From nobody Wed Sep 21 17:02:48 2022 X-Original-To: dev-commits-src-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4MXl8v73Y7z4d1t2; Wed, 21 Sep 2022 17:02:55 +0000 (UTC) (envelope-from brooks@spindle.one-eyed-alien.net) Received: from spindle.one-eyed-alien.net (spindle.one-eyed-alien.net [199.48.129.229]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4MXl8v0xmbz3RxY; Wed, 21 Sep 2022 17:02:55 +0000 (UTC) (envelope-from brooks@spindle.one-eyed-alien.net) Received: by spindle.one-eyed-alien.net (Postfix, from userid 3001) id 38DA03C0199; Wed, 21 Sep 2022 17:02:48 +0000 (UTC) Date: Wed, 21 Sep 2022 17:02:48 +0000 From: Brooks Davis To: Brooks Davis Cc: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org Subject: Re: git: 24e1824e4646 - main - Deprecate telnet daemon Message-ID: <20220921170248.GA6935@spindle.one-eyed-alien.net> References: <202209211517.28LFHkoJ089471@gitrepo.freebsd.org> List-Id: Commit messages for the main branch of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-dev-commits-src-main@freebsd.org X-BeenThere: dev-commits-src-main@freebsd.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="pWyiEgJYm5f9v55/" Content-Disposition: inline In-Reply-To: <202209211517.28LFHkoJ089471@gitrepo.freebsd.org> User-Agent: Mutt/1.9.4 (2018-02-28) X-Rspamd-Queue-Id: 4MXl8v0xmbz3RxY X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=none (mx1.freebsd.org: domain of brooks@spindle.one-eyed-alien.net has no SPF policy when checking 199.48.129.229) smtp.mailfrom=brooks@spindle.one-eyed-alien.net X-Spamd-Result: default: False [-3.83 / 15.00]; SIGNED_PGP(-2.00)[]; AUTH_NA(1.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_SHORT(-1.00)[-0.996]; NEURAL_HAM_MEDIUM(-0.94)[-0.936]; FORGED_SENDER(0.30)[brooks@freebsd.org,brooks@spindle.one-eyed-alien.net]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; MLMMJ_DEST(0.00)[dev-commits-src-all@FreeBSD.org,dev-commits-src-main@FreeBSD.org]; ASN(0.00)[asn:36236, ipnet:199.48.128.0/22, country:US]; MIME_TRACE(0.00)[0:+,1:+,2:~]; R_DKIM_NA(0.00)[]; RCVD_TLS_LAST(0.00)[]; R_SPF_NA(0.00)[no SPF record]; DMARC_NA(0.00)[freebsd.org]; FREEFALL_USER(0.00)[brooks]; ARC_NA(0.00)[]; FROM_NEQ_ENVFROM(0.00)[brooks@freebsd.org,brooks@spindle.one-eyed-alien.net]; RCPT_COUNT_THREE(0.00)[4]; TO_MATCH_ENVRCPT_ALL(0.00)[]; TO_DN_SOME(0.00)[]; FROM_HAS_DN(0.00)[]; RCVD_COUNT_TWO(0.00)[2] X-ThisMailContainsUnwantedMimeParts: N --pWyiEgJYm5f9v55/ Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Sep 21, 2022 at 03:17:46PM +0000, Brooks Davis wrote: > The branch main has been updated by brooks: >=20 > URL: https://cgit.FreeBSD.org/src/commit/?id=3D24e1824e4646237c5ab8e63f59= fa38e076f18ba7 >=20 > commit 24e1824e4646237c5ab8e63f59fa38e076f18ba7 > Author: Brooks Davis > AuthorDate: 2022-09-21 15:17:04 +0000 > Commit: Brooks Davis > CommitDate: 2022-09-21 15:17:04 +0000 >=20 > Deprecate telnet daemon > =20 > The telnetd codebase is old, unmaintained, and has a number of quality > issues. Users wishing to provide telnetd service should find a > maintained implementation. The telnet client is NOT deprecated as it > is lower risk. > =20 > Reviewed by: pauamma, kevans, kp, melifaro > MFC After: 3 days > Differential Revision: https://reviews.freebsd.org/D36619 A bit more context. The telnetd daemon has been unmaintaned other than fixes like -fno-common for years. A 30 year old, two-byte DoS was recently disclo= sed https://pierrekim.github.io/blog/2022-08-24-2-byte-dos-freebsd-netbsd-telne= td-netkit-telnetd-inetutils-telnetd-kerberos-telnetd.html It's time and past to stop shipping this complex and obsolete software. I plan to follow up with the removal by the end of the month. -- Brooks --pWyiEgJYm5f9v55/ Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEcBAEBAgAGBQJjK0O3AAoJEKzQXbSebgfAuPYIAId10d6zh79fdPFYyaIjzGKJ kN39SrGq3LpTdWDRRktJo7VyVfMopvfOBIlE2q6fcDxhlb8ZUTkjJ2ptODZ3sYlV SUks7VdQt70WFZWZIrVuijS4K/VQMWY6qgBMnaISkTqT/TS3i0yyLIYUWnMgKQWe RlksPl4/esSQTq5SeiiT8/SutK2BasLE9IM1HszsfE91HSXVPYQ4A8YSFLeRYQ1l scp9oXKpF9+3DUUouuBzZDPZFEfujoqzynB/QK5qldafZxn65b7kn8o72JWQ+Jy5 v/1YSHo/06fOWJZMA3N1vHbnt+d4xOaOS9sncOrZimLKQA6MpVka5YLghrOzTsk= =3mI3 -----END PGP SIGNATURE----- --pWyiEgJYm5f9v55/--