Re: Early heads-up: plan to remove local patches for TCP Wrappers support in sshd
Bryan Drewery <[email protected]>
| Newsgroups | gmane.os.freebsd.security.general |
|---|---|
| Organization | FreeBSD |
| Message-ID | <[email protected]> |
On 2/14/2020 10:18 AM, Ed Maste wrote: > Upstream OpenSSH-portable removed libwrap support in version 6.7, > released in October 2014. We've maintained a patch in our tree to > restore it, but it causes friction on each OpenSSH update and may > introduce security vulnerabilities not present upstream. It's (past) > time to remove it. > > Although the specific deprecation steps aren't yet fleshed out I'm > sending this as an early notice that I plan to disable libwrap support > from the base system sshd and that FreeBSD 13 will not support it. > We'll probably keep the patch in the tree for some time, to support > MFCs to stable branches; the patch will be removed entirely later on. FYI if you need this feature the port still has it and is at 8.2 now. -- Regards, Bryan Drewery
signature.asc
(application/pgp-signature, 618 B)
-----BEGIN PGP SIGNATURE----- iQGTBAEBCgB9FiEE+Rc8ssOq6npcih8JNddxu25Gl88FAl55JONfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEY5 MTczQ0IyQzNBQUVBN0E1QzhBMUYwOTM1RDc3MUJCNkU0Njk3Q0YACgkQNddxu25G l88Riwf/Yc9Vi1qSkFod09QX8Fy2DSJKlfyjtx/+qZcsW1SgCRqjn/eXTb6N2sgW dY1W/EnPxW3joO6vvlwat9AhY1ZS3DRZd0eX0UP5sw01nKrE70Ym0qItinYN5NA0 o2VnBJfZYISoEpMC41uGNBZmF2PL7yE7VI8eox91DcIuHATQFCRi2UJBmKtnSopi q3xZy46DGc5yyE4e82mfo2PrkoQsucg+zW+sREjKaXMaiDwiPcppNU8Z540yz3mT 1oSKGPvOV4HPAGyRS/ZAlxRTp9iK7H/jIwV7MH59j8VSFAvthnjoxgbskNNjCobR DvUMvWCtT9PHYtUZ71kadZhWKg89bw== =Z+WT -----END PGP SIGNATURE-----