1--- 2(4.2.4p8) 2009/12/08 Released by Harlan Stenn <stenn@ntp.org> 3 4* [Sec 1331] DoS with mode 7 packets - CVE-2009-3563. 5 6--- 7(4.2.4p7) 2009/05/18 Released by Harlan Stenn <stenn@ntp.org> 8 9* [Sec 1151] Remote exploit if autokey is enabled - CVE-2009-1252. 10* [Bug 1187] Update the copyright date. 11* [Bug 1191] ntpd fails on Win2000 - "Address already in use" after fix 12 for [Sec 1149]. 13 14--- 15(4.2.4p7-RC7) 2009/05/12 Released by Harlan Stenn <stenn@ntp.org> 16 17* ntp.isc.org -> ntp.org cleanup. 18* [Bug 1178] Use prior FORCE_DNSRETRY behavior as needed at runtime, 19 add configure --enable-ignore-dns-errors to be even more stubborn 20 21--- 22(4.2.4p7-RC6) 2009/05/08 Released by Harlan Stenn <stenn@ntp.org> 23 24* [Bug 784] Make --enable-linuxcaps the default when available 25* [Bug 1179] error messages for -u/--user and -i lacking droproot 26* Updated JJY reference clock driver from Takao Abe 27* [Bug 1071] Log a message and exit before trying to use FD_SET with a 28 descriptor larger than FD_SETSIZE, which will corrupt memory 29* On corruption of the iface list head in add_interface, log and exit 30 31--- 32(4.2.4p7-RC5) 2009/05/02 Released by Harlan Stenn <stenn@ntp.org> 33 34* [Bug 1172] 4.2.4p7-RC{3,4} fail to build on linux. 35* flock-build script unportable 'set -m' use removed 36 37--- 38(4.2.4p7-RC4) 2009/04/29 Released by Harlan Stenn <stenn@ntp.org> 39 40* [Bug 1167] use gcc -Winit-self only if it is understood 41 42--- 43(4.2.4p7-RC3) 2009/04/22 Released by Harlan Stenn <stenn@ntp.org> 44 45* [Bug 787] Bug fixes for 64-bit time_t on Windows 46* [Bug 813] Conditional naming of Event 47* [Bug 1147] System errors should be logged to msyslog() 48* [Bug 1155] Fix compile problem on Windows with VS2005 49* [Bug 1156] lock_thread_to_processor() should be declared in header 50* [Bug 1157] quiet OpenSSL warnings, clean up configure.ac 51* [Bug 1158] support for aix6.1 52* [Bug 1160] MacOS X is like BSD regarding F_SETOWN 53 54--- 55(4.2.4p7-RC2) 2009/04/09 Released by Harlan Stenn <stenn@ntp.org> 56 57* [Sec 1144] limited buffer overflow in ntpq. CVE-2009-0159 58* [Sec 1149] use SO_EXCLUSIVEADDRUSE on Windows 59 60--- 61(4.2.4p7-RC1) 2009/03/30 Released by Harlan Stenn <stenn@ntp.org> 62 63* [Bug 1131] UDP sockets should not use SIGPOLL on Solaris. 64* build system email address cleanup 65* [Bug 774] parsesolaris.c does not compile under the new Solaris 66* [Bug 873] Windows serial refclock proper TTY line discipline emulation 67* [Bug 1014] Enable building with VC9 (in Visual Studio 2008, 68 Visual C++ 2008, or SDK) 69* [Bug 1117] Deferred interface binding under Windows works only correctly 70 if FORCE_DNSRETRY is defined 71* [BUG 1124] Lock QueryPerformanceCounter() client threads to same CPU 72* DPRINTF macro made safer, always evaluates to a statement and will not 73 misassociate an else which follows the macro. 74 75--- 76(4.2.4p6) 2009/01/08 Released by Harlan Stenn <stenn@ntp.org> 77 78* [Bug 1113] Fixed build errors with recent versions of openSSL. 79* [Sec 1111] Fix incorrect check of EVP_VerifyFinal()'s return value. 80* Update the copyright year. 81 82--- 83(4.2.4p5) 2008/08/17 Released by Harlan Stenn <stenn@ntp.org> 84 85* [BUG 1051] Month off by one in leap second message written to clockstats 86 file fixed. 87* [Bug 450] Windows only: Under original Windows NT we must not discard the 88 wildcard socket to workaround a bug in NT's getsockname(). 89* [Bug 1038] Built-in getpass() function also prompts for password if 90 not built with DEBUG. 