I saw the advisory about the potential issues in ntpd before 4.2.8 but I don't quite understand whether it affects a pure client (not serving time to the outside) or not. If the issue does affect client-only operation, what can be done for systems that can't be upgraded?