Update Info

openSUSE-2025-361


Recommended update for ntpd-rs


Type: recommended
Severity: moderate
Issued: 2025-09-18
Description:
This update for ntpd-rs fixes the following issues:

Update to version 1.6.1

  * Fixed mistake in the calculation of root dispersion used in
    serving and observability.

Update to version 1.6.0

  Added

  * Support draft versions of NTPv5 with configuration changes.
  * Allow disabling ntp versions in the server.

  Changed

  * NTPv5 draft support now targets draft 4.
  * Time jumps now emit warnings.
  * Updated dependencies.

  Fixed

  * Fixed a crash in force-sync when using many servers.
  * Fixed root dispersion of the server not properly updating over
    time.
  * Fixed a bug in handling unsigned ntp deny messages.

Update to version 1.5.0

  Added

  * Support for PPS based sources (this support can be disabled
    with a compile flag for now).
  * Per source configuration of poll intervals.
  * Allow setting a custom reference id for stratum 1 servers.

  Changed

  * Our algorithm can now handle periodic sources.
  * ntpd-rs runs single-threaded when only configured as a client,
    servers still run multithreaded.
  * The reference timestamp field is now set to the truncated
    receive timestamp instead of being zero.
  * Support of rustls 0.21 and 0.22 is removed.
  * Certificate validation is now done through
    rustls-platform-verifier, following platform certificate
    validation more closely.
  * Updated dependencies

  Fixed

  * Fixed parsing of IPv6 addresses.
  * Fixed incorrect display of date in force-sync command.
  * Fixed a client denial of service vulnerability with zero-sized
    NTS cookies.
  * Fixed a client denial of service vulnerability with NTS cookies
    that are too large.

Update to version 1.4.0

  Added

  * Support for GPS based sources via a GPSd socket.
  * Added a setting to allow disabling of colors in our logs
    (observability.ansi-colors)

  Changed

  * Fallback to V4 should V5 not work for some reason (if NTPv5 is
    enabled)
  * Make the NTP version of a source configurable.
  * We now support rustls from 0.21 and up, to allow compilation
    on more targets.

  Fixed

  * Force sync did not work when a single source was configured.
  * Fix incorrect indexing in decode of ReferenceIdRequest for
    NTPv5 messages.

Update to version 1.3.1

  * Updated dependencies. Includes fixes for RUSTSEC-2024-0399.

Update to version 1.3.0

  Added

  * Added force-sync command to ntp-ctl to help with getting a
    decent initial time if the clock is far away from reality.
  * Added information on NTS to the ntp-ctl status overview.

  Changed

  * Made the logs a little less chatty.
  * Updated dependencies.


              

References


No references

Packages


  • ntpd-rs-1.6.1-bp157.2.3.1