CVE-2014-9295 == thanks + $$$ (Score 1)

When a fix for CVE-2014-9295 was already available to build and install on the day, I sent support.ntp.org $100 without hesitation. And was vaguely hoping the rest of civilization -- the part for whom the whole of that sentence was meaningful, anyway -- might do the same. I'm glad a little light is being thrown on some of the infrastructure we take for granted ... worth consideration if you support the FOSS model philosophically, and have a few $ to spare to back it up.