- tz - lists.iana.org

Nunavik to stop changing its clocks after March 2026?
by Paul Eggert Nov. 8, 2025

Nov. 8, 2025

Yesterday’s CBC News report “Nunavimmiut have wound back their clocks for the last time”[1] is so light on details that for now I am merely attaching a draft patch to this email for review, rather than installing the patch into the development repository. I found no announcement of the change at www.makivvik.ca. Although I asked for more details by using the form at <https://www.makivvik.ca/contact/>, these sorts of contact forms often do not work, so if anyone has access to more-authoritative info than the CBC report, please let us know. Among other things, details in the news report make me wonder how likely Makivvik would reconsider its decision before the change would take effect about a year from now. [1]: https://www.cbc.ca/news/canada/north/nunavik-daylight-savings-9.6969650

1 0

Phoenix AZ timezone issue
by akbar＠marketing-qa.com Nov. 5, 2025

Nov. 5, 2025

🧭 Problem Summary Arizona remains one of the few U.S. states that does not observe Daylight Saving Time (DST) since 1968. However, it identifies its time zone as Mountain Standard Time (MST) — which does change to MDT when DST applies elsewhere. Because of this, every spring and fall, Arizona’s effective time alignment shifts: In summer, Arizona matches Pacific Daylight Time (PDT). In winter, it matches Mountain Standard Time (MST). This causes systemic issues in digital calendars, automated scheduling, flight bookings, and cross-state business coordination, requiring frequent manual adjustments. 💡 Recommended Solution Create and declare a dedicated time zone: “Phoenix Standard Time.” This would be a fixed, non-DST time zone officially recognized by IANA (the Internet Assigned Numbers Authority) and major platforms (Microsoft, Apple, Google). All digital devices could use it as a unique time zone identifier that never shifts with DST — eliminating confusion and rescheduling errors. It would function similarly to “UTC+7” year-round but would display as “Phoenix Standard Time (PST)” in software systems. Thank you Akbar Jaffer Akbar Jaffer Office: (415) 335-6950 Mobile: (650) 430-0232 Web: Marketing-QA.com <http://www.marketing-qa.com/> Meeting: Book time W/Akbar <https://calendly.com/ajaffer/> LinkedIn <https://www.linkedin.com/in/akbarjaffer/> | POI Blog <https://pointofintersection.org/>

8 9

How to select zones for a TimeZone picker
by Guillermo Rodriguez Garcia Nov. 3, 2025

Nov. 3, 2025

Hi all, I'm building a TimeZone picker with the following constraints: 1. At least one distinct timezone per country (so that e.g. there is an entry for Atlantic/Reykjavik instead of mapping IS to Africa/Abidjan) 2. Within a country, do not show timezones that currently have identical rules to another timezone in the same country (i.e. historical differences don't matter). Because of (1) I started from zone.tab rather than zone1970.tab. However, I'm not sure how to handle (2). For example, Spain has three zones in zone.tab: Europe/Madrid, Africa/Ceuta, and Atlantic/Canary. But as far as most users are concerned, as of today there are only two timezones in Spain: Madrid and Canary Islands. Ceuta follows Madrid rules, so there should be no need to show this as an option to the user. Another example: the U.S. lists 29 zones, but only 8 are distinct today (ignoring historical changes). So, the question: Any suggestions on how to filter timezones within each country to drop those that as of today are not relevant except for historical differences? Thank you, Guillermo Rodriguez Garcia guille.rodriguez(a)gmail.com

