• [FreeBSD-Announce] FreeBSD Errata Notice FreeBSD-EN-21:29.tzdata

    From FreeBSD Errata Notices@21:1/5 to All on Thu Nov 4 06:00:04 2021
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    ============================================================================= FreeBSD-EN-21:29.tzdata Errata Notice
    The FreeBSD Project

    Topic: Timezone database information update

    Category: contrib
    Module: zoneinfo
    Announced: 2021-11-03
    Affects: All supported versions of FreeBSD.
    Corrected: 2021-10-25 01:09:01 UTC (stable/13, 13.0-STABLE)
    2021-11-03 20:44:52 UTC (releng/13.0, 13.0-RELEASE-p5)
    2021-10-25 01:09:08 UTC (stable/12, 12.3-STABLE)
    2021-10-25 01:12:50 UTC (releng/12.3, 12.3-BETA1)
    2021-11-03 20:55:36 UTC (releng/12.2, 12.2-RELEASE-p11)

    Note: Systems running FreeBSD 12.3-BETA1 are affected, however 12.3-BETA2
    and later are already remediated.

    For general information regarding FreeBSD Errata Notices and Security Advisories, including descriptions of the fields above, security
    branches, and the following sections, please visit <URL:https://security.FreeBSD.org/>.

    I. Background

    The tzsetup(8) program allows the user to specify the default local timezone. Based on the selected timezone, tzsetup(8) copies one of the files from /usr/share/zoneinfo to /etc/localtime. This file actually controls the conversion.

    II. Problem Description

    Several changes in Daylight Saving Time transition dates happened after previous FreeBSD releases were released affecting many users in different
    parts of the world. Because of these changes, the data in the zoneinfo files need to be updated, and if the local timezone on the running system is affected, tzsetup(8) needs to be run so the /etc/localtime is updated.

    III. Impact

    An incorrect time will be displayed on a system configured to use one of the affected timezones if the /usr/share/zoneinfo and /etc/localtime files are
    not updated, and all applications on the system that rely on the system time, such as cron(8) and syslog(8), will be affected.

    IV. Workaround

    The system administrator can install an updated timezone database from the misc/zoneinfo port and run tzsetup(8) to get the timezone database corrected.

    Applications that store and display times in Coordinated Universal Time (UTC) are not affected.

    V. Solution

    Please note that some third party software, for instance PHP, Ruby, Java, Perl and Python, may be using different zoneinfo data source, in such cases this software must be updated separately. Software packages that are installed via binary packages can be upgraded by executing `pkg upgrade'.

    Following the instructions in this Errata Notice will update all of the zoneinfo files to be the same as what was released with FreeBSD release.

    Perform one of the following:

    1) Upgrade your system to a supported FreeBSD stable or release / security branch (releng) dated after the correction date. Restart all the affected applications and daemons, or reboot the system.

    2) To update your system via a binary patch:

    Systems running a RELEASE version of FreeBSD on the i386 or amd64
    platforms can be updated via the freebsd-update(8) utility:

    # freebsd-update fetch
    # freebsd-update install

    Restart all the affected applications and daemons, or reboot the system.

    3) To update your system via a source code patch:

    The following patches have been verified to apply to the applicable
    FreeBSD release branches.

    a) Download the relevant patch from the location below, and verify the
    detached PGP signature using your PGP utility.

    # fetch https://security.FreeBSD.org/patches/EN-21:29/tzdata-2021a3.patch
    # fetch https://security.FreeBSD.org/patches/EN-21:29/tzdata-2021a3.patch.asc
    # gpg --verify tzdata-2021a3.patch.asc

    b) Apply the patch. Execute the following commands as root:

    # cd /usr/src
    # patch < /path/to/patch

    c) Recompile the operating system using buildworld and installworld as described in <URL:https://www.FreeBSD.org/handbook/makeworld.html>.

    Restart all the affected applications and daemons, or reboot the system.

    VI. Correction details

    This issue is corrected by the corresponding Git commit hash or Subversion revision number in the following stable and release branches:

    Branch/path Hash Revision
    - ------------------------------------------------------------------------- stable/13/ ed325e2ec2dc stable/13-n247816 releng/13.0/ 11754a61115f releng/13.0-n244764 stable/12/ r370968 releng/12.3/ r370969 releng/12.2/ r370980
    - -------------------------------------------------------------------------

    For FreeBSD 13 and later:

    Run the following command to see which files were modified by a
    particular commit:

    # git show --stat <commit hash>

    Or visit the following URL, replacing NNNNNN with the hash:

    <URL:https://cgit.freebsd.org/src/commit/?id=NNNNNN>

    To determine the commit count in a working tree (for comparison against
    nNNNNNN in the table above), run:

    # git rev-list --count --first-parent HEAD

    For FreeBSD 12 and earlier:

    Run the following command to see which files were modified by a particular revision, replacing NNNNNN with the revision number:

    # svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base

    Or visit the following URL, replacing NNNNNN with the revision number:

    <URL:https://svnweb.freebsd.org/base?view=revision&revision=NNNNNN>

    VII. References

    <URL:https://github.com/eggert/tz/blob/2021e/NEWS>

    The latest revision of this advisory is available at <URL:https://security.FreeBSD.org/advisories/FreeBSD-EN-21:29.tzdata.asc> -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEE/A6HiuWv54gCjWNV05eS9J6n5cIFAmGDD9AACgkQ05eS9J6n 5cLIrg/+L/OYcepPmR4va4+0Q+vv90D0lsZGH/So6FJ2aa8zXdAmpQJaA5g+cptW pwwOPa58UzOVCuIZSlAsBubqj9XPT/LUFN0FxcsduyHf0izf2+tfjS/RsmOtzCD0 muE5UwIDQwXdmDNnyWnrdBbBW94nqD3BU526LbG/RkmKumDgd4wPIuGsbFAcSiAW BVyrZQXdttyw6ZK7I7YxITsXtqrCMmYwDm4ZpnI+iLzh5droQxf7S2ejMTyKLPxQ mRNHQxa+TAVWZUyLDPT6mZc9yWzuM0huuIl70iTaz59SFcs2/s4Qw+J2WTVammsl 4FzVoFjLD9/Bkx2JyghC5MD45XE5oHrxQ2duL6TLgqu1ZnN1EUvw8AS9TRD51pEP 6ryG9OZ5ICpaiEniEbgfuvzbM3sJm0DwA84LVahpVD7fCflzimn4NESz6UyVDp86 B9l1O2yRLpaMz5CIUBI9yRI7QefK2em3PE19n0/JGYZbSMOd5J9no3692vIMZhS9 xEgUCRTpr68s2df+liXK1oKJe6v8uZWIeptINGLA9aHfYPw4pI4jYN67S93mhqXc ORO9VPTeJPrmmn82/fpPKFRZsi8nE+pHatCYeKwLA1ZiClDJo+nTcdIP8jMJAixW S1yDx0acbOWth7NzgRf3bdA3NZ9Vp8jX0oxmYYbJxQjh4K+mwRY=
    =uW9d
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)