NTP Bug to Hit Sunday

[Paul Boniol]

I hadn't seen anything about this before. If you're running NTP based on GPSD, make sure it is updated to 3.23 as the fix won't be backported, ast least not by the developers. If not, you'll soon think it's 2002 again.

Also it can affect systems updating from an unpatched NTP server. Or cause login problems. Etc.

https://www.zdnet.com/article/thanks-to-a-nasty-gpsd-bug-real-life-time-travel-trouble-arrives-this-weekend/

Paul

[Kent Perrier]

I guess that one guy who maintains NTP has been busy :D 

--
--
You received this message because you are subscribed to the Google Groups "NLUG" group.
To post to this group, send email to nlug...@googlegroups.com
To unsubscribe from this group, send email to nlug-talk+...@googlegroups.com
For more options, visit this group at http://groups.google.com/group/nlug-talk?hl=en

---
You received this message because you are subscribed to the Google Groups "NLUG" group.
To unsubscribe from this group and stop receiving emails from it, send an email to nlug-talk+...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/nlug-talk/CAL9PgS0Rf7ty7-HzdzFnHcHqM5wmawZ%2BaGm9BhD-%2B3xx4A2aSw%40mail.gmail.com.

[Michael L]

Assuming usually gets me in trouble, but may I assume that running standard Linux updates should / would / could / will include necessary NTP updates if needed?  

On Thu, Oct 21, 2021 at 2:27 PM Paul Boniol <paul....@gmail.com> wrote:

--

[Paul Boniol]

My Bionic Beaver based Ubuntu system doesn't have any gpsd components installed, but it says the latest is 3.17-5.  Not all distros keep up to date with GPSD, and the developer is quoted as saying that is a sore point.

Paul

To view this discussion on the web visit https://groups.google.com/d/msgid/nlug-talk/CALdmzXYKD5o6LzL5af1J%3DG18mod_rti7Lukm6e1KgDevUT12VQ%40mail.gmail.com.

[Csaba Toth]

Is there any list somewhere which distributions' which versions are affected by this?

To view this discussion on the web visit https://groups.google.com/d/msgid/nlug-talk/CAL9PgS2pR6TxecXDcWnnjFjwtj4xgxZso2eCnpzXXezXib0_fw%40mail.gmail.com.

[Paul Boniol]

It sounds like it affects anyone using GPSD server/client modules, regardless of distribution. 

As to whether the distribution has decided to update current / all supported / unsupported versions; (or if server admins/people do the updates if they are available).... I don't know that there is any list.  

And of course it will affect any system that blindly updates their time from an affected system, even if that system doesn't use GPSD.

Paul

To view this discussion on the web visit https://groups.google.com/d/msgid/nlug-talk/CA%2BKhHx%2BrB7T81RH%3DGYZ_-R__fJVB2WHYa8J63NhukJOxnZrCtA%40mail.gmail.com.

[Kent Perrier]

Yeah, this isn't an NTP issue, it is a gpsd issue. Red Hat doesn't ship gpsd so we don't have any fixes for it. :) 

To view this discussion on the web visit https://groups.google.com/d/msgid/nlug-talk/CAL9PgS3zopY%2BG3bByEPSNbX9e9hNEVt0ycTCYXaV8tVGN1nSsw%40mail.gmail.com.