Add FreeBSD-EN-19:18.tzdata.

Approved by:	so

share/security/advisories/FreeBSD-EN-19:18.tzdata.asc

@@ -0,0 +1,152 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA512
+
+=============================================================================
+FreeBSD-EN-19:18.tzdata                                         Errata Notice
+                                                          The FreeBSD Project
+
+Topic:          Timezone database information update
+
+Category:       contrib
+Module:         zoneinfo
+Announced:      2019-10-23
+Affects:        All supported versions of FreeBSD.
+Corrected:      2019-09-15 10:54:18 UTC (stable/12, 12.1-STABLE)
+                2019-10-23 03:25:32 UTC (releng/12.0, 12.0-RELEASE-p11)
+                2019-09-15 10:54:33 UTC (stable/11, 11.3-STABLE)
+                2019-10-23 03:25:32 UTC (releng/11.3, 11.3-RELEASE-p4)
+                2019-10-23 03:25:32 UTC (releng/11.2, 11.2-RELEASE-p15)
+
+Note: The upcoming release of FreeBSD 12.1 was branched after the original
+commit to the stable branch and already includes the updated timezone
+information.
+
+For general information regarding FreeBSD Errata Notices and Security
+Advisories, including descriptions of the fields above, security
+branches, and the following sections, please visit
+<URL:https://security.FreeBSD.org/>.
+
+I.   Background
+
+The tzsetup(8) program allows the user to specify the default local timezone.
+Based on the selected timezone, tzsetup(8) copies one of the files from
+/usr/share/zoneinfo to /etc/localtime.  This file actually controls the
+conversion.
+
+II.  Problem Description
+
+Several changes in Daylight Savings Time happened after previous FreeBSD
+releases were released that would affect many people who live in different
+countries.  Because of these changes, the data in the zoneinfo files need to
+be updated, and if the local timezone on the running system is affected,
+tzsetup(8) needs to be run so the /etc/localtime is updated.
+
+III. Impact
+
+An incorrect time will be displayed on a system configured to use one of the
+affected timezones if the /usr/share/zoneinfo and /etc/localtime files are
+not updated, and all applications on the system that rely on the system time,
+such as cron(8) and syslog(8), will be affected.
+
+IV.  Workaround
+
+The system administrator can install an updated timezone database from the
+misc/zoneinfo port and run tzsetup(8) to get the timezone database corrected.
+
+Applications that store and display times in Coordinated Universal Time (UTC)
+are not affected.
+
+V.   Solution
+
+Please note that some third party software, for instance PHP, Ruby, Java and
+Perl, may be using different zoneinfo data source, in such cases this
+software must be updated separately.  For software packages that is installed
+via binary packages, they can be upgraded by executing `pkg upgrade'.
+
+Following the instructions in this Errata Notice will update all of the
+zoneinfo files to be the same as what was released with FreeBSD release.
+
+Perform one of the following:
+
+1) Upgrade your system to a supported FreeBSD stable or release / security
+branch (releng) dated after the correction date.  Restart all the affected
+applications and daemons, or reboot the system.
+
+2) To update your system via a binary patch:
+
+Systems running a RELEASE version of FreeBSD on the i386 or amd64
+platforms can be updated via the freebsd-update(8) utility:
+
+# freebsd-update fetch
+# freebsd-update install
+
+Restart all the affected applications and daemons, or reboot the system.
+
+3) To update your system via a source code patch:
+
+The following patches have been verified to apply to the applicable
+FreeBSD release branches.
+
+a) Download the relevant patch from the location below, and verify the
+detached PGP signature using your PGP utility.
+
+# fetch https://security.FreeBSD.org/patches/EN-19:18/tzdata-2019c.patch
+# fetch https://security.FreeBSD.org/patches/EN-19:18/tzdata-2019c.patch.asc
+# gpg --verify tzdata-2019c.patch.asc
+
+b) Apply the patch.  Execute the following commands as root:
+
+# cd /usr/src
+# patch < /path/to/patch
+
+c) Recompile the operating system using buildworld and installworld as
+described in <URL:https://www.FreeBSD.org/handbook/makeworld.html>.
+
+Restart all the affected applications and daemons, or reboot the system.
+
+VI.  Correction details
+
+The following list contains the correction revision numbers for each
+affected branch.
+
+Branch/path                                                      Revision
+- -------------------------------------------------------------------------
+stable/12/                                                        r352353
+releng/12.0/                                                      r353915
+stable/11/                                                        r352354
+releng/11.3/                                                      r353915
+releng/11.2/                                                      r353915
+- -------------------------------------------------------------------------
+
+To see which files were modified by a particular revision, run the
+following command, replacing NNNNNN with the revision number, on a
+machine with Subversion installed:
+
+# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base
+
+Or visit the following URL, replacing NNNNNN with the revision number:
+
+<URL:https://svnweb.freebsd.org/base?view=revision&revision=NNNNNN>
+
+VII. References
+
+The latest revision of this advisory is available at
+<URL:https://security.FreeBSD.org/advisories/FreeBSD-EN-19:18.tzdata.asc>
+-----BEGIN PGP SIGNATURE-----
+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+=cMXm
+-----END PGP SIGNATURE-----

share/security/patches/EN-19:18/tzdata-2019c.patch.asc

@@ -0,0 +1,18 @@
+-----BEGIN PGP SIGNATURE-----
+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+=yfsI
+-----END PGP SIGNATURE-----

share/xml/notices.xml

@@ -7,6 +7,19 @@
   <year>
     <name>2019</name>
 
+    <month>
+      <name>10</name>
+
+      <day>
+	<name>23</name>
+
+	<notice>
+	  <name>FreeBSD-EN-19:18.tzdata</name>
+	</notice>
+
+      </day>
+    </month>
+
     <month>
       <name>8</name>