This release improves on one security issue in ntpd: LOW/MEDIUM: Sec 3012 / CVE-2016-1549 / CVE-2018-7170 /: Sybil vulnerability: ephemeral association attack While fixed in ntp-4.2.8p7 and with significant additional protections for this issue in 4.2.8p11, ntp-4.2.8p12 includes a fix for an edge case in the new noepeer support. Originally reported by Matt Van Gundy… Read More
Featured Blog
Network Time Foundation Publishes NTP 4.2.8p11
February 2018 ntp-4.2.8p11 NTP Release and Security Vulnerability Announcement The NTP Project at Network Time Foundation publicly released ntp-4.2.8p11 on Tuesday, 27 February 2018. This release addresses five low and medium security issues in ntpd: LOW/MEDIUM: Sec 3012 / CVE-2016-1549 / VU#961909: Sybil vulnerability: ephemeral association attack While fixed in ntp-4.2.8p7, there are significant additional… Read More
Network Time Foundation’s 2017 Accomplishments
NTF’s 2017 Accomplishments First, we want to thank all our generous members and donors. As a nonprofit organization, it is all of you who help Network Time Foundation produce and maintain the most reliable, secure and trusted open source network time software, which is so vital to the infrastructure of our modern world. … Read More
Past, Present, and Future of NTP
The Past, Present, and Future of NTP Operations at AusNOG 2017 Paul Gear, an NTF individual member and volunteer, presented a talk at AusNOG on September 7th in Melbourne, Australia entitled The Past, Present, and Future of NTP Operations. We were ecstatic to have Paul take the time from his day job at Canonical Ltd.… Read More
Donation Matching Lets You Make Double the Difference!
Folks often feel that their donations aren’t enough to make a real difference. Nowadays, however, it is becoming more common for employers to offer donation matching to those employees who contribute to non-profit organizations. While the majority of donation matching programs match contributions dollar for dollar, some will even match twice or three times an… Read More
Time Synchronization You Can Trust
Time is all around us. At any point, you likely have at least one clock within viewing distance. Is anyone caught without their cell phone these days? As I’m writing this, I have the time in the lower right corner of my laptop screen, the display of my smartwatch, my cell phone and an analog… Read More
Support Network Time Foundation
Time is our most valuable asset From personal online banking to business management services we all rely on time daily – even when we don’t realize it. Network Time Foundation produces the highest quality open-source products that ensure free public access to precise measurements and management of time. While Network Time Foundation’s precision time software is open-source… Read More
Outdated Versions of NTP Leaving Users Vulnerable
NTP version 4 was first released in 2003, why haven’t you upgraded? Network Time Protocol version 3 remains a security risk to the Internet and, unfortunately, there is a good chance that many people reading this post are part of the problem. Network Time Foundation released version 4 of the NTP daemon in August of… Read More
NTP – Just Keeps on Ticking
Some rumors have been flying around the Network Time Protocol world regarding the security and validity of the NTP Project’s code, developed and maintained by Network Time Foundation. NTF’s president, Harlan Stenn, sat down with Bruce Byfield to get to the bottom of these rumors. Bruce’s post, A Rift in the NTP World, explains the… Read More
Leap Second handling via Leap Smearing
What is a leap second? Because the earth’s rotation is gradually slowing, approximately every 18 months’ time we need to add an “extra” second to the clock. We must account for this second to keep accurate time. Although one second doesn’t seem like a big deal, over time those seconds would add up. It’s best… Read More
