4.2.4-series Changelog

Last update: September 3, 2026 14:42 UTC (1eec487e7)

• 4.2.4p8
• 4.2.4p7
• 4.2.4p6
• 4.2.4p5
• 4.2.4p4
• 4.2.4p3
• 4.2.4p2
• 4.2.4p1
• 4.2.4p0
• 4.2.4

---

4.2.4p8

Release Date: 2009 Dec 08

• Sec 1331: DoS with mode 7 packets - CVE-2009-3563

---

4.2.4p7

Release Date: 2009 May 18

• Sec 1151: Remote exploit if autokey is enabled - CVE-2009-1252
• Bug 1187: Update the copyright date.
• Bug 1191: ntpd fails on Win2000 - “Address already in use” after fix for Sec 1149

---

4.2.4p7-RC7

Release Date: 2009 May 12

• ntp.isc.org -> ntp.org cleanup.
• Bug 1178: Use prior FORCE_DNSRETRY behavior as needed at runtime, add configure –enable-ignore-dns-errors to be even more stubborn

---

4.2.4p7-RC6

Release Date: 2009 May 08

• Bug 784: Make –enable-linuxcaps the default when available
• Bug 1179: error messages for -u/–user and -i lacking droproot
• Updated JJY reference clock driver from Takao Abe
• Bug 1071: Log a message and exit before trying to use FD_SET with a descriptor larger than FD_SETSIZE, which will corrupt memory
• On corruption of the iface list head in add_interface, log and exit

---

4.2.4p7-RC5

Release Date: 2009 May 02

• Bug 1172: 4.2.4p7-RC{3,4} fail to build on linux.
• flock-build script unportable set -m use removed

---

4.2.4p7-RC4

Release Date: 2009 Apr 29

• Bug 1167: use gcc -Winit-self only if it is understood

---

4.2.4p7-RC3

Release Date: 2009 Apr 22

• Bug 787: Bug fixes for 64-bit time_t on Windows
• Bug 813: Conditional naming of Event
• Bug 1147: System errors should be logged to msyslog()
• Bug 1155: Fix compile problem on Windows with VS2005
• Bug 1156: lock_thread_to_processor() should be declared in header
• Bug 1157: quiet OpenSSL warnings, clean up configure.ac
• Bug 1158: support for aix6.1
• Bug 1160: MacOS X is like BSD regarding F_SETOWN

---

4.2.4p7-RC2

Release Date: 2009 Apr 09

• Sec 1144: limited buffer overflow in ntpq. CVE-2009-0159
• Sec 1149: use SO_EXCLUSIVEADDRUSE on Windows

---

4.2.4p7-RC1

Release Date: 2009 Mar 30

• Bug 1131: UDP sockets should not use SIGPOLL on Solaris.
• build system email address cleanup
• Bug 774: parsesolaris.c does not compile under the new Solaris
• Bug 873: Windows serial refclock proper TTY line discipline emulation
• Bug 1014: Enable building with VC9 (in Visual Studio 2008, Visual C++ 2008, or SDK)
• Bug 1117: Deferred interface binding under Windows works only correctly if FORCE_DNSRETRY is defined
• BUG 1124: Lock QueryPerformanceCounter() client threads to same CPU
• DPRINTF macro made safer, always evaluates to a statement and will not misassociate an else which follows the macro.

---

4.2.4p6

Release Date: 2009 Jan 08

• Sec 1111: Fix incorrect check of EVP_VerifyFinal()’s return value.
• Bug 1113: Fixed build errors with recent versions of openSSL.
• Update the copyright year.

