Date: Wed, 21 Jun 2023 03:56:43 -0700 From: Martin Glazer <mglazer2014@gmail.com> To: freebsd-stable@freebsd.org Subject: Re: FreeBSD Errata Notice FreeBSD-EN-23:05.tzdata Message-ID: <CAMEY5__WkbeZCAm-MxRgQET2H0dSnAnnfgaiitFO5dkyYJaUcA@mail.gmail.com> In-Reply-To: <20230621062046.EBA08ED56@freefall.freebsd.org>
index | next in thread | previous in thread | raw e-mail
[-- Attachment #1 --] unsubscribe On Tue, Jun 20, 2023 at 11:21 PM FreeBSD Errata Notices < errata-notices@freebsd.org> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA512 > > > ============================================================================= > FreeBSD-EN-23:05.tzdata Errata > Notice > The FreeBSD > Project > > Topic: Timezone database information update > > Category: contrib > Module: zoneinfo > Announced: 2023-06-21 > Affects: FreeBSD 13.1, 12.4 > Corrected: 2023-03-29 01:19:25 UTC (stable/13, 13.2-STABLE) > 2023-06-21 05:03:18 UTC (releng/13.1, 13.1-RELEASE-p8) > 2023-03-29 01:20:06 UTC (stable/12, 12.4-STABLE) > 2023-06-21 05:43:27 UTC (releng/12.4, 12.4-RELEASE-p3) > > For general information regarding FreeBSD Errata Notices and Security > Advisories, including descriptions of the fields above, security > branches, and the following sections, please visit > <URL:https://security.FreeBSD.org/>. > > I. Background > > The IANA Time Zone Database (often called tz or zoneinfo) contains code and > data that represent the history of local time for many representative > locations around the globe. It is updated periodically to reflect changes > made by political bodies to time zone boundaries, UTC offsets, and > daylight-saving rules. > > FreeBSD releases install the IANA Time Zone Database in > /usr/share/zoneinfo. > The tzsetup(8) utility allows the user to specify the default local time > zone. Based on the selected time zone, tzsetup(8) copies one of the files > from /usr/share/zoneinfo to /etc/localtime. A time zone may also be > selected > for an individual process by setting its TZ environment variable to a > desired > time zone name. > > II. Problem Description > > Several changes to future and past timestamps have been recorded in the > IANA > Time Zone Database after previous FreeBSD releases were released. This > affects many users in different parts of the world. Because of these > changes, the data in the zoneinfo files need to be updated. If the local > timezone on the running system is affected, tzsetup(8) needs to be run to > update /etc/localtime. > > III. Impact > > An incorrect time will be displayed on a system configured to use one of > the > affected time zones if the /usr/share/zoneinfo and /etc/localtime files are > not updated, and all applications on the system that rely on the system > time, > such as cron(8) and syslog(8), will be affected. > > IV. Workaround > > The system administrator can install an updated version of the IANA Time > Zone > Database from the misc/zoneinfo port and run tzsetup(8). > > Applications that store and display times in Coordinated Universal Time > (UTC) > are not affected. > > V. Solution > > Upgrade your system to a supported FreeBSD stable or release / security > branch (releng) dated after the correction date. > > Please note that some third party software, for instance PHP, Ruby, Java, > Perl and Python, may be using different zoneinfo data sources, in such > cases > this software must be updated separately. Software packages that are > installed via binary packages can be upgraded by executing 'pkg upgrade'. > > Following the instructions in this Errata Notice will only update the IANA > Time Zone Database installed in /usr/share/zoneinfo. > > Perform one of the following: > > 1) To update your system via a binary patch: > > Systems running a RELEASE version of FreeBSD on the amd64, i386, or > (on FreeBSD 13 and later) arm64 platforms can be updated via the > freebsd-update(8) utility: > > # freebsd-update fetch > # freebsd-update install > > Restart all the affected applications and daemons, or reboot the