ntp version

[rnglab]

As Bhuz noted, Ubuntu released the respective security patches:
http://www.ubuntu.com/usn/usn-2783-1/

As well as Debian:
http://metadata.ftp-master.debian.org/changelogs//main/n/ntp/ntp_4.2.6.p5+dfsg-7+deb8u1_changelog

So a package upgrade should be enough.
Don't know why both OSs stay on version 4.2.6 though.

[rnglab]

ntp packages for debian and ubuntu are seriously outdated.

http://www.cs.bu.edu/~goldbe/papers/NTPattack.pdf

http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities

We should all build last ntp version from source (4.2.8p4).

Code Select Expand

ntpd --version
ntpd 4.2.8p4