Greetings again. I'm running a stock 1.5.1 (not using -current). My 
sshd reports itself as:

sshd version OpenSSH_2.5.1 NetBSD_Secure_Shell-20010219

So, here's a bunch of questions.

How do I upgrade it to the latest version that has the security bug 
fixes in it? The current version seems to be 3.0.2, so I don't 
imagine that I can do a simple patch in /usr/src.

If the answer is "use pkgsrc", how do I make sure that I use the 
pkgsrc version instead of the distributed version? My packages build 
into /usr/pkg. Would I change the /etc/rc.d/sshd directly? If so, 
won't that change get wiped out when I upgrade NetBSD?

Also, if I do change /etc/rc.d/sshd, I assume that I have to change 
it in four places (because I want to use the pkgsrc ssh-keygen as 
well). Is that correct?