NTP Security Advisory

[utu]

My (current) assessment with regard to Security Advisory CVE-2014-9295:

Knoppix 7.4.2 LiveDVD-size LiveUSB Synaptic shows a current status for
ntp having version 1:4.2.6.p5 +dfsg-2 which has a security problem;

Knoppix 7.4.2 LiveDVD-size LiveUSB Synaptic shows an unforced upgrade option for
ntp to version 1:4.2.6.p5 +dfsg-3.2 which would upgrade it to 'fixed'; and

AntiX/MX-14.3 LiveCD-size LiveUSB Synaptic shows a current status for
ntpdate having version 1:4.2.6.p5 +dfsg-2 +deb7u1 which is (already) 'fixed'.

In other words, current Knoppix 7.4.2 has a problem, but an easy fix; and
current MX-14.3, CD-size, doesn't have this problem.

[philo]

A number of distros (Arch, Ubuntu, RedHat, et alii) promptly (on 22 Dec 2014) informed their users about the problem and then where to go for a solution. Regrettably, Knoppix did neither.

[Werner P. Schulz]

Again and again:
Knoppix isn't a distribution!

[philo]

I Should Have Known Better. Now I Know.