---

4.2.4p5

Release Date: 2008 Aug 17

• BUG 1051: Month off by one in leap second message written to clockstats file fixed.
• Bug 1038: Built-in getpass() function also prompts for password if not built with DEBUG.
• Bug 1000: allow implicit receive buffer allocation for Windows. fixes startup for windows systems with many interfaces. reduces dropped packets on network bursts. additionally fix timer() starvation during high load.
• Bug 997: ntpdate buffer too small and unsafe.
• Bug 993: Fix memory leak when fetching system messages.
• Bug 990: drop minimum time restriction for interface update interval.
• Bug 987: Wake up the resolver thread/process when a new interface has become available.
• Bug 982: ntpdate(and ntptimeset) buffer overrun if HAVE_POLL_H isn’t set (dup of 908).
• Bug 979: Provide ntptimeval if it is not otherwise present.
• Bug 977: Fix mismatching #ifdefs for builds without IPv6.
• Bug 970: Lose obsolete -g flag to ntp-keygen.
• Bug 967: preemptable associations are lost forever on a step.
• Bug 964: Change --linux* to *-*-*linux* to allow for uclinux.
• Bug 963: get_systime() is too noisy.
• Bug 961: refclock_tpro.c:tpro_poll() calls refclock_receive() twice.
• Bug 960: spurious syslog:crypto_setup:spurious crypto command
• Bug 959: Refclock on Windows not properly releasing recvbuffs.
• Bug 957: Windows only: Let command line parameters from the Windows SCM GUI override the standard parameters from the ImagePath registry key.
• Bug 952: Use md5 code with a friendlier license.
• Bug 940: ntp-keygen uses -v. Disallow it as a shortcut for –version.
• Bug 931: Require -lreadline to be asked for explicitly.
• Bug 929: int32_t is undefined on Windows. Casting wrong.
• Bug 928: readlink missing braces.
• Bug 918: Only use a native md5.h if MD5Init() is available.
• Bug 917: config parse leaves files open
• Bug 916: ‘cryptosw’ is undefined if built without OpenSSL.
• Bug 915: ntpd cores during processing of x509 certificates.
• Bug 912: detect conflicting enable/disable configuration on interfaces sharing an IP address
• Bug 911: Fix error message in cmd_args.c.
• Bug 909: Fix int32_t errors for ntohl().
• Bug 908: ntpdate crashes sometimes.
• Bug 905: ntp_crypto.c fails to compile without -DDEBUG.
• Bug 899: Only show -i/–jaildir -u/–user options if we HAVE_DROPROOT.
• Bug 897: Check RAND_status() - we may not need a .rnd file.
• Bug 895: Log assertion failures via syslog(), not stderr.*
• Bug 894: Initialize keysdir before calling crypto_setup().
• Bug 891: ‘restrict’ config file keyword does not work (partial fix).
• Bug 890: the crypto command seems to be required now.
• Bug 887: Fix error in ntp_types.h (for sizeof int != 4).
• Bug 880: bug fixes for Windows build
• Bug 864: Place ntpd service in maintenance mode if using SMF on Solaris
• Bug 862: includefile nesting; preserve phonelist on reconfig.
• Bug 861: Leap second cleanups from Dave Mills.](https://bugs.ntp.org/show_bug.cgi?id=861)
• Bug 858: recent leapfile changes broke non-OpenSSL builds.
• Bug 857: ntpdate debug mode adjusts system clock when it shouldn’t.
• Bug 853: get_node() must return a pointer to maximally-aligned memory.
• Bug 850: Fix the wander threshold parameter on the driftfile command.
• Bug 846: Correct includefile parsing.
• Bug 843: Windows Completion port code was incorrectly merged from -stable.
• Bug 841: Obsolete the “dynamic” keyword and make deferred binding to local interfaces the default.
  • Emit a warning if that keyword is used for configuration.
• Bug 840: do fudge configuration AFTER peers (thus refclocks) have been configured.
• Bug 839: Crypto password not read from ntp.conf.
• Bug 833: ntpq config keyword is quote-mark unfriendly.
• Bug 832: Add libisc/log.c headers to the distribution.
• Bug 830: Fix the checking order of the interface options.
• Bug 828: refid string not being parsed correctly.