system. > > 2) To update your system via a source code patch: > > The following patches have been verified to apply to the applicable > FreeBSD release branches. > > a) Download the relevant patch from the location below, and verify the > detached PGP signature using your PGP utility. > > # fetch https://security.FreeBSD.org/patches/EN-23:05/tzdata-2023c.patch > # fetch > https://security.FreeBSD.org/patches/EN-23:05/tzdata-2023c.patch.asc > # gpg --verify tzdata-2023c.patch.asc > > b) Apply the patch. Execute the following commands as root: > > # cd /usr/src > # patch < /path/to/patch > > c) Recompile the operating system using buildworld and installworld as > described in <URL:https://www.FreeBSD.org/handbook/makeworld.html>. > > Restart all the affected applications and daemons, or reboot the system. > > VI. Correction details > > This issue is corrected by the corresponding Git commit hash or Subversion > revision number in the following stable and release branches: > > Branch/path Hash Revision > - ------------------------------------------------------------------------- > stable/13/ bb7b15831531 stable/13-n254928 > releng/13.1/ 0e577c42f61c releng/13.1-n250183 > stable/12/ r373009 > releng/12.4/ r373101 > - ------------------------------------------------------------------------- > > For FreeBSD 13 and later: > > Run the following command to see which files were modified by a > particular commit: > > # git show --stat <commit hash> > > Or visit the following URL, replacing NNNNNN with the hash: > > <URL:https://cgit.freebsd.org/src/commit/?id=NNNNNN>; > > To determine the commit count in a working tree (for comparison against > nNNNNNN in the table above), run: > > # git rev-list --count --first-parent HEAD > > For FreeBSD 12 and earlier: > > Run the following command to see which files were modified by a particular > revision, replacing NNNNNN with the revision number: > > # svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base > > Or visit the following URL, replacing NNNNNN with the revision number: > > <URL:https://svnweb.freebsd.org/base?view=revision&revision=NNNNNN>; > > VII. References > > <URL:https://github.com/eggert/tz/blob/2023c/NEWS>; > <URL:https://github.com/eggert/tz/blob/2023b/NEWS>; > <URL:https://github.com/eggert/tz/blob/2023a/NEWS>; > > The latest revision of this advisory is available at > <URL:https://security.FreeBSD.org/advisories/FreeBSD-EN-23:05.tzdata.asc>; > -----BEGIN PGP SIGNATURE----- > > iQIzBAEBCgAdFiEEthUnfoEIffdcgYM7bljekB8AGu8FAmSSki0ACgkQbljekB8A > Gu8TvxAAtPUGUHuME21ttewmNzBuW6CHhD3MFYheFFs3CiuLsUbla7BRKgXPMOmT > WzXHOe/PDKefrrrW09lPLG63DChu9WgmAfEQyvDK+uV8gazfTTkDN3wD+XS1k5Uh > PNk9ZE2jAGOY7vbzmJyXAXVYx1MJcT9jGpT0S1s5AhOWL3GgsjlUb/IXMHaDIpRy > r0L6snLzLypZzHmTf9HJ3dvkXAqiMv6Km1SwMeWibnm0ChCwhHzktOihbVcPQBoY > vlUbAb0zKSZmNblbQS89vZtdtwgzFW8t+/F6esMEvrxwlW3hU1f8dZTBsRoIsKCR > VqE2SSTu9O5wG0Huj4UR64EQ116Co8xU2JlVmdp0jFqu8SYa4kq5O3f0sVbRSVzi > agwzaS0U7h8FzxBIyaSOQX1k+tWVIbXViKI/BD17NXqR/LXCLT1e7Eu4uxJn3mqE > zmeyXEQ1TvP9VkGrLmuKrv2h+cqFrWVqFWlzRG3jq8x21r1fL7sTC2cnw54cqItN > lAci5GUpc02LBo+74sz0J5WSpLFj/0sA+5W4EkUZ4EyoTpmR/d5L22eU1h91ZJx6 > mg/5xxTCvvEL0woMOIHeUf5essP4JiWWwGLv1dblVUiq5UuP9R9UdZef3xt/s+gD > Ew8Tyqv80ZJiamfWGOYQbbY6Bi7cUgzBvQkOXDVAXXeUXcCfWF4= > =fStA > -----END PGP SIGNATURE----- > > [-- Attachment #2 --] <div dir="auto">unsubscribe</div><div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Jun 20, 2023 at 11:21 PM FreeBSD Errata Notices <<a href="mailto:errata-notices@freebsd.org">errata-notices@freebsd.