[scponly] Please: is actual download version of scponly without opatches posted here secure or not?

[Thomas Wana]

Peter Holm wrote:
> Is the actual download version of scponly that can be found here
> 
> http://sublimation.org/scponly/scponly-4.0.tgz
> 
> secure or not? There was a mail on a chroot issue on this list with a
> patch applied, is this neccassary to have scponly running with chroot
> in a safe way? 

Unfortunately yes. Joe Boyle (the scponly author) promised to include
the patch into 4.1, but it has not yet been released.

The Debian package however (version 4.0-1) includes the chroot patch.

Tom