Baslinux mailing list

[baslinux AT lists.ibiblio.org]

Hello fellow Basic-linux users,

Is there somewhere a secure and small sshd pkg for Basic-linux available? Recently I downloaded and installed the pkg from John Beck - i.e. http://johnbeck.org/bl3/ - but this version was Openssh 3.5p1. Same day I got already a hacker on my cute little system. After some googling I found out that this version has a severe flaw being susceptible for bufferoverflow. Many exploits are available on the internet to exploit that fact. After that I've tried to compile a more secure Openssh-3.8p1 version, but the dependencies are to big. After downloading and installing gcc, configurering (i.e ./configure) v3.8 asked for zlib. After compiling and installing that library, v3.8 asked for libcrypto. So, I downloaded Openssl and tried to configure and install that app, containimg libcrypto. But then the configuration of Openssl asked then for Perl 5 and that app asked again for Ansi C, etc. and so on. Suddenly my little system grew very big. So I did quite with the whole exercise. 

Any help will be appreciated,

tia

Willem