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;padding-left:1ex;border-left-color:rgb(204,204,204)">-----BEGIN PGP SIGNED MESSAGE-----<br> Hash: SHA512<br> <br> =============================================================================<br> FreeBSD-EN-23:05.tzdata Errata Notice<br> The FreeBSD Project<br> <br> Topic: Timezone database information update<br> <br> Category: contrib<br> Module: zoneinfo<br> Announced: 2023-06-21<br> Affects: FreeBSD 13.1, 12.4<br> Corrected: 2023-03-29 01:19:25 UTC (stable/13, 13.2-STABLE)<br> 2023-06-21 05:03:18 UTC (releng/13.1, 13.1-RELEASE-p8)<br> 2023-03-29 01:20:06 UTC (stable/12, 12.4-STABLE)<br> 2023-06-21 05:43:27 UTC (releng/12.4, 12.4-RELEASE-p3)<br> <br> For general information regarding FreeBSD Errata Notices and Security<br> Advisories, including descriptions of the fields above, security<br> branches, and the following sections, please visit<br> <URL:<a href="https://security.FreeBSD.org/" rel="noreferrer" target="_blank">https://security.FreeBSD.org/</a>>.<br>; <br> I. Background<br> <br> The IANA Time Zone Database (often called tz or zoneinfo) contains code and<br> data that represent the history of local time for many representative<br> locations around the globe. It is updated periodically to reflect changes<br> made by political bodies to time zone boundaries, UTC offsets, and<br> daylight-saving rules.<br> <br> FreeBSD releases install the IANA Time Zone Database in /usr/share/zoneinfo.<br> The tzsetup(8) utility allows the user to specify the default local time<br> zone. Based on the selected time zone, tzsetup(8) copies one of the files<br> from /usr/share/zoneinfo to /etc/localtime. A time zone may also be selected<br> for an individual process by setting its TZ environment variable to a desired<br> time zone name.<br> <br> II. Problem Description<br> <br> Several changes to future and past timestamps have been recorded in the IANA<br> Time Zone Database after previous FreeBSD releases were released. This<br> affects many users in different parts of the world. Because of these<br> changes, the data in the zoneinfo files need to be updated. If the local<br> timezone on the running system is affected, tzsetup(8) needs to be run to<br> update /etc/localtime.<br> <br> III. Impact<br> <br> An incorrect time will be displayed on a system configured to use one of the<br> affected time zones if the /usr/share/zoneinfo and /etc/localtime files are<br> not updated, and all applications on the system that rely on the system time,<br> such as cron(8) and syslog(8), will be affected.<br> <br> IV. Workaround<br> <br> The system administrator can install an updated version of the IANA Time Zone<br> Database from the misc/zoneinfo port and run tzsetup(8).<br> <br> Applications that store and display times in Coordinated Universal Time (UTC)<br> are not affected.<br> <br> V. Solution<br> <br> Upgrade your system to a supported FreeBSD stable or release / security<br> branch (releng) dated after the correction date.<br> <br> Please note that some third party software, for instance PHP, Ruby, Java,<br> Perl and Python, may be using different zoneinfo data sources, in such cases<br> this software must be updated separately. Software packages that are<br> installed via binary packages can be upgraded by executing 'pkg upgrade'.<br> <br> Following the instructions in this Errata Notice will only update the IANA<br> Time Zone Database installed in /usr/share/zoneinfo.<br> <br> Perform one of the following:<br> <br> 1) To update your system via a binary patch:<br> <br> Systems running a RELEASE version of FreeBSD on the amd64, i386, or<br> (on FreeBSD 13 and later) arm64 platforms can be updated via the<br> freebsd-update(8) utility:<br> <br> # freebsd-update fetch<br> # freebsd-update install<br> <br> Restart all the affected applications and daemons, or reboot the system.<br> <br> 2) To update your system via a source code patch:<br> <br> The following patches have been verified to apply to the applicable<br> FreeBSD release branches.<br> <br> a) Download the relevant patch from the location below, and verify the<br> detached PGP signature using your PGP utility.