080125-1.diff.gz ab4f23660b9d9e7973f9add0596f3e2004f46a90 33250 openbsd-inetd_0.20080125-1_i386.deb Checksums-Sha256: ceeefe4d4ef22cfe2c435b0a16492d8fa97658099deaf5dabe3787dd88e168f8 1042 openbsd-inetd_0.20080125-1.dsc 4c2818fd128ea6428c5f87e678789404f88eb4d71a8379bb85cf6f90d907e44f 24627 openbsd-inetd_0.20080125.orig.tar.gz ddcb50c07ab209429fbac8af3f35621f7f1216a9d87b11a95ff1bcceea8f8ceb 14599 openbsd-inetd_0.20080125-1.diff.gz 0dac8ce7ade776cc45b97e7a0a17dc855e6e8b2e6382b3275eadacc1d465294b 33250 openbsd-inetd_0.20080125-1_i386.deb Files: a0936fa5c2a66ed62356c9aea5e96ec2 1042 net standard openbsd-inetd_0.20080125-1.dsc d3c4bb9bcbd0c29091791baa61ad0d0a 24627 net standard openbsd-inetd_0.20080125.orig.tar.gz bec32a5b7ba330f2973f15c8dd6a81e6 14599 net standard openbsd-inetd_0.20080125-1.diff.gz 877207072c28e09dd021c82096d7f3dc 33250 net standard openbsd-inetd_0.20080125-1_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFIC0l/FGfw2OHuP7ERAp2CAJ9NJymGRFfCVKHjrRKpn2NoMZMidACfQhI1 PHqpkI6CQLZjP+ZouSTD6D8= =ySNN -----END PGP SIGNATURE-----
--- End Message ---
