From owner-freebsd-security@freebsd.org Mon Feb 17 07:34:21 2020 Return-Path: Delivered-To: freebsd-security@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id BDDB92505A8 for ; Mon, 17 Feb 2020 07:34:21 +0000 (UTC) (envelope-from titus@edc.ro) Received: from www.mecool.ro (mecool.ro [84.232.226.76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mecool.ro", Issuer "Let's Encrypt Authority X3" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 48LbMw4BWwz4Cvf for ; Mon, 17 Feb 2020 07:34:19 +0000 (UTC) (envelope-from titus@edc.ro) Received: from [10.1.1.42] (eatlas.ro [86.126.82.18]) (authenticated bits=0) by www.mecool.ro (8.15.2/8.14.6) with ESMTPSA id 01H7YAAS011535 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 17 Feb 2020 09:34:11 +0200 (EET) (envelope-from titus@edc.ro) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Subject: Re: Early heads-up: plan to remove local patches for TCP Wrappers support in sshd From: titus manea In-Reply-To: <6418643B-4442-47FC-807D-5E9AA63EA4EA@sarenet.es> Date: Mon, 17 Feb 2020 09:34:10 +0200 Cc: freebsd-security@freebsd.org Content-Transfer-Encoding: quoted-printable Message-Id: <9F3DAE76-8CFE-47FF-AB0D-A83788D59A1B@edc.ro> References: <6418643B-4442-47FC-807D-5E9AA63EA4EA@sarenet.es> To: Borja Marcos X-Mailer: Apple Mail (2.3445.9.1) X-Rspamd-Queue-Id: 48LbMw4BWwz4Cvf X-Spamd-Bar: ++ Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=pass (mx1.freebsd.org: domain of titus@edc.ro designates 84.232.226.76 as permitted sender) smtp.mailfrom=titus@edc.ro X-Spamd-Result: default: False [2.77 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; FROM_HAS_DN(0.00)[]; TO_DN_SOME(0.00)[]; R_SPF_ALLOW(-0.20)[+mx]; MV_CASE(0.50)[]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[edc.ro]; NEURAL_SPAM_MEDIUM(0.63)[0.631,0]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCPT_COUNT_TWO(0.00)[2]; NEURAL_SPAM_LONG(0.50)[0.500,0]; IP_SCORE(1.44)[ipnet: 84.232.128.0/17(4.69), asn: 8708(2.45), country: RO(0.08)]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:8708, ipnet:84.232.128.0/17, country:RO]; MID_RHS_MATCH_FROM(0.00)[]; RCVD_TLS_ALL(0.00)[]; RCVD_COUNT_TWO(0.00)[2] X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Feb 2020 07:34:21 -0000 > On Feb 17, 2020, at 9:02 AM, Borja Marcos wrote: >=20 >=20 >=20 >> On 14 Feb 2020, at 19:18, Ed Maste wrote: >>=20 >> Upstream OpenSSH-portable removed libwrap support in version 6.7, >> released in October 2014. We've maintained a patch in our tree to >> restore it, but it causes friction on each OpenSSH update and may >> introduce security vulnerabilities not present upstream. It's (past) >> time to remove it. >=20 > There=E2=80=99s no way to fight it? I know it=E2=80=99s an old program = (first time I used it was back in 1992 or so!) > but it=E2=80=99s really convenient and easy to use.=20 >=20 >=20 >=20 >=20 >=20 > Borja. >=20 > _______________________________________________ > freebsd-security@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-security > To unsubscribe, send any mail to = "freebsd-security-unsubscribe@freebsd.org" >=20 run sshd from inetd=