unsubscribe On Tue, Jun 20, 2023 at 11:21 PM FreeBSD Errata Notices < errata-noti...@freebsd.org> wrote:
> -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA512 > > > ============================================================================= > FreeBSD-EN-23:05.tzdata Errata > Notice > The FreeBSD > Project > > Topic: Timezone database information update > > Category: contrib > Module: zoneinfo > Announced: 2023-06-21 > Affects: FreeBSD 13.1, 12.4 > Corrected: 2023-03-29 01:19:25 UTC (stable/13, 13.2-STABLE) > 2023-06-21 05:03:18 UTC (releng/13.1, 13.1-RELEASE-p8) > 2023-03-29 01:20:06 UTC (stable/12, 12.4-STABLE) > 2023-06-21 05:43:27 UTC (releng/12.4, 12.4-RELEASE-p3) > > For general information regarding FreeBSD Errata Notices and Security > Advisories, including descriptions of the fields above, security > branches, and the following sections, please visit > <URL:https://security.FreeBSD.org/>. > > I. Background > > The IANA Time Zone Database (often called tz or zoneinfo) contains code and > data that represent the history of local time for many representative > locations around the globe. It is updated periodically to reflect changes > made by political bodies to time zone boundaries, UTC offsets, and > daylight-saving rules. > > FreeBSD releases install the IANA Time Zone Database in > /usr/share/zoneinfo. > The tzsetup(8) utility allows the user to specify the default local time > zone. Based on the selected time zone, tzsetup(8) copies one of the files > from /usr/share/zoneinfo to /etc/localtime. A time zone may also be > selected > for an individual process by setting its TZ environment variable to a > desired > time zone name. > > II. Problem Description > > Several changes to future and past timestamps have been recorded in the > IANA > Time Zone Database after previous FreeBSD releases were released. This > affects many users in different parts of the world. Because of these > changes, the data in the zoneinfo files need to be updated. If the local > timezone on the running system is affected, tzsetup(8) needs to be run to > update /etc/localtime. > > III. Impact > > An incorrect time will be displayed on a system configured to use one of > the > affected time zones if the /usr/share/zoneinfo and /etc/localtime files are > not updated, and all applications on the system that rely on the system > time, > such as cron(8) and syslog(8), will be affected. > > IV. Workaround > > The system administrator can install an updated version of the IANA Time > Zone > Database from the misc/zoneinfo port and run tzsetup(8). > > Applications that store and display times in Coordinated Universal Time > (UTC) > are not affected. > > V. Solution > > Upgrade your system to a supported FreeBSD stable or release / security > branch (releng) dated after the correction date. > > Please note that some third party software, for instance PHP, Ruby, Java, > Perl and Python, may be using different zoneinfo data sources, in such > cases > this software must be updated separately. Software packages that are > installed via binary packages can be upgraded by executing 'pkg upgrade'. > > Following the instructions in this Errata Notice will only update the IANA > Time Zone Database installed in /usr/share/zoneinfo. > > Perform one of the following: > > 1) To update your system via a binary patch: > > Systems running a RELEASE version of FreeBSD on the amd64, i386, or > (on FreeBSD 13 and later) arm64 platforms can be updated via the > freebsd-update(8) utility: > > # freebsd-update fetch > # freebsd-update install > > Restart all the affected applications and daemons, or reboot the system. > > 2) To update your system via a source code patch: > > The following patches have been verified to apply to the applicable > FreeBSD release branches. > > a) Download the relevant patch from the location below, and verify the > detached PGP signature using your PGP utility. > > # fetch https://security.FreeBSD.org/patches/EN-23:05/tzdata-2023c.patch > # fetch > https://security.FreeBSD.org/patches/EN-23:05/tzdata-2023c.patch.asc > # gpg --verify tzdata-2023c.patch.asc > > b) Apply the patch. Execute the following commands as root: > > # cd /usr/src > # patch < /path/to/patch > > c) Recompile the operating system using buildworld and installworld as > described in <URL:https://www.FreeBSD.org/handbook/makeworld.html>. > > Restart all the affected applications and daemons, or reboot the system. > > VI. Correction details > > This issue is corrected by the corresponding Git commit hash or Subversion > revision number in the following stable and release branches: > > Branch/path Hash Revision > - ------------------------------------------------------------------------- > stable/13/ bb7b15831531 stable/13-n254928 > releng/13.1/ 0e577c42f61c releng/13.1-n250183 > stable/12/ r373009 > releng/12.4/ r373101 > - ------------------------------------------------------------------------- > > For FreeBSD 13 and later: > > Run the following command to see which files were modified by a > particular commit: > > # git show --stat <commit hash> > > Or visit the following URL, replacing NNNNNN with the hash: > > <URL:https://cgit.freebsd.org/src/commit/?id=NNNNNN> > > To determine the commit count in a working tree (for comparison against > nNNNNNN in the table above), run: > > # git rev-list --count --first-parent HEAD > > For FreeBSD 12 and earlier: > > Run the following command to see which files were modified by a particular > revision, replacing NNNNNN with the revision number: > > # svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base > > Or visit the following URL, replacing NNNNNN with the revision number: > > <URL:https://svnweb.freebsd.org/base?view=revision&revision=NNNNNN> > > VII. References > > <URL:https://github.com/eggert/tz/blob/2023c/NEWS> > <URL:https://github.com/eggert/tz/blob/2023b/NEWS> > <URL:https://github.com/eggert/tz/blob/2023a/NEWS> > > The latest revision of this advisory is available at > <URL:https://security.FreeBSD.org/advisories/FreeBSD-EN-23:05.tzdata.asc> > -----BEGIN PGP SIGNATURE----- > > iQIzBAEBCgAdFiEEthUnfoEIffdcgYM7bljekB8AGu8FAmSSki0ACgkQbljekB8A > Gu8TvxAAtPUGUHuME21ttewmNzBuW6CHhD3MFYheFFs3CiuLsUbla7BRKgXPMOmT > WzXHOe/PDKefrrrW09lPLG63DChu9WgmAfEQyvDK+uV8gazfTTkDN3wD+XS1k5Uh > PNk9ZE2jAGOY7vbzmJyXAXVYx1MJcT9jGpT0S1s5AhOWL3GgsjlUb/IXMHaDIpRy > r0L6snLzLypZzHmTf9HJ3dvkXAqiMv6Km1SwMeWibnm0ChCwhHzktOihbVcPQBoY > vlUbAb0zKSZmNblbQS89vZtdtwgzFW8t+/F6esMEvrxwlW3hU1f8dZTBsRoIsKCR > VqE2SSTu9O5wG0Huj4UR64EQ116Co8xU2JlVmdp0jFqu8SYa4kq5O3f0sVbRSVzi > agwzaS0U7h8FzxBIyaSOQX1k+tWVIbXViKI/BD17NXqR/LXCLT1e7Eu4uxJn3mqE > zmeyXEQ1TvP9VkGrLmuKrv2h+cqFrWVqFWlzRG3jq8x21r1fL7sTC2cnw54cqItN > lAci5GUpc02LBo+74sz0J5WSpLFj/0sA+5W4EkUZ4EyoTpmR/d5L22eU1h91ZJx6 > mg/5xxTCvvEL0woMOIHeUf5essP4JiWWwGLv1dblVUiq5UuP9R9UdZef3xt/s+gD > Ew8Tyqv80ZJiamfWGOYQbbY6Bi7cUgzBvQkOXDVAXXeUXcCfWF4= > =fStA > -----END PGP SIGNATURE----- > >
