topic RE: Leap Second bug in ExtremeSwitching (EXOS/Switch Engine)

Leap Second bug

waqas — Sat, 28 Feb 2015 05:31:00 GMT

Could someone please confirm, or direct me to the right person, whether Extreme products are affected by the Leap Second bug?

RE: Leap Second bug

Drew_C — Mon, 02 Mar 2015 21:57:00 GMT

Hi - Thanks for the question!
I just wanted to let you know that we're looking into this and I'll get back to you as soon as there is more information to share.

RE: Leap Second bug

egtrainer — Wed, 08 Apr 2015 17:01:00 GMT

hello,

I received by Extreme Networks:

"

Linux kernel versions from 2.6.26 to 3.3 (inclusive) are vulnerable to a deadlock condition in the handling of leap second adjustments provided provided through NTP. The next leap second adjustment is going to occur on June 30th, 2015, and there is potential for this to cause Linux-based Extreme Networks products to crash/hang.

What is a leap second ? http://www.nist.gov/pml/div688/leapseconds.cfm

"

http://learn.extremenetworks.com/rs/extreme/images/VN-2015-002-Leap_Second.pdf

RE: Leap Second bug

Nobel — Fri, 10 Apr 2015 16:39:00 GMT

Does anyone know when XOS 16.2.1 will be released?

RE: Leap Second bug

Drew_C — Fri, 10 Apr 2015 16:39:00 GMT

This question should be posted in its own topic.

Please reference the new conversation here: When will EXOS 16.2 be released?

RE: Leap Second bug

Walt_Witkowski — Fri, 10 Apr 2015 17:48:00 GMT

Hello,
I would ask this question specifically for the "C" and "S" series switches. Are they affected and where will this information be published. June 30 is quickly approaching and plans for upgrades or possible outages needs to be put in place as early as possible.
thnks in advance

RE: Leap Second bug

Drew_C — Fri, 10 Apr 2015 17:48:00 GMT

Hi Walt,
The C and S series switches have been reviewed and were found to not be vulnerable to the Leap Second bug because they aren't Linux based platforms. You can find this information in the link mentioned above, reposted here for convenience: http://learn.extremenetworks.com/rs/extreme/images/VN-2015-002-Leap_Second.pdf

If you've got other questions, let us know! I/we will be happy to answer them.

-Drew

RE: Leap Second bug

Drew_C — Wed, 10 Jun 2015 18:48:00 GMT

Since it was asked and then removed, I'll go ahead and mention...
Switches running SNTP aren't subject to this issue because leap seconds don't receive special handling under the SNTP protocol.
Reference: https://gtacknowledge.extremenetworks.com/articles/Q_A/Are-Extreme-Networks-products-vulnerable-to-VN-2015-002-Leap-Second/

RE: Leap Second bug

Weidle__Bert — Thu, 18 Jun 2015 19:22:00 GMT

LEAP SECOND REMINDER: the next adjustment will be on June 30, 2015.
For Extreme product vulnerability and recommendations, please view: http://learn.extremenetworks.com/rs/extreme/images/VN-2015-002-Leap_Second.pdf

RE: Leap Second bug

Judith_Mamba — Fri, 19 Jun 2015 06:15:00 GMT

I have XOS switches running and it will definetly be affected. However, I confirgured SNTP on my switches. Please confrim and eleborate if I will be affectted by this leap second issue.
Thanks in advance.

RE: Leap Second bug

Drew_C — Fri, 19 Jun 2015 06:15:00 GMT

Please see my post slightly above this one. SNTP is not affected.

RE: Leap Second bug

Paul11 — Thu, 29 Dec 2016 21:24:00 GMT

hi all,

Is it going to happen again in end of December 2016???

Please advise. Thanks.

RE: Leap Second bug

Vellachery__Sum — Fri, 30 Dec 2016 12:09:00 GMT

Hi All,

The above query has been taken care in the below-mentioned thread.

https://community.extremenetworks.com/extreme/topics/leap-second-security-vulnerability-urgent-atten...