8 17

[PROPOSED] tzfree now preserves errno
by Paul Eggert Nov. 3, 2025

Nov. 3, 2025

* Makefile, NEWS, newtzset.3: Mention this. * localtime.c (FREE_PRESERVES_ERRNO): Default to 1 if 'free' is known to preserve errno, 0 otherwise. (tzfree): Preserve errno if 'free' does not. --- Makefile | 2 ++ NEWS | 2 ++ localtime.c | 15 +++++++++++++++ newtzset.3 | 4 ++++ 4 files changed, 23 insertions(+) diff --git a/Makefile b/Makefile index 0fe8a9f8..0d33fa17 100644 --- a/Makefile +++ b/Makefile @@ -239,6 +239,8 @@ LDLIBS= # -DEPOCH_OFFSET=N if the 'time' function returns a value N greater # than what POSIX specifies, assuming local time is UT. # For example, N is 252460800 on AmigaOS. +# -DFREE_PRESERVES_ERRNO=[01] if the 'free' function munges or preserves errno +# (default is guessed) # -DHAVE_DECL_ASCTIME_R=0 if <time.h> does not declare asctime_r # on POSIX platforms predating POSIX.1-2024 # -DHAVE_DECL_ENVIRON if <unistd.h> declares 'environ' diff --git a/NEWS b/NEWS index 1ed9b2eb..a9b2d321 100644 --- a/NEWS +++ b/NEWS @@ -93,6 +93,8 @@ Unreleased, experimental changes option is incompatible with POSIX.1-2024 and earlier. It also costs CPU time and memory. + tzfree now preserves errno, consistently with POSIX.1-2024 'free'. + tzcode now uses mempcpy if available, guessing its availability. Compile with -DHAVE_MEMPCPY=1 or 0 to override the guess. diff --git a/localtime.c b/localtime.c index b85941f2..46acf3bd 100644 --- a/localtime.c +++ b/localtime.c @@ -2061,10 +2061,25 @@ tzalloc(char const *name) return sp; } +#ifndef FREE_PRESERVES_ERRNO +# if ((defined _POSIX_VERSION && 202405 <= _POSIX_VERSION) \ + || (defined __GLIBC__ && 2 < __GLIBC__ + (33 <= __GLIBC_MINOR__)) \ + || defined __OpenBSD__ || defined __sun) +# define FREE_PRESERVES_ERRNO 1 +# else +# define FREE_PRESERVES_ERRNO 0 +# endif +#endif + void tzfree(timezone_t sp) { + int err; + if (!FREE_PRESERVES_ERRNO) + err = errno; free(sp); + if (!FREE_PRESERVES_ERRNO) + errno = err; } /* diff --git a/newtzset.3 b/newtzset.3 index 3801ab1b..028cfd25 100644 --- a/newtzset.3 +++ b/newtzset.3 @@ -379,6 +379,10 @@ If successful, the function returns a nonnull pointer to the newly allocated object. Otherwise, it returns a null pointer and sets .IR errno . +The +.B tzfree +function does not modify +.IR errno . .SH ERRORS .TP .B EOVERFLOW -- 2.51.0

1 0

[PROPOSED] Improve TZ="/..." security and speed (NetBSD only)
by Paul Eggert Oct. 28, 2025

Oct. 28, 2025

* NEWS: Mention security. * localtime.c (O_REGULAR): Default to 0. (tzloadbody): Open TZif files with O_REGULAR. Suppress unnecessary call to 'stat' if O_REGULAR is present. --- NEWS | 3 +++ localtime.c | 7 +++++-- 2 files changed, 8 insertions(+), 2 deletions(-) diff --git a/NEWS b/NEWS index 64d32bf3..1ed9b2eb 100644 --- a/NEWS +++ b/NEWS @@ -40,6 +40,9 @@ Unreleased, experimental changes and reject relative names containing ".." directory components; formerly, only privileged programs did those two things. These changes were inspired by similar behavior in FreeBSD. + On NetBSD, unprivileged programs now use O_REGULAR to check + whether a TZ setting starting with '/' names a regular file, + avoiding a minor security race still present elsewhere. TZ strings taken from tzalloc arguments are now treated with no less caution than TZ strings taken from the environment, as the old undocumented behavior would have been hard to explain. diff --git a/localtime.c b/localtime.c index 0d2d2a93..b85941f2 100644 --- a/localtime.c +++ b/localtime.c @@ -355,6 +355,9 @@ static int openat(int dd, char const *path, int oflag) { unreachable (); } #ifndef O_PATH # define O_PATH 0 #endif +#ifndef O_REGULAR +# define O_REGULAR 0 +#endif #ifndef O_RESOLVE_BENEATH # define O_RESOLVE_BENEATH 0 #endif @@ -900,7 +903,7 @@ tzloadbody(char const *name, struct state *sp, char tzloadflags, register int tzheadsize = sizeof(struct tzhead); int dd = AT_FDCWD; int oflags = (O_RDONLY | O_BINARY | O_CLOEXEC | O_CLOFORK - | O_IGNORE_CTTY | O_NOCTTY); + | O_IGNORE_CTTY | O_NOCTTY | O_REGULAR); int err; struct stat st; st.st_ctime = 0; @@ -927,7 +930,7 @@ tzloadbody(char const *name, struct state *sp, char tzloadflags, continue; else if (issetugid()) return ENOTCAPABLE; - else { + else if (!O_REGULAR) { /* Check for devices, as their mere opening could have unwanted side effects. Though racy, there is no portable way to fix the races. This check is needed -- 2.48.1

