NTP versions in production use?

Sun Jul 12 14:15:20 UTC 2015

:Thanks, and I'm kinda stunned that folks are running such ancient
:versions of NTP.

I suggest you get accustomed to being stunned.  

:https://support.ntp.org/bin/view/Dev/ReleaseTimeline
:
:4.2.0 was EOL'd in June of 2006, and we've fixed about 3,000 issues in
:the codebase since then.

4.2.0 may have been EOL'd in 2006, but it was still shipping as the
default in FreeBSD until 2009. 

Out of those 3000 issues, only a tiny fraction are security-related
that would apply to JunOS.  I expect that they backport security and
other fixes as necessary, until some bigger engineering effort and|or
headache calls for a forklift/mass upgrade of things.

-- 
 Michael J. O'Connor                                          mjo at dojo.mi.org
 =--==--==--==--==--==--==--==--==--==--==--==--==--==--==--==--==--==--==--=
"Fire me, boy!"                                             -The Human Bullet
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20150712/59e51918/attachment.sig>