X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:mime-version:content-type; q=dns; s=default; b=wxaDsAT32kSUm6s/
	R48tOCp414D/l+F7fF7uUndwzWNbNeZAMzyNec9/9D4aIL8msTjOc7zNthMxLuKQ
	igJTTe9MItpXnm/Kbj34PB4WUEXoT0d3oH/gILF/RLDYE2yAv3aAtDHEncS07yqw
	4PbRP6eARUbn+L9Hu0lphvFiDhc=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:mime-version:content-type; s=default; bh=nLK1ufgUGbf+4OiZ90So66
	hf0uY=; b=sv0oa00uQSUzr9u0XoSs2mi2/2dcdhiX506oq0NBPRt6m2CbQheMUe
	bM9ooCQh398MJyz/LCG4r3ADdpA3l6jyGrUit05QA51oUUO4PdZp0rFT3mZ8kE+H
	YU/aMSS6A8PmTTX0fYwQ4w/l/3t8ntWsBkdbWeisRaF2YuGnp4Fas=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-5.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.3.2
X-HELO:	calimero.vinschen.de
Date:	Mon, 18 Aug 2014 13:53:52 +0200
From:	Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To:	cygwin AT cygwin DOT com
Subject:	HEADSUP: OpenSSH 6.7 drops tcpwrapper support
Message-ID:	<20140818115352.GC2280@calimero.vinschen.de>
Reply-To:	cygwin AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
MIME-Version:	1.0
User-Agent:	Mutt/1.5.23 (2014-03-12)

--Izn7cH1Com+I3R9J
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi folks,

Just a HEADSUP to all of you actively using the tcp_wrappers/libwrap
functionality in sshd:

Starting with the next OpenSSH version 6.7, which will be released soon,
upstream removed support for tcp_wrappers/libwrap from the sources.

While that's bad from a compatibility point of view, the upstream
developers are adamant about this change for security reasons.

So, if you configured /etc/hosts.allow and/or /etc/hosts.deny files in
your Cygwin installation to block certain connections to your sshd
service, you will have to find other means to do that ASAP:

- Utilize the sshd_config Match rule.

- Utilize your firewall.


Hope that helps,
Corinna


--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--Izn7cH1Com+I3R9J
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=nTb9
-----END PGP SIGNATURE-----

--Izn7cH1Com+I3R9J--

- Raw text -