From owner-freebsd-security Thu Oct 14 13:20:12 1999 Delivered-To: freebsd-security@freebsd.org Received: by hub.freebsd.org (Postfix, from userid 758) id 04E2E14D40; Thu, 14 Oct 1999 13:20:10 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by hub.freebsd.org (Postfix) with ESMTP id EAC341CD47F; Thu, 14 Oct 1999 13:20:05 -0700 (PDT) (envelope-from kris@hub.freebsd.org) Date: Thu, 14 Oct 1999 13:20:05 -0700 (PDT) From: Kris Kennaway To: Ollivier Robert Cc: freebsd-security@FreeBSD.ORG Subject: Re: FreeSSH In-Reply-To: <19991014191148.A70611@keltia.freenix.fr> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Thu, 14 Oct 1999, Ollivier Robert wrote: > According to Bjoern Groenvall: > > If you are willing to run configure and make why don't you just fetch > > ftp://ftp.pdc.kth.se/pub/krypto/ossh/ossh-1.2.17.tar.gz? OSSH has no > > restrictions on use (if you're not in the US) and builds straight out > > The main problem is that this code base is *OLD* (1995) and a lot of things > have been fixed (not only buffer overflows but protocol problems) since this > version. > > I see backporting all the modifications from 1.2.27 as a non trivial task and > maybe not worth the big effort when you can install the latest with the > port... This is the version the OpenBSD guys have taken, I do believe. Hard work isn't hard at all when someone else is doing it :-) Kris ---- XOR for AES -- join the campaign! To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message