NTP users are strongly urged to take immediate action to ensure that their NTP daemons are not susceptible to being used in distributed denial-of-service (DDoS) attacks. Please also take this opportunity to defeat denial-of-service attacks by implementing Ingress and Egress filtering through BCP38.

ntp-4.2.8p15 was released on 23 June 2020. It addresses 1 medium-severity security issue in ntpd, and provides 13 non-security bugfixes over 4.2.8p13.

Please see the NTP Security Notice for vulnerability and mitigation details.

---

Are you using Autokey in production? If so, please contact Harlan - he's got some questions for you.

Snapshot Issues

(HarlanStenn: I think the following is really notes about the download area.)

• We always want (only) the latest -stable (point) release linked in the TLD.
• If -dev is an RC, we want the latest RC (point) release linked in the TLD.

Therefore, we can use a .file and list the latest-* files as dependencies.

We can use a Makefile and a .file that depends on the latest-* files, and if it is out of date, we simply:

• remove all links
• add in the new links

It would be useful to clean out the ntp-dev/ snapshot directory when we have a new release.

Related Topics: DownloadAreaLayout, SnapshotRollProblems