HEADSUP: OpenSSH 6.7 drops tcpwrapper support

Corinna Vinschen corinna-cygwin@cygwin.com
Tue Aug 19 19:10:00 GMT 2014

On Aug 19 20:28, D. Boland wrote:
> Hi Corinna,
> Corinna Vinschen wrote:
> > 
> > Hi folks,
> > 
> > Just a HEADSUP to all of you actively using the tcp_wrappers/libwrap
> > functionality in sshd:
> > 
> > Starting with the next OpenSSH version 6.7, which will be released soon,
> > upstream removed support for tcp_wrappers/libwrap from the sources.
> > 
> > While that's bad from a compatibility point of view, the upstream
> > developers are adamant about this change for security reasons.
> Can you point me to any documentation about this?

No, sorry.  It has been discussed briefly on the openssh-unix-dev
developer list and it was referred to as old, unmaintained, dangerous
code which calls setjmp pretty much first thing in the library code.


Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://cygwin.com/pipermail/cygwin/attachments/20140819/f0ff5e65/attachment.sig>

More information about the Cygwin mailing list