<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
I posted this on October 21, before the date had passed. Not much I
can do if it doesn't make it onto the list for five days...<br>
<br>
And I just received this reply on October 30. Something is borked
with the list software or servers.<br>
<br>
<div class="moz-cite-prefix">On 10/26/2021 11:31 AM, Gary E. Miller
via users wrote:<br>
</div>
<blockquote type="cite"
cite="mid:20211026113119.1ebd36aa@spidey.rellim.com">
<pre class="moz-quote-pre" wrap="">Yo Paul!
Yup, that is releavnt here, but old news. The drop dead date to
update gpsd has passed and the world did not fall apart.
On Thu, 21 Oct 2021 15:58:24 -0700
Paul Theodoropoulos via users <a class="moz-txt-link-rfc2396E" href="mailto:users@ntpsec.org"><users@ntpsec.org></a> wrote:
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">I presume this is relevant to the list:
You are subscribed to National Cyber Awareness System Current
Activity for Cybersecurity and Infrastructure Security Agency. This
information has recently been updated, and is now available.
GPS Daemon (GPSD) Rollover Bug
<a class="moz-txt-link-rfc2396E" href="https://us-cert.cisa.gov/ncas/current-activity/2021/10/21/gps-daemon-gpsd-rollover-bug"><https://us-cert.cisa.gov/ncas/current-activity/2021/10/21/gps-daemon-gpsd-rollover-bug></a>
10/21/2021 03:36 PM EDT
Original release date: October 21, 2021
Critical Infrastructure (CI) owners and operators, and other users
who obtain Coordinated Universal Time (UTC) from Global Positioning
System (GPS) devices, should be aware of a GPS Daemon (GPSD) bug
<a class="moz-txt-link-rfc2396E" href="https://gitlab.com/gpsd/gpsd/-/issues/144"><https://gitlab.com/gpsd/gpsd/-/issues/144></a> in GPSD versions 3.20
(released December 31, 2019) through 3.22 (released January 8, 2021).
On October 24, 2021, Network Time Protocol (NTP) servers using bugged
GPSD versions 3.20-3.22 may rollback
<a class="moz-txt-link-rfc2396E" href="https://isc.sans.edu/forums/diary/Keeping+Track+of+Time+Network+Time+Protocol+and+a+GPSD+Bug/27886/"><https://isc.sans.edu/forums/diary/Keeping+Track+of+Time+Network+Time+Protocol+and+a+GPSD+Bug/27886/></a>
the date 1,024 weeks—to March 2002—which may cause systems and
services to become unavailable or unresponsive.
CISA urges affected CI owners and operators to ensure systems—that
use GPSD to obtain timing information from GPS devices—are using GPSD
version 3.23 <a class="moz-txt-link-rfc2396E" href="https://gpsd.gitlab.io/gpsd/NEWS"><https://gpsd.gitlab.io/gpsd/NEWS></a> (released August 8,
2021) or newer.
For more information, see Keeping Track of Time: Network Time
Protocol and a GPSD Bug
<a class="moz-txt-link-rfc2396E" href="https://isc.sans.edu/forums/diary/Keeping+Track+of+Time+Network+Time+Protocol+and+a+GPSD+Bug/27886/"><https://isc.sans.edu/forums/diary/Keeping+Track+of+Time+Network+Time+Protocol+and+a+GPSD+Bug/27886/></a>.
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
RGDS
GARY
---------------------------------------------------------------------------
Gary E. Miller Rellim 109 NW Wilmington Ave., Suite E, Bend, OR 97703
<a class="moz-txt-link-abbreviated" href="mailto:gem@rellim.com">gem@rellim.com</a> <a class="moz-txt-link-freetext" href="Tel:+1">Tel:+1</a> 541 382 8588
Veritas liberabit vos. -- Quid est veritas?
"If you can't measure it, you can't improve it." - Lord Kelvin
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:users@ntpsec.org">users@ntpsec.org</a>
<a class="moz-txt-link-freetext" href="http://lists.ntpsec.org/mailman/listinfo/users">http://lists.ntpsec.org/mailman/listinfo/users</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="74">--
Paul Theodoropoulos
<a class="moz-txt-link-abbreviated" href="http://www.anastrophe.com">www.anastrophe.com</a>
</pre>
</body>
</html>