Software Downloads

Current versions of NTP

Information and other download links

Stable Release NEWS

Focus: Security and Bug Fixes

Severity: HIGH

This release fixes the following high-severity vulnerability:

• [Sec 1151] Remote exploit if autokey is enabled. CVE-2009-1252

See http://support.ntp.org/security for more information.

If autokey is enabled (if ntp.conf contains a "crypto pw whatever" line) then a carefully crafted packet sent to the machine will cause a buffer overflow and possible execution of injected code, running with the privileges of the ntpd process (often root).

Credit for finding this vulnerability goes to Chris Ries of CMU.

• [Sec 1144] limited (two byte) buffer overflow in ntpq. CVE-2009-0159 Credit for finding this vulnerability goes to Geoff Keating of Apple.

• [Sec 1149] use SO_EXCLUSIVEADDRUSE on Windows Credit for finding this issue goes to Dave Hart.

This release fixes a number of bugs and adds some improvements:

• Improved logging
• Fix many compiler warnings
• Many fixes and improvements for Windows
• Adds support for AIX 6.1
• Resolves some issues under MacOS X and Solaris

This is a strongly recommended upgrade.

Complete NEWS file
Complete Change Log

About the NTP Source Releases and Patches

The NTP (R&D) Project only produces source code releases of NTP; users needing precompiled versions of NTP should see the links page. These releases may be installed using the standard Unix "make" command in conjunction with a compiler and all necessary libraries.

Please contact your operating system vendor for binary packages or assistance with your package-management system.

The NTP version numbering page explains the version numbering scheme.

NTP Archives from the NTP (R&D) Project at www.ntp.org

Tarballs (for both the release and development versions) and patch files are available from the:

• NTP (R&D) Project HTTP archive.
• NTP (R&D) Project FTP archive

Obsolete versions of NTP are available from the:

• NTP (R&D) Project Deprecated HTTP archive.
• NTP (R&D) Project Deprecated FTP archive

Access to the FTP archive is restricted; incoming connections from certain IP addresses are blocked by the organization hosting the NTP (R&D) Project archives. Please try the HTTP archive if you are unable to access the FTP archive.

Precompiled packages and ports to other operating systems

Third-party implementations, including pre-compiled versions for operating systems such as Microsoft Windows, and some ports of the NTP package are linked to on the links page.

Receiving Notifications about new releases

Please visit ReleaseNotifications for more information about the many options available for receiving notifications about new NTP releases.