Re: [chrony-dev] Traffic amplification with chrony commands

[ Thread Index | Date Index | More chrony.tuxfamily.org/chrony-dev Archives ]


On Tue, Jan 21, 2014 at 10:17:26AM -0800, Bill Unruh wrote:
> Then your solution seems the only one, but a) it should be compatible with
> current chronyds, and new chronyd should demand that the command actually have
> the longer length. But that would mean we break compatibility with all older
> versions. Do we issue a security fix for older versions?

We can make a 1.29.1 release. For 1.27 and 1.28 backporting shouldn't
be very difficult if some package maintainers are interested in that.

-- 
Miroslav Lichvar

-- 
To unsubscribe email chrony-dev-request@xxxxxxxxxxxxxxxxxxxx with "unsubscribe" in the subject.
For help email chrony-dev-request@xxxxxxxxxxxxxxxxxxxx with "help" in the subject.
Trouble?  Email listmaster@xxxxxxxxxxxxxxxxxxxx.


Mail converted by MHonArc 2.6.19+ http://listengine.tuxfamily.org/