• Bug 827: New parsing code does not handle “fudge” correctly.
• Bug 826: Fix redefinition of PI.
• Bug 825: Correct logconfig -/+ keyword processing.
• Bug 824: New parser code has some build problems with the SIM code.
• Bug 822: set progname once, early.
• Bug 819: remove erroneous #if 0 in Windows completion port code.
• Bug 817: Use longnames for setting ntp variables on the command-line; Allowing ‘-v’ with and without an arg to disambiguate usage is error-prone.
• Bug 815: Fix warning compiling 4.2.5p22 under Windows with VC6.
• Bug 812: ntpd should drop supplementary groups.
• Bug 810: Fix ntp-keygen documentation.
• Bug 808: Only write the drift file if we are in state 4.
• Bug 798: ntpq [p typo crashes ntpq/ntpdc.
• Bug 796: Clean up duplicate #defines in ntp_control.c.
• Bug 795: Moved declaration of variable to top of function.
• Bug 788: Update macros to support VS 2005.
• Bug 787: Bug fixes for 64-bit time_t on Windows.
• Bug 786: Fix refclock_bancomm.c on Solaris.
• Bug 782: Remove P() macros from Windows files.
• Bug 778: ntpd fails to lock with drift=+500 when started with drift=-500.
• Bug 774: parsesolaris.c does not compile under the new Solaris.
• Bug 771: compare scopeid if available for IPv6 addresses
• Bug 767: Fast sync to refclocks wanted.
• Bug 764: When looking for -lreadline support, also try using -lncurses.
• Bug 757 Lose ULONG_CONST().
• Bug 756: Require ANSI C (function prototypes).
• Bug 752: QoS: add parse/config handling code.
• Bug 740: Fix kernel/daemon startup drift anomaly.
• Bug 713: Fix bug reporting information.
• Bug 698: timeBeginPeriod is called without timeEndPeriod in some NTP tools.
• Bug 634: Re-instantiate syslog() and logfiles after the daemon fork.
• Bug 629: Undo bug #629 fixes as they cause more problems than were being solved
• Bug 604: ntpd regularly dies on linux/alpha.
• Bug 592: Trimble Thunderbolt GPS support.
• Bug 569: Use the correct precision for the Leitch CSD-5300.
• Bug 542: Tolerate missing directory separator at EO statsdir.
• Bug 532: nptdate timeout is too long if several servers are supplied.
• Bug 450: Windows only: Under original Windows NT we must not discard the wildcard socket to workaround a bug in NT’s getsockname().
• Bug 376/214: Enhancements to support multiple if names and IP addresses.
• much cleanup, fixes, and changes from Dave Mills.
• ntp_control.c: LEAPTAB is a filestamp, not an unsigned. From Dave Mills.
• ntp_config.c: ntp_minpoll fixes from Dave Mills.
• ntp-keygen updates from Dave Mills.
• refresh epoch, throttle, and leap cleanup from Dave Mills.
• Documentation cleanup from Dave Mills.
• Clean up the logfile/syslog setup.
• The -e flag to ntp-keygen can write GQ keys now, too.
• ntp_proto.c: sys_survivors and hpoll cleanup from Dave Mills.
• ntp_loopfilter.c: sys_poll cleanup from Dave Mills.
• refclock_wwv.c: maximum-likelihood digit and DSYNC fixes from Dave Mills.
• ntp_config.c: [CID 48] missing else clause.
• Rename the ntpq config keyword to :config.
• Dave Mills shifted some orphan processing.
• Fix typos in the Bug 963 patch.
• bootstrap: squawk if genver fails. Use -f with cp in case Dave does a chown.
• Remove obsolete simulator command-line options.
• ntp_request.c: [CID 36] zero sin_zero.
• Changes from Dave Mills:
  • ntp_util.c: cleanup.
  • ntp_timer.c: watch the non-burst packet rate.
  • ntp_request.c: cleanup.
  • ntp_restrict.c: RES_LIMITED cleanup.
  • ntp_proto.c: RES_LIMITED, rate buckets, counters, overall cleanup.
  • ntp_peer.c: disallow peer_unconfig().
  • ntp_monitor.c: RES_LIMITED cleanup.
  • ntp_loopfilter.c: poll interval cleanup.
  • ntp_crypto.c: volley -> retry. Cleanup TAI leap message.
  • ntp_config: average and minimum are ^{^}2 values.
  • ntpdc: unknownversion is really “declined”, not “bad version”.
  • Packet retry cleanup.
