CLSA-2026-1792519351
Update of tzdata
No scoreFix available
- New upstream 2026e version:
- Manitoba moves to permanent -05 on 2026-10-31.
- Canada’s Northwest Territories moved to permanent -06 on 2026-08-21.
- Fix security, performance and porting bugs in zic and localtime.
- Alberta moved to permanent -06 on 2026-06-18.
- Morocco moves to permanent +00 on 2026-09-20.
- More integer overflow bugs have been fixed in zic.
- British Columbia moved to permanent -07 on 2026-03-09.
- zic no longer mishandles a last transition to a new time type.
- Some more overflow bugs have been fixed in zic.
- Moldova has used EU transition times since 2022.
- -DTZ_RUNTIME_LEAPS=0 disables runtime support for leap seconds.
- TZif files are no longer limited to 50 bytes of abbreviations.
- zic is no longer limited to 50 leap seconds.
- Several integer overflow bugs have been fixed.
- Several code changes for compatibility with FreeBSD.
- New zone for Aysén Region in Chile which moves from -04/-03 to -03.
- Paraguay adopted permanent -03 starting spring 2024.
- Improve pre-1991 data for the Philippines.
- Etc/Unknown is now reserved.
- Improve historical data for Mexico, Mongolia, and Portugal.
- System V names are now obsolescent.
- The main data form now uses %z.
- The code now conforms to RFC 8536 for early timestamps.
- Support POSIX.1-2024, which removes asctime_r and ctime_r.
- Assume POSIX.2-1992 or later for shell scripts.
- SUPPORT_C89 now defaults to 1.
- Revert POSIX conformance of old SysV names EST5EDT, CST6CDT, MST7MDT and PST8PDT (Revert-Fix-POSIX-conformance-of-old-SysV-names.patch, the same patch as in Debian 2026e-1).
- Add America/Coyhaique to debconf templates.
What each source reports
OSV No score
Update of tzdata
- New upstream 2026e version:
- Manitoba moves to permanent -05 on 2026-10-31.
- Canada’s Northwest Territories moved to permanent -06 on 2026-08-21.
- Fix security, performance and porting bugs in zic and localtime.
- Alberta moved to permanent -06 on 2026-06-18.
- Morocco moves to permanent +00 on 2026-09-20.
- More integer overflow bugs have been fixed in zic.
- British Columbia moved to permanent -07 on 2026-03-09.
- zic no longer mishandles a last transition to a new time type.
- Some more overflow bugs have been fixed in zic.
- Moldova has used EU transition times since 2022.
- -DTZ_RUNTIME_LEAPS=0 disables runtime support for leap seconds.
- TZif files are no longer limited to 50 bytes of abbreviations.
- zic is no longer limited to 50 leap seconds.
- Several integer overflow bugs have been fixed.
- Several code changes for compatibility with FreeBSD.
- New zone for Aysén Region in Chile which moves from -04/-03 to -03.
- Paraguay adopted permanent -03 starting spring 2024.
- Improve pre-1991 data for the Philippines.
- Etc/Unknown is now reserved.
- Improve historical data for Mexico, Mongolia, and Portugal.
- System V names are now obsolescent.
- The main data form now uses %z.
- The code now conforms to RFC 8536 for early timestamps.
- Support POSIX.1-2024, which removes asctime_r and ctime_r.
- Assume POSIX.2-1992 or later for shell scripts.
- SUPPORT_C89 now defaults to 1.
- Revert POSIX conformance of old SysV names EST5EDT, CST6CDT, MST7MDT and PST8PDT (Revert-Fix-POSIX-conformance-of-old-SysV-names.patch, the same patch as in Debian 2026e-1).
- Add America/Coyhaique to debconf templates.
- Record
CLSA-2026-1792519351- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
tzdataTuxCare:Debian:10 |
before 2026e-0+deb10u1+tuxcare.els1 | 2026e-0+deb10u1+tuxcare.els1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CLSA-2026-1792519351 is a vulnerability with no CVSS score yet in tzdata, published October 20, 2026. No source lists public exploit code. Fixed in tzdata 2026e-0+deb10u1+tuxcare.els1.