Fixed IOS datestamps?

Thu Jul 17 22:20:18 UTC 2003

Quick question, I'm not sure if this is applicable, but I am having some
confusion of what versions of code to upgrade to, and a call to the TAC
didn't help. All apologies if this is off topic at all.

We are currently running 12.2(8)T5 on several of our 2600 series routers
and according to the advisory, we should upgrade to 12.2(8)T10 to get
the fix.  I downloaded 12.2(8)T10, and the date is June 16th.  ??  What
gives, that seems really old for a rebuild.

The same thing with 12.2(15)T5, the date is June 25th.  Am I downloading
the right code?  

I don't want to reboot every router on our network 2 times.

TIA.

Steve Rude

-----Original Message-----
From: Matthew Kaufman [mailto:matthew at eeph.com] 
Sent: Thursday, July 17, 2003 12:00 PM
To: 'Scott Call'; nanog at nanog.org
Subject: RE: Fixed IOS datestamps?

I had the same problem, with no resolution from any of my contacts yet
either (perhaps they're busy?)... In my case, 12.2(14)S is a recommended
option for 7200s (but built a while back), but that leaves me wondering
about 12.2(14)S2 and 12.2(14)S3 (the last of which was at least built
recently).

Perhaps someone on the list has already compiled a quick "here's a good
set
of releases for ISPs" list that covers the obvious router choices?

I'm also having trouble deciphering whether or not there's an "old
enough"
release that isn't affected by the bug for 2511 and 2611, since the bug
tool
data isn't the same as the vulnerability announcement list.

Matthew Kaufman
matthew at eeph.com

> -----Original Message-----
> From: owner-nanog at merit.edu [mailto:owner-nanog at merit.edu] On 
> Behalf Of Scott Call
> Sent: Thursday, July 17, 2003 11:52 AM
> To: nanog at nanog.org
> Subject: Fixed IOS datestamps?
> 
> 
> 
> I started collecting the new IOS files for tonight's reboot of the 
> Internet, and I had a quick question.
> 
> The datestamps on a lot of the maintainence releases are 
> months old, and 
> I just want to make sure I'm getting the right stuff, as they 
> say, so we 
> don't have to do this dance again tomorrow.
> 
> For example, 12.0S users are recommended to go to 12.0(25)S, which at 
> least for the GSR is dated April 14, 2003.
> 
> Do I have the right build of 12.0(25)S or will there be one 
> with a date 
> closer to the revelation of the exploit showing up on the 
> cisco FTP site?
> 
> Thanks
> -Scott
> 