The rabbit toots to make sure you read this
Last update:
IF YOU THINK YOU HAVE FOUND A SECURITY RELATED NTP BUG please send your report to security@ntp.org. Please do not contact developers directly.
The best way to report a non-security bug is to use the NTP Public Service Project Bug Tracking System (Bugzilla) located at http://bugs.ntp.org/. Bugs reported this way are immediately forwarded to the developers. Please do not contact the developers directly.
If you wish to report a non-security bug via electronic mail, you may do so, but please remember that your report will be held until one of our volunteers enters it in Bugzilla. The email address for these reports is bugs@ntp.org. You will need to register at http://bugs.ntp.org/ so that you may participate directly in any e-mail discussion regarding your report.