HEADSUP: OpenSSH 6.7 drops tcpwrapper support

[Corinna Vinschen]

On Aug 19 20:28, D. Boland wrote:
> Hi Corinna,
> 
> Corinna Vinschen wrote:
> > 
> > Hi folks,
> > 
> > Just a HEADSUP to all of you actively using the tcp_wrappers/libwrap
> > functionality in sshd:
> > 
> > Starting with the next OpenSSH version 6.7, which will be released soon,
> > upstream removed support for tcp_wrappers/libwrap from the sources.
> > 
> > While that's bad from a compatibility point of view, the upstream
> > developers are adamant about this change for security reasons.
> 
> Can you point me to any documentation about this?

No, sorry.  It has been discussed briefly on the openssh-unix-dev
developer list and it was referred to as old, unmaintained, dangerous
code which calls setjmp pretty much first thing in the library code.


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://cygwin.com/pipermail/cygwin/attachments/20140819/f0ff5e65/attachment.sig>