• Added HAVE_INT32_T to the Windows config.h to avoid duplicate definitions.
• ntpd/ntp_timer.c: add missing sys_tai parameter for debug printf
• Work around a VPATH difference in FreeBSD’s make command.
• Update bugreport URL.
• Update -I documentation.
• A bug in the application of the negative-sawtooth for 12 channel receivers.
• The removal of unneeded startup code used for the original LinuxPPS, it now conforms to the PPSAPI and does not need special code.
• ntp-keygen.c: Coverity fixes [CID 33,47].
• Volley cleanup from Dave Mills.
• Fuzz cleanup from Dave Mills.
• ntpsim.c: add missing protypes and fix [CID 34], a nit.
• Upgraded bison at UDel.
• Update br-flock and flock-build machine lists.
• Fix the #include order in tickadj.c for picky machines.
• Orphan mode and other protocol cleanup from Dave Mills.
• more cleanup to ntp_lineeditlibs.m4.
• Documentation updates from Dave Mills.
• -ledit cleanup for ntpdc and ntpq.
• Association and other cleanup from Dave Mills.
• NTP_UNREACH changes from Dave Mills.
• Fix the readline history test.
• Lose obsolete crypto subcommands (Dave Mills).
• WWV is an HF source, not an LF source (Dave Mills).
• Crypto lint cleanup from Dave Mills.
• Crypto cleanup from Dave Mills.
• Avoid double peer stats logging.
• ntp-keygen cleanup from Dave Mills.
• libopts needs to be built after ElectricFence.
• Calysto cleanup for ntpq.
• ntp-keygen -i takes an arg.
• Cleanup and fixes from Dave Mills.
• Improve Calysto support.
• The revoke parameter is a crypto command.
• The driftfile wander threshold is a real number.
• ntp_io.c: Dead code cleanup - Coverity View 19.
• Leap file related cleanup from Dave Mills.
• ntp_peer.c: Set peer->srcadr before (not after) calling set_peerdstadr().
• Initialize offset in leap_file() - Coverity View 17.
• Use the correct stratum on KISS codes.
• Fuzz bits cleanup.
• Show more digits in some debug printf’s.
• Use drift_file_sw internally to control writing the drift file.
• Implement the wander_threshold option for the driftfile config keyword.
• reformat ntp_control.c; do not use c++ // comments.
• Changes from Dave Mills: in/out-bound data rates, leapsecond cleanup, driftfile write cleanup, packet buffer length checks, documentation updates.
• More assertion checks and malloc()->emalloc(), courtesy of Calysto.
• more leap second infrastructure fixes from Dave Mills.
• Use emalloc() instead of malloc() in refclock_datum.c (Calysto).
• Start using ‘design by contract’ assertions.
• Allow null driftfile.
• Use YYERROR_VERBOSE for the new parser, and fix related BUILT_SOURCES.
• Initial leap file fixes from Dave Mills.
• Use a char for DIR_SEP, not a string.
• driftfile maintenance changes from Dave Mills. Use clock_phi instead of stats_write_tolerance.
• Enable debugging capability in the config parser.
• Have autogen produce writable output files.
• Cleanup FILE * usage after fclose() in ntp_filegen.c.
• Initial import of libisc/log.c and friends.
• The new config code missed an #ifdef for building without refclocks.
• Distribute some files needed by the new config parsing code.
• Use autogen 5.9.1.
• Fix clktest command-line arg processing.
• Audio documentation updates from Dave Mills.
• New config file parsing code, from Sachin Kamboj.
• fuzz bit cleanup from Dave Mills.
• replay cleanup from Dave Mills.
• refclock_wwv.c fixes from Dave Mills.
• IRIG, CHU, WWV, WWVB refclock improvements from Dave Mills.
• codec (audio) and ICOM changes from Dave Mills.
• Correctly apply negative-sawtooth for oncore 12 channel receiver.
• Startup code for original LinuxPPS removed. LinuxPPS now conforms to the PPSAPI.
• Update the copyright year.
• Build system cleanup (make autogen-generated files writable).
• ntpdate.c: Under Windows check whether NTP port in use under same conditions as under other OSs.
• ntpdate.c: Fixed some typos and indents (tabs/spaces).

