- Notifications
You must be signed in to change notification settings - Fork99
Closed
Description
Problem:
The Arch Linux core packagetzdata adds aSECURITY file in/usr/share/tzinfo since tzdata version2021c-1.
This file is basically a note to report security-related bugs to the right person:
Please report any sensitive security-related bugs via email to thetzdb designated coordinators, currently Paul Eggert<eggert@cs.ucla.edu> and Tim Parenti <tim@timtimeonline.com>.Put "tzdb security" at the start of your email's subject line.We prefer communications to be in English.[...]tzinfo wants to use this file, which leads to an error.
How to reproduce:
Using Ruby IRB:
>>require'tzinfo'=>true>>TZInfo::Timezone.all.find_all{|tz|tz.current_period.abbreviation ==:some_abbrev}TZInfo::InvalidTimezoneIdentifier(Thefile'/usr/share/zoneinfo/SECURITY'does notstartwiththeexpectedheader.(loadingSECURITY))
Information:
| tool | version |
|---|---|
| ruby | 2.6.2p47 |
| tzinfo | 2.0.4 |
| tzdata | 2021c-1 and above |
| linux kernel | 5.18.10-arch1-1 |
Fix:
I proposethis PR to exclude theSECURITY file from beeing used bytzinfo.
Metadata
Metadata
Assignees
Labels
No labels