91* [Bug 841] Obsolete the "dynamic" keyword and make deferred binding 92 to local interfaces the default. 93 Emit a warning if that keyword is used for configuration. 94* [Bug 959] Refclock on Windows not properly releasing recvbuffs. 95* [Bug 993] Fix memory leak when fetching system messages. 96* [Bug 987] Wake up the resolver thread/process when a new interface has 97 become available. 98* Correctly apply negative-sawtooth for oncore 12 channel receiver. 99* Startup code for original LinuxPPS removed. LinuxPPS now conforms to 100 the PPSAPI. 101* [Bug 1000] allow implicit receive buffer allocation for Windows. 102 fixes startup for windows systems with many interfaces. 103 reduces dropped packets on network bursts. 104 additionally fix timer() starvation during high load. 105* [Bug 990] drop minimum time restriction for interface update interval. 106* [Bug 977] Fix mismatching #ifdefs for builds without IPv6. 107* Update the copyright year. 108* Build system cleanup (make autogen-generated files writable). 109* [Bug 957] Windows only: Let command line parameters from the Windows SCM GUI 110 override the standard parameters from the ImagePath registry key. 111* Fixes for ntpdate: 112* [Bug 532] nptdate timeout is too long if several servers are supplied. 113* [Bug 698] timeBeginPeriod is called without timeEndPeriod in some NTP tools. 114* [Bug 857] ntpdate debug mode adjusts system clock when it shouldn't. 115* [Bug 908] ntpdate crashes sometimes. 116* [Bug 982] ntpdate(and ntptimeset) buffer overrun if HAVE_POLL_H isn't set 117 (dup of 908). 118* [Bug 997] ntpdate buffer too small and unsafe. 119* ntpdate.c: Under Windows check whether NTP port in use under same conditions 120 as under other OSs. 121* ntpdate.c: Fixed some typos and indents (tabs/spaces). 122 123--- 124(4.2.4p4) Released by Harlan Stenn <stenn@ntp.org> 125 126* [Bug 902] Fix problems with the -6 flag. 127* Updated include/copyright.def (owner and year). 128* [Bug 878] Avoid ntpdc use of refid value as unterminated string. 129* [Bug 881] Corrected display of pll offset on 64bit systems. 130* [Bug 886] Corrected sign handling on 64bit in ntpdc loopinfo command. 131* [Bug 889] avoid malloc() interrupted by SIGIO risk 132* ntpd/refclock_parse.c: cleanup shutdown while the file descriptor is still open. 133* [Bug 885] use emalloc() to get a message at the end of the memory 134 unsigned types cannot be less than 0 135 default_ai_family is a short 136 lose trailing , from enum list 137 clarify ntp_restrict.c for easier automated analysis 138* [Bug 884] don't access recv buffers after having them passed to the free list. 139* [Bug 882] allow loopback interfaces to share addresses with other interfaces. 140 141--- 142(4.2.4p3) Released by Harlan Stenn <stenn@ntp.org> 143 144* [Bug 863] unable to stop ntpd on Windows as the handle reference for events 145 changed 146 147--- 148(4.2.4p2) Released by Harlan Stenn <stenn@ntp.org> 149 150* [Bug 854] Broadcast address was not correctly set for interface addresses 151* [Bug 829] reduce syslog noise, while there fix Enabled/Disable logging 152 to reflect the actual configuration. 153* [Bug 795] Moved declaration of variable to top of function. 154* [Bug 789] Fix multicast client crypto authentication and make sure arriving 155 multicast packets do not disturb the autokey dance. 156* [Bug 785] improve handling of multicast interfaces 157 (multicast routers still need to run a multicast routing 158 software/daemon) 159* [Bug 527] Don't write from source address length to wrong location 160* Upgraded autogen and libopts. 