Re: git: 24e1824e4646 - main - Deprecate telnet daemon
- In reply to: Brooks Davis : "git: 24e1824e4646 - main - Deprecate telnet daemon"
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Wed, 21 Sep 2022 17:02:48 UTC
On Wed, Sep 21, 2022 at 03:17:46PM +0000, Brooks Davis wrote: > The branch main has been updated by brooks: > > URL: https://cgit.FreeBSD.org/src/commit/?id=24e1824e4646237c5ab8e63f59fa38e076f18ba7 > > commit 24e1824e4646237c5ab8e63f59fa38e076f18ba7 > Author: Brooks Davis <brooks@FreeBSD.org> > AuthorDate: 2022-09-21 15:17:04 +0000 > Commit: Brooks Davis <brooks@FreeBSD.org> > CommitDate: 2022-09-21 15:17:04 +0000 > > Deprecate telnet daemon > > The telnetd codebase is old, unmaintained, and has a number of quality > issues. Users wishing to provide telnetd service should find a > maintained implementation. The telnet client is NOT deprecated as it > is lower risk. > > Reviewed by: pauamma, kevans, kp, melifaro > MFC After: 3 days > Differential Revision: https://reviews.freebsd.org/D36619 A bit more context. The telnetd daemon has been unmaintaned other than fixes like -fno-common for years. A 30 year old, two-byte DoS was recently disclosed https://pierrekim.github.io/blog/2022-08-24-2-byte-dos-freebsd-netbsd-telnetd-netkit-telnetd-inetutils-telnetd-kerberos-telnetd.html It's time and past to stop shipping this complex and obsolete software. I plan to follow up with the removal by the end of the month. -- Brooks