Bug 42879 - tzdata: New leap second 2016-12-31 (3.2)
tzdata: New leap second 2016-12-31 (3.2)
Status: CLOSED WONTFIX
Product: UCS
Classification: Unclassified
Component: Security updates
UCS 3.2
Other Linux
: P5 normal (vote)
: UCS 3.2-8-errata
Assigned To: Arvid Requate
Janek Walkenhorst
:
Depends on: 42878
Blocks:
  Show dependency treegraph
 
Reported: 2016-11-08 12:51 CET by Arvid Requate
Modified: 2016-12-16 17:23 CET (History)
1 user (show)

See Also:
What kind of report is it?: Security Issue
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:
requate: Patch_Available+


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Arvid Requate univentionstaff 2016-11-08 12:51:34 CET
+++ This bug was initially created as a clone of Bug #42878 +++

Upstream Debian package version 2016h-0+deb7u1 updates timezone data:

This update includes the changes in tzdata up to 2016h. Notable
changes are:

 - Asia/Gaza and Asia/Hebron (DST ending on 2016-10-29 at 01:00,
   not 2016-10-21 at 00:00).
 - Europe/Istanbul switch from EET/EEST (+02/+03) to permanent +03 on
   2016-09-07. While the timezone has changed, the divergence from
   EET/EEST will happen on 2016-10-30.
 - Turkey switched from EET/EEST (+02/+03) to permanent +03,
   effective 2016-09-07.
 - New leap second 2016-12-31 23:59:60 UTC as per IERS Bulletin C 52.
Comment 1 Arvid Requate univentionstaff 2016-11-08 13:58:46 CET
libdatetime-timezone-perl version 1:1.58-1+2016h too.
Comment 2 Arvid Requate univentionstaff 2016-11-10 22:21:42 CET
For libdatetime-timezone-perl I had to update the timezone data via patches.

Advisories:
* tzdata.yaml
* libdatetime-timezone-perl.yaml
Comment 3 Janek Walkenhorst univentionstaff 2016-11-29 18:13:33 CET
Advisories: OK
Tests (amd64): date --date='TZ="right/UTC" 2016-12-31 23:59:60': OK
Comment 4 Arvid Requate univentionstaff 2016-11-29 22:21:08 CET
Strictly speaking the version number of tzdata in errata3.2-8 must stay below the corresponding package version in errata4.0-2, but the situation already got out of hand a long time ago:

Version:        2013i-0.29.201404101009:        ucs_3.2-0-ucs3.2-2
Version:        2015d-0.35.201506170920:        ucs_3.2-0-errata3.2-6
Version:        2015d-0.35.201506170920:        ucs_3.2-0-ucs3.2-7
Version:        2016i-0.39.201611102129:        ucs_3.2-0-errata3.2-8
Version:        2016i-0~ucs3.3.38.201611102126: ucs_3.3-0-errata3.3-0
Version:        2014h-0.32.201410221907:        ucs_4.0-0
Version:        2014j-0.33.201502021152:        ucs_4.0-0-ucs4.0-1
Version:        2015d-0.36.201506170934:        ucs_4.0-0-errata4.0-2
Version:        2015d-0.36.201506170934:        ucs_4.0-0-ucs4.0-3
Version:        2016i-0.37.201611101751:        ucs_4.1-0-errata4.1-4

So, the version shipped in ucs 3.2-2 was still below the one in ucs 4.0-0, all right, but then the version shipped in errata3.2-6 was higher then in ucs 4.0-0 and 4.0-1. Nothing we can do about that now.

But now we are getting totally out of whack: The version in errata3.2-8 is higher than the version in errata4.1-4! I think I should fix this, sorry.

This is a separate issue from the libdatetime-timezone-perl version issue reported in Bug 42878 Comment 3.
Comment 5 Stefan Gohmann univentionstaff 2016-12-05 06:36:52 CET
UCS 3.2 is out of maintenance. I guess we don't need to fix this issue.
Comment 6 Arvid Requate univentionstaff 2016-12-06 15:20:38 CET
The versioning issue has been fixed, but we will not ship the update. I guess we can leave the files in svn and repo.
Comment 7 Janek Walkenhorst univentionstaff 2016-12-07 13:42:57 CET
(In reply to Arvid Requate from comment #6)
> The versioning issue has been fixed, but we will not ship the update. I
> guess we can leave the files in svn and repo.
I concur.