161* [Bug 811] ntpd should not read a .ntprc file. 162 163--- 164(4.2.4p1) (skipped) 165 166--- 167(4.2.4p0) Released by Harlan Stenn <stenn@ntp.org> 168 169* [Bug 793] Update Hans Lambermont's email address in ntpsweep. 170* [Bug 776] Remove unimplemented "rate" flag from ntpdate. 171* [Bug 586] Avoid lookups if AI_NUMERICHOST is set. 172* [Bug 770] Fix numeric parameters to ntp-keygen (Alain Guibert). 173* [Bug 768] Fix io_setbclient() error message. 174* [Bug 765] Use net_bind_service capability on linux. 175* [Bug 760] The background resolver must be aware of the 'dynamic' keyword. 176* [Bug 753] make union timestamp anonymous (Philip Prindeville). 177* confopt.html: move description for "dynamic" keyword into the right section. 178* pick the right type for the recv*() length argument. 179 180--- 181(4.2.4) Released by Harlan Stenn <stenn@ntp.org> 182 183* monopt.html fixes from Dave Mills. 184* [Bug 452] Do not report kernel PLL/FLL flips. 185* [Bug 746] Expert mouseCLOCK USB v2.0 support added.' 186* driver8.html updates. 187* [Bug 747] Drop <NOBR> tags from ntpdc.html. 188* sntp now uses the returned precision to control decimal places. 189* sntp -u will use an unprivileged port for its queries. 190* [Bug 741] "burst" doesn't work with !unfit peers. 191* [Bug 735] Fix a make/gmake VPATH issue on Solaris. 192* [Bug 739] ntpd -x should not take an argument. 193* [Bug 737] Some systems need help providing struct iovec. 194* [Bug 717] Fix libopts compile problem. 195* [Bug 728] parse documentation fixes. 196* [Bug 734] setsockopt(..., IP_MULTICAST_IF, ...) fails on 64-bit platforms. 197* [Bug 732] C-DEX JST2000 patch from Hideo Kuramatsu. 198* [Bug 721] check for __ss_family and __ss_len separately. 199* [Bug 666] ntpq opeers displays jitter rather than dispersion. 200* [Bug 718] Use the recommended type for the saddrlen arg to getsockname(). 201* [Bug 715] Fix a multicast issue under Linux. 202* [Bug 690] Fix a Windows DNS lookup buffer overflow. 203* [Bug 670] Resolved a Windows issue with the dynamic interface rescan code. 204* K&R C support is being deprecated. 205* [Bug 714] ntpq -p should conflict with -i, not -c. 206* WWV refclock improvements from Dave Mills. 207* [Bug 708] Use thread affinity only for the clock interpolation thread. 208* [Bug 706] ntpd can be running several times in parallel. 209* [Bug 704] Documentation typos. 210* [Bug 701] coverity: NULL dereference in ntp_peer.c 211* [Bug 695] libopts does not protect against macro collisions. 212* [Bug 693] __adjtimex is independent of ntp_{adj,get}time. 213* [Bug 692] sys_limitrejected was not being incremented. 214* [Bug 691] restrictions() assumption not always valid. 215* [Bug 689] Deprecate HEATH GC-1001 II; the driver never worked. 216* [Bug 688] Fix documentation typos. 217* [Bug 686] Handle leap seconds better under Windows. 218* [Bug 685] Use the Windows multimedia timer. 219* [Bug 684] Only allow debug options if debugging is enabled. 220* [Bug 683] Use the right version string. 221* [Bug 680] Fix the generated version string on Windows. 222* [Bug 678] Use the correct size for control messages. 223* [Bug 677] Do not check uint_t in configure.ac. 224* [Bug 676] Use the right value for msg_namelen. 225* [Bug 675] Make sure ntpd builds without debugging. 226* [Bug 672] Fix cross-platform structure padding/size differences. 227* [Bug 660] New TIMESTAMP code fails tp build on Solaris Express. 228* [Bug 659] libopts does not build under Windows. 229* [Bug 658] HP-UX with cc needs -Wp,-H8166 in CFLAGS. 