From owner-freebsd-security@freebsd.org  Mon Feb 17 07:02:10 2020
Return-Path: <owner-freebsd-security@freebsd.org>
Delivered-To: freebsd-security@mailman.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
 by mailman.nyi.freebsd.org (Postfix) with ESMTP id 9D59324FB6D;
 Mon, 17 Feb 2020 07:02:10 +0000 (UTC)
 (envelope-from borjam@sarenet.es)
Received: from cu01176b.smtpx.saremail.com (cu01176b.smtpx.saremail.com
 [195.16.151.151])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 48LZfm4sl1z3D7m;
 Mon, 17 Feb 2020 07:02:08 +0000 (UTC)
 (envelope-from borjam@sarenet.es)
Received: from [172.16.8.52] (unknown [192.148.167.11])
 by proxypop01.sare.net (Postfix) with ESMTPA id 9DAE29DDD3C;
 Mon, 17 Feb 2020 08:02:04 +0100 (CET)
Content-Type: text/plain;
	charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3608.60.0.2.5\))
Subject: Re: Early heads-up: plan to remove local patches for TCP Wrappers
 support in sshd
From: Borja Marcos <borjam@sarenet.es>
In-Reply-To: <CAPyFy2Die2tynFM3m3-5zBtWAOpHf-QHY-bE2JY7KKGiP8Tz_Q@mail.gmail.com>
Date: Mon, 17 Feb 2020 08:02:03 +0100
Cc: FreeBSD Current <freebsd-current@freebsd.org>, freebsd-security@freebsd.org
Content-Transfer-Encoding: quoted-printable
Message-Id: <6418643B-4442-47FC-807D-5E9AA63EA4EA@sarenet.es>
References: <CAPyFy2Die2tynFM3m3-5zBtWAOpHf-QHY-bE2JY7KKGiP8Tz_Q@mail.gmail.com>
To: Ed Maste <emaste@freebsd.org>
X-Mailer: Apple Mail (2.3608.60.0.2.5)
X-Rspamd-Queue-Id: 48LZfm4sl1z3D7m
X-Spamd-Bar: -----
Authentication-Results: mx1.freebsd.org; dkim=none;
 dmarc=pass (policy=none) header.from=sarenet.es;
 spf=pass (mx1.freebsd.org: domain of borjam@sarenet.es designates
 195.16.151.151 as permitted sender) smtp.mailfrom=borjam@sarenet.es
X-Spamd-Result: default: False [-5.21 / 15.00]; ARC_NA(0.00)[];
 RCVD_VIA_SMTP_AUTH(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0];
 FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[3];
 R_SPF_ALLOW(-0.20)[+ip4:195.16.151.0/24];
 TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain];
 MV_CASE(0.50)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0];
 TO_DN_SOME(0.00)[]; RCVD_TLS_LAST(0.00)[];
 DMARC_POLICY_ALLOW(-0.50)[sarenet.es,none];
 RCVD_IN_DNSWL_NONE(0.00)[151.151.16.195.list.dnswl.org : 127.0.10.0];
 IP_SCORE(-2.91)[ip: (-7.73), ipnet: 195.16.128.0/19(-3.95), asn: 3262(-2.93),
 country: ES(0.04)]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[];
 MIME_TRACE(0.00)[0:+];
 ASN(0.00)[asn:3262, ipnet:195.16.128.0/19, country:ES];
 MID_RHS_MATCH_FROM(0.00)[]; RCVD_COUNT_TWO(0.00)[2]
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Security issues \[members-only posting\]"
 <freebsd-security.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security/>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 17 Feb 2020 07:02:10 -0000



> On 14 Feb 2020, at 19:18, Ed Maste <emaste@freebsd.org> wrote:
>=20
> Upstream OpenSSH-portable removed libwrap support in version 6.7,
> released in October 2014. We've maintained a patch in our tree to
> restore it, but it causes friction on each OpenSSH update and may
> introduce security vulnerabilities not present upstream. It's (past)
> time to remove it.

There=E2=80=99s no way to fight it? I know it=E2=80=99s an old program =
(first time I used it was back in 1992 or so!)
but it=E2=80=99s really convenient and easy to use.=20





Borja.