urgent.

[Paul Theodoropoulos]

I posted this on October 21, before the date had passed. Not much I can do 
if it doesn't make it onto the list for five days...

And I just received this reply on October 30. Something is borked with the 
list software or servers.

On 10/26/2021 11:31 AM, Gary E. Miller via users wrote:
> Yo Paul!
>
> Yup, that is releavnt here, but old news.  The drop dead date to
> update gpsd has passed and the world did not fall apart.
>
> On Thu, 21 Oct 2021 15:58:24 -0700
> Paul Theodoropoulos via users<users at ntpsec.org>  wrote:
>
>> I presume this is relevant to the list:
>>
>> You are subscribed to National Cyber Awareness System Current
>> Activity for Cybersecurity and Infrastructure Security Agency. This
>> information has recently been updated, and is now available.
>>
>> GPS Daemon (GPSD) Rollover Bug
>> <https://us-cert.cisa.gov/ncas/current-activity/2021/10/21/gps-daemon-gpsd-rollover-bug>
>> 10/21/2021 03:36 PM EDT
>>
>> Original release date: October 21, 2021
>>
>> Critical Infrastructure (CI) owners and operators, and other users
>> who obtain Coordinated Universal Time (UTC) from Global Positioning
>> System (GPS) devices, should be aware of a GPS Daemon (GPSD) bug
>> <https://gitlab.com/gpsd/gpsd/-/issues/144>  in GPSD versions 3.20
>> (released December 31, 2019) through 3.22 (released January 8, 2021).
>>
>> On October 24, 2021, Network Time Protocol (NTP) servers using bugged
>> GPSD versions 3.20-3.22 may rollback
>> <https://isc.sans.edu/forums/diary/Keeping+Track+of+Time+Network+Time+Protocol+and+a+GPSD+Bug/27886/>  
>> the date 1,024 weeks—to March 2002—which may cause systems and
>> services to become unavailable or unresponsive.
>>
>> CISA urges affected CI owners and operators to ensure systems—that
>> use GPSD to obtain timing information from GPS devices—are using GPSD
>> version 3.23<https://gpsd.gitlab.io/gpsd/NEWS>  (released August 8,
>> 2021) or newer.
>>
>> For more information, see Keeping Track of Time: Network Time
>> Protocol and a GPSD Bug
>> <https://isc.sans.edu/forums/diary/Keeping+Track+of+Time+Network+Time+Protocol+and+a+GPSD+Bug/27886/>.
>>
>
>
>
> RGDS
> GARY
> ---------------------------------------------------------------------------
> Gary E. Miller Rellim 109 NW Wilmington Ave., Suite E, Bend, OR 97703
> 	gem at rellim.com   Tel:+1  541 382 8588
>
> 	    Veritas liberabit vos. -- Quid est veritas?
>      "If you can't measure it, you can't improve it." - Lord Kelvin
>
> _______________________________________________
> users mailing list
> users at ntpsec.org
> http://lists.ntpsec.org/mailman/listinfo/users

-- 
Paul Theodoropoulos
www.anastrophe.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ntpsec.org/pipermail/users/attachments/20211030/c07b925c/attachment.htm>