{"id":"CLSA-2026-1792514027","aliases":[],"status":"published","title":"Update of tzdata","description":"- Upgrade to tzdata-2026e\n  - Manitoba moves to permanent -05 on 2026-10-31.\n  - Canada’s Northwest Territories moved to permanent -06 on 2026-08-21.\n  - Obsolescent settings like TZ=\"EST5EDT\" now conform better to POSIX.\n  - Fix security, performance and porting bugs in zic and localtime.\n  - Alberta moved to permanent -06 on 2026-06-18.\n  - Morocco moves to permanent +00 on 2026-09-20.\n  - More integer overflow bugs have been fixed in zic.\n  - British Columbia moved to permanent -07 on 2026-03-09.\n  - zic no longer mishandles a last transition to a new time type.\n  - Some more overflow bugs have been fixed in zic.\n  - Moldova has used EU transition times since 2022.\n  - The “right” TZif files are no longer installed by default.\n  - -DTZ_RUNTIME_LEAPS=0 disables runtime support for leap seconds.\n  - TZif files are no longer limited to 50 bytes of abbreviations.\n  - zic is no longer limited to 50 leap seconds.\n  - Several integer overflow bugs have been fixed.\n  - Several code changes for compatibility with FreeBSD.\n- Drop 0003-continue-to-ship-posixrules.patch: POSIXRULES is obsolete\n  since tzcode 2026a; posixrules is still produced by zic -p","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-10-20T16:53:41Z","modified":"2026-10-26T09:31:41Z","fixes":[{"ecosystem":"TuxCare:CentOS:6","package":"tzdata","fixed_in":["2026e-1.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"tzdata-java","fixed_in":["2026e-1.el6.tuxcare.els1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"tzdata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026e-1.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"tzdata-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026e-1.el6.tuxcare.els1"}]}]}],"references":[{"url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2026-1792514027.html","tags":["advisory"]}],"sources":{"osv":[{"id":"CLSA-2026-1792514027","title":"Update of tzdata","description":"- Upgrade to tzdata-2026e\n  - Manitoba moves to permanent -05 on 2026-10-31.\n  - Canada’s Northwest Territories moved to permanent -06 on 2026-08-21.\n  - Obsolescent settings like TZ=\"EST5EDT\" now conform better to POSIX.\n  - Fix security, performance and porting bugs in zic and localtime.\n  - Alberta moved to permanent -06 on 2026-06-18.\n  - Morocco moves to permanent +00 on 2026-09-20.\n  - More integer overflow bugs have been fixed in zic.\n  - British Columbia moved to permanent -07 on 2026-03-09.\n  - zic no longer mishandles a last transition to a new time type.\n  - Some more overflow bugs have been fixed in zic.\n  - Moldova has used EU transition times since 2022.\n  - The “right” TZif files are no longer installed by default.\n  - -DTZ_RUNTIME_LEAPS=0 disables runtime support for leap seconds.\n  - TZif files are no longer limited to 50 bytes of abbreviations.\n  - zic is no longer limited to 50 leap seconds.\n  - Several integer overflow bugs have been fixed.\n  - Several code changes for compatibility with FreeBSD.\n- Drop 0003-continue-to-ship-posixrules.patch: POSIXRULES is obsolete\n  since tzcode 2026a; posixrules is still produced by zic -p","status":"published","published":"2026-10-20T16:53:41Z","modified":"2026-10-26T09:31:41.001385642Z","updated_at":"2026-11-02T15:43:54.672859Z"}]}}