Meinberg Security Advisory 1405 was issued on 22 Decmber 2014 about vulnerabilities detected in versions 4.2.6 and earlier of the NTP package.

Version 4.2.8 was subsequently released and is already made available by many distros, but apparently not yet by Debian.