Vulnerability in tzdata package (DLA-681-1)
Summary
DLA-681-1: tzdata - new upstream version. Affects tzdata versions < 2016h-0+deb7u1. Fixed in 2016h-0+deb7u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The tzdata package is a time zone database used by various operating systems and applications to accurately display local time. It contains information about time zones, daylight saving time (DST) rules, and historical time zone changes. This vulnerability affects the tzdata package in Debian 7 Wheezy.
Vulnerability Detail
The vulnerability in tzdata (DLA-681-1) is related to outdated time zone information. The package update includes the changes up to version 2016h, addressing several issues. Notable changes include the correction of DST ending dates for Asia/Gaza and Asia/Hebron, the switch of Europe/Istanbul to permanent +03 time zone, and the addition of a new leap second on 2016-12-31. Failure to update the tzdata package may result in incorrect time zone calculations and display.
How To Fix
Minimum fixed version
2016h-0+deb7u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade tzdataTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There are no specific workarounds mentioned for this vulnerability. The recommended solution is to apply the package update as described above.
Conclusion
The vulnerability in the tzdata package can be fixed by upgrading to version 2016h-0+deb7u1 or later. It is important to apply this update to ensure accurate time zone calculations and display. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for tzdata →
FAQ
tzdata is a time zone database used to accurately display local time in various operating systems and applications.
The notable changes include corrected DST ending dates for Asia/Gaza and Asia/Hebron, the switch of Europe/Istanbul to permanent +03 time zone, and the addition of a new leap second on 2016-12-31.
Failure to update the tzdata package may result in incorrect time zone calculations and display, leading to incorrect scheduling, logging, and other time-dependent operations.
You can use Vulert Playground (https://vulert.com/scanner) to check if your application or system is affected by this vulnerability. Simply upload your manifest file (e.g., package-lock.json) to the playground and it will alert you in real-time.
You can find more information about Debian LTS security advisories, including how to apply updates and frequently asked questions, at https://wiki.debian.org/LTS.
Related vulnerabilities
Recent vulnerabilities recorded for tzdata.