---

4.2.4p4

Release Date: 2007 Aug 28

• Bug 902: Fix problems with the -6 flag.
• Bug 889: avoid malloc() interrupted by SIGIO risk
• Bug 886: Corrected sign handling on 64bit in ntpdc loopinfo command.
• Bug 885: use emalloc() to get a message at the end of the memory unsigned types cannot be less than 0
  • default_ai_family is a short
  • lose trailing , from enum list
  • clarify ntp_restrict.c for easier automated analysis
• Bug 884: don’t access recv buffers after having them passed to the free list.
• Bug 882: allow loopback interfaces to share addresses with other interfaces.
• Bug 881: Corrected display of pll offset on 64bit systems.
• Bug 878: Avoid ntpdc use of refid value as unterminated string.
• ntpd/refclock_parse.c: cleanup shutdown while the file descriptor is still open.
• Updated include/copyright.def (owner and year).

---

4.2.4p3

Release Date: 2007 Jun 29

• Bug 863: unable to stop ntpd on Windows as the handle reference for events changed

---

4.2.4p2

Release Date: 2007 Jun 20

• Bug 885: use emalloc() to get a message at the end of the memory
  • unsigned types cannot be less than 0
  • default_ai_family is a short
  • lose trailing , from enum list
• Bug 884: don’t access recv buffers after having them passed to the free list.
• Bug 882: allow loopback interfaces to share addresses with other interfaces.
• Bug 854: Broadcast address was not correctly set for interface addresses
• Bug 829: reduce syslog noise, while there fix Enabled/Disable logging to reflect the actual configuration.
• Bug 811: ntpd should not read a .ntprc file.
• Bug 795: Moved declaration of variable to top of function.
• Bug 789: Fix multicast client crypto authentication and make sure arriving multicast packets do not disturb the autokey dance.
• Bug 785: improve handling of multicast interfaces (multicast routers still need to run a multicast routing software/daemon)
• Bug 527: Don’t write from source address length to wrong location
• ntpd/refclock_parse.c: cleanup shutdown while the file descriptor is still open.
• Upgraded autogen and libopts.

---

4.2.4p1

Release Date: (skipped)

---

4.2.4p0

Release Date: 2007 Mar 7

• Bug 793: Update Hans Lambermont’s email address in ntpsweep.
• Bug 776: Remove unimplemented “rate” flag from ntpdate.
• Bug 770: Fix numeric parameters to ntp-keygen (Alain Guibert).
• Bug 768: Fix io_setbclient() error message.
• Bug 765: Use net_bind_service capability on linux.
• Bug 760: The background resolver must be aware of the ‘dynamic’ keyword.
• Bug 753: make union timestamp anonymous (Philip Prindeville).
• Bug 586: Avoid lookups if AI_NUMERICHOST is set.
• confopt.html: move description for dynamic keyword into the right section.
• pick the right type for the recv*() length argument.

