From owner-freebsd-security  Wed Apr  4 17:30:36 2001
Delivered-To: freebsd-security@freebsd.org
Received: from lariat.org (lariat.org [12.23.109.2])
	by hub.freebsd.org (Postfix) with ESMTP id 256F337B446
	for <freebsd-security@FreeBSD.ORG>; Wed,  4 Apr 2001 17:30:34 -0700 (PDT)
	(envelope-from brett@lariat.org)
Received: from mustang.lariat.org (IDENT:ppp0.lariat.org@lariat.org [12.23.109.2])
	by lariat.org (8.9.3/8.9.3) with ESMTP id SAA10599;
	Wed, 4 Apr 2001 18:30:10 -0600 (MDT)
Message-Id: <4.3.2.7.2.20010404181852.04445ed0@localhost>
X-Sender: brett@localhost
X-Mailer: QUALCOMM Windows Eudora Version 4.3.2
Date: Wed, 04 Apr 2001 18:30:07 -0600
To: Poul-Henning Kamp <phk@critter.freebsd.dk>
From: Brett Glass <brett@lariat.org>
Subject: Re: Fwd: ntpd =< 4.0.99k remote buffer overflow 
Cc: Michael Bryan <fbsd-secure@ursine.com>,
	freebsd-security@FreeBSD.ORG
In-Reply-To: <52942.986429811@critter>
References: <Your message of "Wed, 04 Apr 2001 18:14:37 MDT." <4.3.2.7.2.20010404181106.044485d0@localhost>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

At 06:16 PM 4/4/2001, Poul-Henning Kamp wrote:

>And it has a lot worse performance, but let's not get into that...

You're right, actually; it has worse performance if you're updating 
your clocks frequently. If you're checking once a day (we just do it
as routine maintenance along with the nightly automated backup),
it's probably more efficient.

The point is that it's something you can put in right away until
you patch or upgrade to 4.3-RELEASE.

--Brett




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message