4.2.4p7 Release Announcement

Last update: September 3, 2026 14:42 UTC (1eec487e7)

The NTP Public Services Project is pleased to announce that NTP 4.2.4p7, a Point Release of the NTP Reference Implementation from the NTP Project, is now available.

---

Security Updates

• 1144: limited (two byte) buffer overflow in ntpq / CVE-2009-0159 Credit for finding this vulnerability goes to Geoff Keating of Apple.
• 1149: use SO_EXCLUSIVEADDRUSE on Windows Credit for finding this issue goes to Dave Hart.
• 1151: Remote exploit if autokey is enabled / CVE-2009-1252

---

Other Changes

• Fix many compiler warnings
• Many fixes and improvements for Windows
• Adds support for AIX 6.1
• Resolves some issues under MacOS X and Solaris
• Improved logging