ntp: update to version 4.2.8 to fix CVE-2014-9295