230* [Bug 656] ntpdate doesn't work with multicast address. 231* [Bug 638] STREAMS_TLI is deprecated - remove it. 232* [Bug 635] Fix tOptions definition. 233* [Bug 628] Fallback to ntp discipline not working for large offsets. 234* [Bug 622] Dynamic interface tracking for ntpd. 235* [Bug 603] Don't link with libelf if it's not needed. 236* [Bug 523] ntpd service under Windows does't shut down properly. 237* [Bug 500] sntp should always be built. 238* [Bug 479] Fix the -P option. 239* [Bug 421] Support the bc637PCI-U card. 240* [Bug 342] Deprecate broken TRAK refclock driver. 241* [Bug 340] Deprecate broken MSF EES refclock driver. 242* [Bug 153] Don't do DNS lookups on address masks. 243* [Bug 143] Fix interrupted system call on HP-UX. 244* [Bug 42] Distribution tarballs should be signed. 245* Support separate PPS devices for PARSE refclocks. 246* [Bug 637, 51?] Dynamic interface scanning can now be done. 247* Options processing now uses GNU AutoGen. 248 249--- 250(4.2.2p4) Released by Harlan Stenn <stenn@ntp.org> 251 252 * [Bug 710] compat getnameinfo() has off-by-one error 253 * [Bug 690] Buffer overflow in Windows when doing DNS Lookups 254 255--- 256(4.2.2p3) Released by Harlan Stenn <stenn@ntp.org> 257 258 * Make the ChangeLog file cleaner and easier to read 259 * [Bug 601] ntpq's decodeint uses an extra level of indirection 260 * [Bug 657] Different OSes need different sized args for IP_MULTICAST_LOOP 261 * release engineering/build changes 262 * Documentation fixes 263 * Get sntp working under AIX-5 264 265--- 266(4.2.2p2) (broken) 267 268 * Get sntp working under AIX-5 269 270--- 271(4.2.2p1) 272 273 * [Bug 661] Use environment variable to specify the base path to openssl. 274 * Resolve an ambiguity in the copyright notice 275 * Added some new documentation files 276 * URL cleanup in the documentation 277 * [Bug 657]: IP_MULTICAST_LOOP uses a u_char value/size 278 * quiet gcc4 complaints 279 * more Coverity fixes 280 * [Bug 614] manage file descriptors better 281 * [Bug 632] update kernel PPS offsets when PPS offset is re-configured 282 * [Bug 637] Ignore UP in*addr_any interfaces 283 * [Bug 633] Avoid writing files in srcdir 284 * release engineering/build changes 285 286--- 287(4.2.2) 288 289 * SNTP 290 * Many bugfixes 291 * Implements the current "goal state" of NTPv4 292 * Autokey improvements 293 * Much better IPv6 support 294 * [Bug 360] ntpd loses handles with LAN connection disabled. 295 * [Bug 239] Fix intermittent autokey failure with multicast clients. 296 * Rewrite of the multicast code 297 * New version numbering scheme 298 299--- 300(4.2.0) 301 302* More stuff than I have time to document 303* IPv6 support 304* Bugfixes 305* call-gap filtering 306* wwv and chu refclock improvements 307* OpenSSL integration 308 309--- 310(4.1.2) 311 312* clock state machine bugfix 313* Lose the source port check on incoming packets 314* (x)ntpdc compatibility patch 315* Virtual IP improvements 316* ntp_loopfilter fixes and improvements 317* ntpdc improvements 318* GOES refclock fix 319* JJY driver 320* Jupiter refclock fixes 321* Neoclock4X refclock fixes 322* AIX 5 port 323* bsdi port fixes 324* Cray unicos port upgrade 325* HP MPE/iX port 326* Win/NT port upgrade 327* Dynix PTX port fixes 328* Document conversion from CVS to BK 329* readline support for ntpq 330 331--- 332(4.1.0) 333 334* CERT problem fixed (99k23) 335 336* Huff-n-Puff filter 337* Preparation for OpenSSL support 338* Resolver changes/improvements are not backward compatible with mode 7 339 requests (which are implementation-specific anyway) 340* leap second stuff 341* manycast should work now 342* ntp-genkeys does new good things. 