4.2.8 has received fixes for 6 vulnerabilities, see http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities