NTF announced the release of ntp-4.2.8p8 on 2 June 2016. This release contains fixes for one high and four low severity security-related issues, four bug fixes, and other improvements since ntp-4.2.8p7, which was released on 26 April 2016.

See the 2 June 2016 Security Announcement for more details.

Sec 3046 / CVE-2016-4957: Crypto-NAK crash
Sec 3045 / CVE-2016-4953: Bad authentication demobilizes ephemeral associations
Sec 3044 / CVE-2016-4954: Processing spoofed server packets
Sec 3043 / CVE-2016-4955: Autokey association reset
Sec 3042 / CVE-2016-4956: Broadcast interleave