News from 2009-12-09


Software: New NTP Version for Windows (4.2.4p8) - Security Update


Yesterday the NTP Public Services Project announced the availability of a security update for their stable NTP version (4.2.4p7). Based on this new point release Meinberg Radio Clocks updated their NTP Installer for Windows and the new installer will now install NTP 4.2.4p8 and the current version of OpenSSL (0.9.8l) on all Windows NT, Windows 2000, Windows XP, Windows 2003, Windows Vista, Windows 2008 and Windows 7 systems.

Meinberg provides a secure and easy-to-use installer for NTP which allows everybody to install the stable version of the reference implementation of NTP as provided by www.ntp.org in cooperation with the NTP Public Services Project. The installer can be used on all systems running a Microsoft Windows Operating system (starting with Windows NT SP6a).

A simple automatic update mechanism optionally allows to simply replace the binaries of an installed NTP version. This is detected when the installer starts and can be safely selected for 4.2.4p7 installations. Older NTP versions should be removed before the new NTP 4.2.4p8 version is installed. Uninstalling the existing version can be performed by the installer as well and will be offered if the user does not want to use the simple binaries replacement approach.

The original announcement of the new NTP version has been published as follows:

Redwood City, CA - 2009/12/08 - The NTP Public Services Project
(http://support.ntp.org/) is pleased to announce that NTP 4.2.4p8,
a Point Release of the NTP Reference Implementation from the
NTP Project, is now available at http://www.ntp.org/downloads.html and
http://support.ntp.org/download.
File-size: 3389646 bytes
MD5 sum: fe137056e7e611798a46971a783567ce
This release fixes the following high-severity vulnerability:
* [Sec 1331] DoS with mode 7 packets - CVE-2009-3563.
http://bugs.ntp.org/1331
More information about this vulnerability is available at
http://support.ntp.org/security
This is a strongly recommended upgrade.
Please report any bugs, issues, or desired enhancements at
http://bugs.ntp.org/.
The NTP (Network Time Protocol) Public Services Project, which is
hosted by Internet Systems Consortium, Inc. (http://www.isc.org/),
provides support and additional development resources for the
Reference Implementation of NTP produced by the NTP Project
(http://www.ntp.org/).
Please note that the mentioned MD5 checksum as well as the download links in the announcement refer to the source distribution of NTP and do not apply for the ready-to-run prebuilt binary version included in the Meinberg NTP installer. Questions concerning the update or the use of the reference implementation of NTP for time synchronization of Windows machines can be sent to ntp-support@meinberg.de.

The download link for the NTP installer can be found on the Meinberg NTP Download page.


Meinberg Mail Contact Meinberg Mail Contact Meinberg Mail Contact Meinberg Mail Contact Meinberg Mail Contact Meinberg Mail Contact Meinberg Mail Contact Meinberg Mail Contact Meinberg Mail Contact Meinberg Mail Contact Meinberg Mail Contact Meinberg Mail Contact Meinberg Mail Contact Meinberg Mail Contact Meinberg Mail Contact Meinberg Mail Contact Meinberg Mail Contact Meinberg Mail Contact Meinberg Mail Contact Meinberg Mail Contact Meinberg Mail Contact Meinberg Mail Contact Meinberg Mail Contact Meinberg Mail Contact Meinberg Mail Contact Meinberg Mail Contact