[ntp:security] Next Update for NTP 4.2.8?

Steve Sullivan stevos at nwtime.org
Fri Aug 10 19:45:21 UTC 2018

Hi Jeff,


We recently discovered that we had a backlog of queued mail.  We believe
that we now have that backlog cleared.

If you are still experiencing these problems, please feel free to contact us
again at webmaster at ntp.org and we will try to get your issue resolved as
quickly as we can.

We apologize for the inconvenience, and thank you for your understanding! 


Also, I want to let you know there will be a public release next week for
NTP 4.2.8p12. When security patches are ready, they are first given to
Premier and Partner Institutional members of the NTP Consortium at Network
Time Foundation, then access instructions are provided to CERT, and finally
the public release is made on the embargo date. The Advance Security Release
for qualifying members was actually made available on August 9, 2018. 


I think you and OSI would benefit from an NTF Institutional NTP Consortia
Membership. Consortium memberships are our primary source of revenue, and
being that we are a qualified 501c3 nonprofit, memberships are counted as a
donation and are tax-deductible. Can you put me in contact with right folks
at OSI to discuss our NTP and possibly PTP consortia?




Steve Sullivan | Client Support & Development

ph.  <mailto:949-423-6901> 949-423-6901 | e.  <mailto:stevos at nwtime.org>
stevos at nwtime.org

Network Time Foundation - Home of the NTP Project

Fiscal Sponsor of the Reference Implementation of NTP





From: security [mailto:security-bounces+stevos=nwtime.org at lists.ntp.org] On
Behalf Of Brown, Jeff
Sent: Wednesday, February 14, 2018 11:45 AM
To: security at ntp.org
Cc: OSI Security Team
Subject: Re: [ntp:security] Next Update for NTP 4.2.8?


NTP Security Group,


Any updates?


Any information you can provide would be helpful.





From: Brown, Jeff 
Sent: Friday, February 09, 2018 9:03 AM
To: 'security at ntp.org' <security at ntp.org>
Cc: OSI Security Team <Security_Team at osii.com>
Subject: Next Update for NTP 4.2.8?


NTP Security Group,


Is another update for NTP in the works?  Can you provide a general timeframe
for when it may be released to the public?


NTP 4.2.8p10 has been out since March 2017.  The package includes, among
other things, an SSL upgrade to v1.0.2k.  OpenSSL has since moved on to
1.0.2n, which includes a number of additional security fixes.


Are there plans at this time to update the NTP package to include this
updated version of SSL and other security updates?






cid:image427de9.GIF at 7ec5e420.40863ac0


   Jeff Brown, CCNA
    Patch Management Specialist

    4101 Arrowhead Drive
    Medina, Minnesota 55340-9457
    Phone: 763 551 0559
    Fax: 763 551 0750
    E-mail: jbrown at osii.com
    Website:  <http://www.osii.com/> www.osii.com


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ntp.org/private/security/attachments/20180810/c75047a4/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.gif
Type: image/gif
Size: 3181 bytes
Desc: not available
URL: <http://lists.ntp.org/private/security/attachments/20180810/c75047a4/attachment.gif>

More information about the security mailing list