343* scripts/ntp-close 344* PPS cleanup and improvements 345* readline support for ntpdc 346* Crypto/authentication rewrite 347* WINNT builds with MD5 by default 348* WINNT no longer requires Perl for building with Visual C++ 6.0 349* algorithmic improvements, bugfixes 350* Solaris dosynctodr info update 351* html/pic/* is *lots* smaller 352* New/updated drivers: Forum Graphic GPS, WWV/H, Heath GC-100 II, HOPF 353 serial and PCI, ONCORE, ulink331 354* Rewrite of the audio drivers 355 356--- 357(4.0.99) 358 359* Driver updates: CHU, DCF, GPS/VME, Oncore, PCF, Ulink, WWVB, burst 360 If you use the ONCORE driver with a HARDPPS kernel module, 361 you *must* have a properly specified: 362 pps <filename> [assert/clear] [hardpps] 363 line in the /etc/ntp.conf file. 364* PARSE cleanup 365* PPS cleanup 366* ntpd, ntpq, ntpdate cleanup and fixes 367* NT port improvements 368* AIX, BSDI, DEC OSF, FreeBSD, NetBSD, Reliant, SCO, Solaris port improvements 369 370--- 371(4.0.98) 372 373* Solaris kernel FLL bug is fixed in 106541-07 374* Bug/lint cleanup 375* PPS cleanup 376* ReliantUNIX patches 377* NetInfo support 378* Ultralink driver 379* Trimble OEM Ace-II support 380* DCF77 power choices 381* Oncore improvements 382 383--- 384(4.0.97) 385 386* NT patches 387* AIX,SunOS,IRIX portability 388* NeXT portability 389* ntptimeset utility added 390* cygwin portability patches 391 392--- 393(4.0.96) 394 395* -lnsl, -lsocket, -lgen configuration patches 396* Y2K patches from AT&T 397* Linux portability cruft 398 399--- 400(4.0.95) 401 402* NT port cleanup/replacement 403* a few portability fixes 404* VARITEXT Parse clock added 405 406--- 407(4.0.94) 408 409* PPS updates (including ntp.config options) 410* Lose the old DES stuff in favor of the (optional) RSAREF stuff 411* html cleanup/updates 412* numerous drivers cleaned up 413* numerous portability patches and code cleanup 414 415--- 416(4.0.93) 417 418* Oncore refclock needs PPS or one of two ioctls. 419* Don't make ntptime under Linux. It doesn't compile for too many folks. 420* Autokey cleanup 421* ReliantUnix patches 422* html cleanup 423* tickadj cleanup 424* PARSE cleanup 425* IRIX -n32 cleanup 426* byte order cleanup 427* ntptrace improvements and patches 428* ntpdc improvements and patches 429* PPS cleanup 430* mx4200 cleanup 431* New clock state machine 432* SCO cleanup 433* Skip alias interfaces 434 435--- 436(4.0.92) 437 438* chronolog and dumbclock refclocks 439* SCO updates 440* Cleanup/bugfixes 441* Y2K patches 442* Updated palisade driver 443* Plug memory leak 444* wharton kernel clock 445* Oncore clock upgrades 446* NMEA clock improvements 447* PPS improvements 448* AIX portability patches 449 450--- 451(4.0.91) 452 453* New ONCORE driver 454* New MX4200 driver 455* Palisade improvements 456* config file bugfixes and problem reporting 457* autoconf upgrade and cleanup 458* HP-UX, IRIX lint cleanup 459* AIX portability patches 460* NT cleanup 461 462--- 463(4.0.90) 464 465* Nanoseconds 466* New palisade driver 467* New Oncore driver 468 469--- 470(4.0.73) 471 472* README.hackers added 473* PARSE driver is working again 474* Solaris 2.6 has nasty kernel bugs. DO NOT enable pll! 475* DES is out of the distribution. 476 477--- 478(4.0.72) 479 480* K&R C compiling should work again. 481* IRIG patches. 482* MX4200 driver patches. 483* Jupiter driver added. 484* Palisade driver added. Needs work (ANSI, ntoh/hton, sizeof double, ???) 485