X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=YWL9B6JjFwEF80cw9NkMPVWOnXeM5LYW8e5rUHswJbaSLt1j3HsP4
	GOuO81eDnKDkzETZxeZeCpLJxQVW0/FIJBE9Mwi+ZVi6Ko5MV6DXtXX/XnmNG7Q0
	LX8W0Unz0STqjJSJNwFG8QuXRye8GAYqNp2ZNYfXFkQfUvkGnhpAME=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	bh=EdJ5dKMT9d6RUK17AvvbnMISNo4=; b=D56OhvWvLW9oXkHba5S7SvaH9hfy
	yg5m7x7z9Nr2KZVrLpMg8MEdzLHZTl4GYRJZ281yFHbpUJXyopWyy3ZLVHHcWLa3
	7UaLZ///VhRWBx27NvQe2MuAHwijE819muhmIGHCfMXkUVWyOUqQW28fuCafN+vD
	Ub9cLwl4jv0QdEQ=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-5.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.3.2
X-HELO:	calimero.vinschen.de
Date:	Tue, 19 Aug 2014 21:10:48 +0200
From:	Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To:	cygwin AT cygwin DOT com
Subject:	Re: HEADSUP: OpenSSH 6.7 drops tcpwrapper support
Message-ID:	<20140819191048.GS2280@calimero.vinschen.de>
Reply-To:	cygwin AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
References:	<20140818115352 DOT GC2280 AT calimero DOT vinschen DOT de> <53F3973F DOT FFD98255 AT boland DOT nl>
MIME-Version:	1.0
In-Reply-To:	<53F3973F.FFD98255@boland.nl>
User-Agent:	Mutt/1.5.23 (2014-03-12)

--k8r0khnpBuGu0wUi
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Aug 19 20:28, D. Boland wrote:
> Hi Corinna,
>=20
> Corinna Vinschen wrote:
> >=20
> > Hi folks,
> >=20
> > Just a HEADSUP to all of you actively using the tcp_wrappers/libwrap
> > functionality in sshd:
> >=20
> > Starting with the next OpenSSH version 6.7, which will be released soon,
> > upstream removed support for tcp_wrappers/libwrap from the sources.
> >=20
> > While that's bad from a compatibility point of view, the upstream
> > developers are adamant about this change for security reasons.
>=20
> Can you point me to any documentation about this?

No, sorry.  It has been discussed briefly on the openssh-unix-dev
developer list and it was referred to as old, unmaintained, dangerous
code which calls setjmp pretty much first thing in the library code.


Corinna

--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--k8r0khnpBuGu0wUi
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAEBAgAGBQJT86E4AAoJEPU2Bp2uRE+ggCAP/j+sewzupDVv9mLj+qirvGI5
dy7q1ejsncijLb7DInfpzobAL8C9cQcSgvTc8zMTJ23WT9U7QkFerKWgYs7e4vON
dVG6LBLr1qBFc+CUvJHD0tOlqk4schdvFyw7krbkzftynWYlQ8mAV+E7cOETnwrf
Up5+GYDvQo1kcG6lTn7b7IiswzNujnh35S/90yZ2EWOfvK1DBnhl9uVdaDyvMMSc
bJfjdW5w5OhwoOmFJ4oHwz2uoM1P4YWk0djqX0FAanQ9kb07bdyJcf/4DB+cilgl
rdxkexLwOr2JfiDwW/cKNPUzzG0oOYjezyuPeOFVPBfy01Hh+jgMzNhGp5ip3JTR
4Ru6FZC/mywJdPpXdYdeiqUSscgpYqxkFOuDXMy2Wnp08hczXu+OmnYGV1v72Xhr
ZwUcWaR+GgWeJph3oGI7FonTzFJyUUBjJrw8Cl/5Mtc835oCQ6hP9QkzdBl/lK8k
7gWciS5ACGZ3hnnL7Do3CEcCUyY6TYUvLV6rTBFvVxLoiD6nyqvuHulChpZJ30YR
C/fWcMvykh+aKBePFVpo3EgzJ6TjdV8U9TWFYX9paCYHuqNEYzoG9ztQW6lcfwFa
lLYc4ONZV+lCFfYLHfVCQQud5YRuT+vpcJ2GS9xTdXXmvfh5QzR6Fc+qbNMdWLVk
OjSHrOmFBM+kr43TFwB7
=uoJa
-----END PGP SIGNATURE-----

--k8r0khnpBuGu0wUi--

- Raw text -