---

4.2.4

Release Date: 2006 Dec 18

• Bug 747: Drop tags from ntpdc.html.
• Bug 746: Expert mouseCLOCK USB v2.0 support added.
• Bug 741: “burst” doesn’t work with !unfit peers.
• Bug 739: ntpd -x should not take an argument.
• Bug 737: Some systems need help providing struct iovec.
• Bug 735: Fix a make/gmake VPATH issue on Solaris.
• Bug 734: setsockopt(…, IP_MULTICAST_IF, …) fails on 64-bit platforms.
• Bug 732: C-DEX JST2000 patch from Hideo Kuramatsu.
• Bug 728: parse documentation fixes.
• Bug 721: check for __ss_family and __ss_len separately.
• Bug 718: Use the recommended type for the saddrlen arg to getsockname().
• Bug 717: Fix libopts compile problem.
• Bug 715: Fix a multicast issue under Linux.
• Bug 714: ntpq -p should conflict with -i, not -c.
• Bug 708: Use thread affinity only for the clock interpolation thread.
• Bug 706: ntpd can be running several times in parallel.
• Bug 704: Documentation typos.
• Bug 701: coverity: NULL dereference in ntp_peer.c
• Bug 695: libopts does not protect against macro collisions.
• Bug 693: _adjtimex is independent of ntp{adj,get}time.
• Bug 692: sys_limitrejected was not being incremented.
• Bug 691: restrictions() assumption not always valid.
• Bug 690: Fix a Windows DNS lookup buffer overflow.
• Bug 689: Deprecate HEATH GC-1001 II; the driver never worked.
• Bug 688: Fix documentation typos.
• Bug 686: Handle leap seconds better under Windows.
• Bug 685: Use the Windows multimedia timer.
• Bug 684: Only allow debug options if debugging is enabled.
• Bug 683: Use the right version string.
• Bug 680: Fix the generated version string on Windows.
• Bug 678: Use the correct size for control messages.
• Bug 677: Do not check uint_t in configure.ac.
• Bug 676: Use the right value for msg_namelen.
• Bug 675: Make sure ntpd builds without debugging.
• Bug 672: Fix cross-platform structure padding/size differences.
• Bug 670: Resolved a Windows issue with the dynamic interface rescan code.
• Bug 666: ntpq opeers displays jitter rather than dispersion.
• Bug 660: New TIMESTAMP code fails tp build on Solaris Express.
• Bug 659: libopts does not build under Windows.
• Bug 658: HP-UX with cc needs -Wp,-H8166 in CFLAGS.
• Bug 656: ntpdate doesn’t work with multicast address.
• Bug 638: STREAMS_TLI is deprecated - remove it.
• Bug 637, 51?: Dynamic interface scanning can now be done.
• Bug 635: Fix tOptions definition.
• Bug 628: Fallback to ntp discipline not working for large offsets.
• Bug 622: Dynamic interface tracking for ntpd.
• Bug 603: Don’t link with libelf if it’s not needed.
• Bug 523: ntpd service under Windows does’t shut down properly.
• Bug 500: sntp should always be built.
• Bug 479: Fix the -P option.
• Bug 452: Do not report kernel PLL/FLL flips.
• Bug 421: Support the bc637PCI-U card.
• Bug 342: Deprecate broken TRAK refclock driver.
• Bug 340: Deprecate broken MSF EES refclock driver.
• Bug 153: Don’t do DNS lookups on address masks.
• Bug 143: Fix interrupted system call on HP-UX.
• Bug 42: Distribution tarballs should be signed.
• monopt.html fixes from Dave Mills.
• driver8.html updates.
• sntp now uses the returned precision to control decimal places.
• sntp -u will use an unprivileged port for its queries.
• K&R C support is being deprecated.
• WWV refclock improvements from Dave Mills.
• Support separate PPS devices for PARSE refclocks.
• Options processing now uses GNU AutoGen.