4.2.4p7 Release Announcement

Last update: June 28, 2022 21:06 UTC (1f97faf40)

The NTP Public Services Project is pleased to announce that NTP 4.2.4p7, a Point Release of the NTP Reference Implementation from the NTP Project, is now available.

Security Updates

1144: limited (two byte) buffer overflow in ntpq / CVE-2009-0159 Credit for finding this vulnerability goes to Geoff Keating of Apple.
1149: use SO_EXCLUSIVEADDRUSE on Windows Credit for finding this issue goes to Dave Hart.
1151: Remote exploit if autokey is enabled / CVE-2009-1252

Other Changes

Fix many compiler warnings
Many fixes and improvements for Windows
Adds support for AIX 6.1
Resolves some issues under MacOS X and Solaris
Improved logging