CLSA-2026-1792519236
Update of tzdata
No scoreFix available
- New upstream 2026e version:
- Manitoba moves to permanent -05 on 2026-10-31.
- Canada’s Northwest Territories moved to permanent -06 on 2026-08-21.
- Obsolescent settings like TZ="EST5EDT" now conform better to POSIX.
- Fix security, performance and porting bugs in zic and localtime.
- Alberta moved to permanent -06 on 2026-06-18.
- Morocco moves to permanent +00 on 2026-09-20.
- More integer overflow bugs have been fixed in zic.
- British Columbia moved to permanent -07 on 2026-03-09.
- zic no longer mishandles a last transition to a new time type.
- Some more overflow bugs have been fixed in zic.
- Moldova has used EU transition times since 2022.
- The “right” TZif files are no longer installed by default.
- -DTZ_RUNTIME_LEAPS=0 disables runtime support for leap seconds.
- TZif files are no longer limited to 50 bytes of abbreviations.
- zic is no longer limited to 50 leap seconds.
- Several integer overflow bugs have been fixed.
- Several code changes for compatibility with FreeBSD.
- Revert POSIX conformance of old SysV names EST5EDT, CST6CDT, MST7MDT and PST8PDT, keeping them as links (patch from Ubuntu 2026e-0ubuntu0.22.04.1)
- Update the ICU timezone data to 2026e (from Ubuntu 2026e-0ubuntu0.22.04.1)
What each source reports
OSV No score
Update of tzdata
- New upstream 2026e version:
- Manitoba moves to permanent -05 on 2026-10-31.
- Canada’s Northwest Territories moved to permanent -06 on 2026-08-21.
- Obsolescent settings like TZ="EST5EDT" now conform better to POSIX.
- Fix security, performance and porting bugs in zic and localtime.
- Alberta moved to permanent -06 on 2026-06-18.
- Morocco moves to permanent +00 on 2026-09-20.
- More integer overflow bugs have been fixed in zic.
- British Columbia moved to permanent -07 on 2026-03-09.
- zic no longer mishandles a last transition to a new time type.
- Some more overflow bugs have been fixed in zic.
- Moldova has used EU transition times since 2022.
- The “right” TZif files are no longer installed by default.
- -DTZ_RUNTIME_LEAPS=0 disables runtime support for leap seconds.
- TZif files are no longer limited to 50 bytes of abbreviations.
- zic is no longer limited to 50 leap seconds.
- Several integer overflow bugs have been fixed.
- Several code changes for compatibility with FreeBSD.
- Revert POSIX conformance of old SysV names EST5EDT, CST6CDT, MST7MDT and PST8PDT, keeping them as links (patch from Ubuntu 2026e-0ubuntu0.22.04.1)
- Update the ICU timezone data to 2026e (from Ubuntu 2026e-0ubuntu0.22.04.1)
- Record
CLSA-2026-1792519236- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
tzdataTuxCare:Ubuntu:20.04 |
before 2026e-0ubuntu0.20.04.1+tuxcare.els1 | 2026e-0ubuntu0.20.04.1+tuxcare.els1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CLSA-2026-1792519236 is a vulnerability with no CVSS score yet in tzdata, published October 20, 2026. No source lists public exploit code. Fixed in tzdata 2026e-0ubuntu0.20.04.1+tuxcare.els1.