urgent.

[Gary E. Miller]

Yo Paul!

Yup, that is releavnt here, but old news.  The drop dead date to
update gpsd has passed and the world did not fall apart.

On Thu, 21 Oct 2021 15:58:24 -0700
Paul Theodoropoulos via users <users at ntpsec.org> wrote:

> I presume this is relevant to the list:
> 
> You are subscribed to National Cyber Awareness System Current
> Activity for Cybersecurity and Infrastructure Security Agency. This
> information has recently been updated, and is now available.
> 
> GPS Daemon (GPSD) Rollover Bug 
> <https://us-cert.cisa.gov/ncas/current-activity/2021/10/21/gps-daemon-gpsd-rollover-bug>
> 10/21/2021 03:36 PM EDT
> 
> Original release date: October 21, 2021
> 
> Critical Infrastructure (CI) owners and operators, and other users
> who obtain Coordinated Universal Time (UTC) from Global Positioning
> System (GPS) devices, should be aware of a GPS Daemon (GPSD) bug 
> <https://gitlab.com/gpsd/gpsd/-/issues/144> in GPSD versions 3.20 
> (released December 31, 2019) through 3.22 (released January 8, 2021).
> 
> On October 24, 2021, Network Time Protocol (NTP) servers using bugged
> GPSD versions 3.20-3.22 may rollback 
> <https://isc.sans.edu/forums/diary/Keeping+Track+of+Time+Network+Time+Protocol+and+a+GPSD+Bug/27886/> 
> the date 1,024 weeks—to March 2002—which may cause systems and
> services to become unavailable or unresponsive.
> 
> CISA urges affected CI owners and operators to ensure systems—that
> use GPSD to obtain timing information from GPS devices—are using GPSD
> version 3.23 <https://gpsd.gitlab.io/gpsd/NEWS> (released August 8,
> 2021) or newer.
> 
> For more information, see Keeping Track of Time: Network Time
> Protocol and a GPSD Bug 
> <https://isc.sans.edu/forums/diary/Keeping+Track+of+Time+Network+Time+Protocol+and+a+GPSD+Bug/27886/>.
> 




RGDS
GARY
---------------------------------------------------------------------------
Gary E. Miller Rellim 109 NW Wilmington Ave., Suite E, Bend, OR 97703
	gem at rellim.com  Tel:+1 541 382 8588

	    Veritas liberabit vos. -- Quid est veritas?
    "If you can't measure it, you can't improve it." - Lord Kelvin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 851 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ntpsec.org/pipermail/users/attachments/20211026/f98dc3e3/attachment.bin>