Re: Early heads-up: plan to remove local patches for TCP Wrappers support in sshd

Bryan Drewery <[email protected]>
Newsgroups gmane.os.freebsd.security.general
Organization FreeBSD
Message-ID <[email protected]>
On 2/14/2020 10:18 AM, Ed Maste wrote:
> Upstream OpenSSH-portable removed libwrap support in version 6.7,
> released in October 2014. We've maintained a patch in our tree to
> restore it, but it causes friction on each OpenSSH update and may
> introduce security vulnerabilities not present upstream. It's (past)
> time to remove it.
> 
> Although the specific deprecation steps aren't yet fleshed out I'm
> sending this as an early notice that I plan to disable libwrap support
> from the base system sshd and that FreeBSD 13 will not support it.
> We'll probably keep the patch in the tree for some time, to support
> MFCs to stable branches; the patch will be removed entirely later on.

FYI if you need this feature the port still has it and is at 8.2 now.


-- 
Regards,
Bryan Drewery
signature.asc (application/pgp-signature, 618 B)
-----BEGIN PGP SIGNATURE-----
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=Z+WT
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.