<br> <br> # fetch <a href="https://security.FreeBSD.org/patches/EN-23:05/tzdata-2023c.patch" rel="noreferrer" target="_blank">https://security.FreeBSD.org/patches/EN-23:05/tzdata-2023c.patch</a><br>; # fetch <a href="https://security.FreeBSD.org/patches/EN-23:05/tzdata-2023c.patch.asc" rel="noreferrer" target="_blank">https://security.FreeBSD.org/patches/EN-23:05/tzdata-2023c.patch.asc</a><br>; # gpg --verify tzdata-2023c.patch.asc<br> <br> b) Apply the patch. Execute the following commands as root:<br> <br> # cd /usr/src<br> # patch < /path/to/patch<br> <br> c) Recompile the operating system using buildworld and installworld as<br> described in <URL:<a href="https://www.FreeBSD.org/handbook/makeworld.html" rel="noreferrer" target="_blank">https://www.FreeBSD.org/handbook/makeworld.html</a>>.<br>; <br> Restart all the affected applications and daemons, or reboot the system.<br> <br> VI. Correction details<br> <br> This issue is corrected by the corresponding Git commit hash or Subversion<br> revision number in the following stable and release branches:<br> <br> Branch/path Hash Revision<br> - -------------------------------------------------------------------------<br> stable/13/ bb7b15831531 stable/13-n254928<br> releng/13.1/ 0e577c42f61c releng/13.1-n250183<br> stable/12/ r373009<br> releng/12.4/ r373101<br> - -------------------------------------------------------------------------<br> <br> For FreeBSD 13 and later:<br> <br> Run the following command to see which files were modified by a<br> particular commit:<br> <br> # git show --stat <commit hash><br> <br> Or visit the following URL, replacing NNNNNN with the hash:<br> <br> <URL:<a href="https://cgit.freebsd.org/src/commit/?id=NNNNNN" rel="noreferrer" target="_blank">https://cgit.freebsd.org/src/commit/?id=NNNNNN</a>><br>; <br> To determine the commit count in a working tree (for comparison against<br> nNNNNNN in the table above), run:<br> <br> # git rev-list --count --first-parent HEAD<br> <br> For FreeBSD 12 and earlier:<br> <br> Run the following command to see which files were modified by a particular<br> revision, replacing NNNNNN with the revision number:<br> <br> # svn diff -cNNNNNN --summarize svn://<a href="http://svn.freebsd.org/base" rel="noreferrer" target="_blank">svn.freebsd.org/base</a><br> <br> Or visit the following URL, replacing NNNNNN with the revision number:<br> <br> <URL:<a href="https://svnweb.freebsd.org/base?view=revision&revision=NNNNNN" rel="noreferrer" target="_blank">https://svnweb.freebsd.org/base?view=revision&revision=NNNNNN</a>><br>; <br> VII. References<br> <br> <URL:<a href="https://github.com/eggert/tz/blob/2023c/NEWS" rel="noreferrer" target="_blank">https://github.com/eggert/tz/blob/2023c/NEWS</a>><br>; <URL:<a href="https://github.com/eggert/tz/blob/2023b/NEWS" rel="noreferrer" target="_blank">https://github.com/eggert/tz/blob/2023b/NEWS</a>><br>; <URL:<a href="https://github.com/eggert/tz/blob/2023a/NEWS" rel="noreferrer" target="_blank">https://github.com/eggert/tz/blob/2023a/NEWS</a>><br>; <br> The latest revision of this advisory is available at<br> <URL:<a href="https://security.FreeBSD.org/advisories/FreeBSD-EN-23:05.tzdata.asc" rel="noreferrer" target="_blank">https://security.FreeBSD.org/advisories/FreeBSD-EN-23:05.tzdata.asc</a>><br>; -----BEGIN PGP SIGNATURE-----<br> <br> iQIzBAEBCgAdFiEEthUnfoEIffdcgYM7bljekB8AGu8FAmSSki0ACgkQbljekB8A<br> Gu8TvxAAtPUGUHuME21ttewmNzBuW6CHhD3MFYheFFs3CiuLsUbla7BRKgXPMOmT<br> WzXHOe/PDKefrrrW09lPLG63DChu9WgmAfEQyvDK+uV8gazfTTkDN3wD+XS1k5Uh<br> PNk9ZE2jAGOY7vbzmJyXAXVYx1MJcT9jGpT0S1s5AhOWL3GgsjlUb/IXMHaDIpRy<br> r0L6snLzLypZzHmTf9HJ3dvkXAqiMv6Km1SwMeWibnm0ChCwhHzktOihbVcPQBoY<br> vlUbAb0zKSZmNblbQS89vZtdtwgzFW8t+/F6esMEvrxwlW3hU1f8dZTBsRoIsKCR<br> VqE2SSTu9O5wG0Huj4UR64EQ116Co8xU2JlVmdp0jFqu8SYa4kq5O3f0sVbRSVzi<br> agwzaS0U7h8FzxBIyaSOQX1k+tWVIbXViKI/BD17NXqR/LXCLT1e7Eu4uxJn3mqE<br> zmeyXEQ1TvP9VkGrLmuKrv2h+cqFrWVqFWlzRG3jq8x21r1fL7sTC2cnw54cqItN<br> lAci5GUpc02LBo+74sz0J5WSpLFj/0sA+5W4EkUZ4EyoTpmR/d5L22eU1h91ZJx6<br> mg/5xxTCvvEL0woMOIHeUf5essP4JiWWwGLv1dblVUiq5UuP9R9UdZef3xt/s+gD<br> Ew8Tyqv80ZJiamfWGOYQbbY6Bi7cUgzBvQkOXDVAXXeUXcCfWF4=<br> =fStA<br> -----END PGP SIGNATURE-----<br> <br> </blockquote></div></div>home | help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAMEY5__WkbeZCAm-MxRgQET2H0dSnAnnfgaiitFO5dkyYJaUcA>