1 0

Iana build failures on Windows
by Manuela Friedrich Oct. 28, 2025

Oct. 28, 2025

Hello Paul, I have hit a compile error for zic.c on Windows. Git commit 9e0bf0b42d68b3d9ad0bc7ff70fc92d87f8b40d2 zic.c zic.c(152): error C2081: 'mode_t': name in formal parameter list illegal zic.c(2437): warning C4116: unnamed type definition in parentheses NMAKE : U1077: '"C:\Program Files (x86)\Microsoft Visual Studio\2017\Professional\VC\Tools\MSVC\14.12.25827\bin\HostX64\x64\cl.EXE"' : return code '0x2' Stop. Can you please advise? Please do not release a new version with this issue present. Thank you! Regards Manuela Friedrich

4 17

[PROPOSED] Be more like OpenBSD wrt ".."
by Paul Eggert Oct. 25, 2025

Oct. 25, 2025

* localtime.c (tzloadbody): Do not worry about settings like TZ=".." (i.e., trailing ".." component) as the later read will fail anyway. This simplifies the code slightly, and agrees with the security-conscious OpenBSD libc. --- localtime.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/localtime.c b/localtime.c index f1a82370..0d2d2a93 100644 --- a/localtime.c +++ b/localtime.c @@ -941,13 +941,13 @@ tzloadbody(char const *name, struct state *sp, char tzloadflags, if (relname[0] != '/') { if (!OPENAT_TZDIR || !O_RESOLVE_BENEATH) { - /* Fail if a relative name contains a ".." component, - as such a name could read a file outside TZDIR + /* Fail if a relative name contains a non-terminal ".." component, + as such a name could read a non-directory outside TZDIR when AT_FDCWD and O_RESOLVE_BENEATH are not available. */ char const *component; for (component = relname; component[0]; component++) if (component[0] == '.' && component[1] == '.' - && ((component[2] == '/') | !component[2]) + && component[2] == '/' && (component == relname || component[-1] == '/')) return ENOTCAPABLE; } -- 2.48.1

1 0

[PATCH 1/5] Clarify <sys/auxv.h> vs getauxval
by Paul Eggert Oct. 25, 2025

Oct. 25, 2025

FreeBSD has <sys/auxv.h> but not getauxval, so clarify ifdeffery to reflect this. This doesn’t fix any bugs (since FreeBSD also has issetugid) but makes things clearer. * Makefile, NEWS: Update to match new behavior and fix a few old typos. * localtime.c: Move the <sys/auv.h> code to be closer together. (HAVE_SYS_AUXV_H) [!HAVE_ISSETUGID]: New macro. * private.h (HAVE_GETAUXVAL): Remove. All uses replaced by HAVE_SYS_AUXV_H. --- Makefile | 12 ++++++------ NEWS | 9 +++++---- localtime.c | 25 +++++++++++++++++++------ private.h | 13 ------------- 4 files changed, 30 insertions(+), 29 deletions(-) diff --git a/Makefile b/Makefile index 3b259c80..0fe8a9f8 100644 --- a/Makefile +++ b/Makefile @@ -246,7 +246,6 @@ LDLIBS= # -DHAVE_DIRECT_H if mkdir needs <direct.h> (MS-Windows) # -DHAVE_FCHMOD=0 if your system lacks the fchmod function # -DHAVE__GENERIC=0 if _Generic does not work* -# -DHAVE_GETAUXVAL=1 if getauxval works, 0 otherwise (default is guessed) # -DHAVE_GETEUID=0 if gete?[ug]id do not work # -DHAVE_GETRANDOM if getrandom works (e.g., GNU/Linux), # -DHAVE_GETRANDOM=0 to avoid using getrandom @@ -258,7 +257,9 @@ LDLIBS= # ctime_r and asctime_r incompatibly with POSIX.1-2017 and earlier # (Solaris when _POSIX_PTHREAD_SEMANTICS is not defined). # -DHAVE_INTTYPES_H=0 if <inttypes.h> does not work*+ -# -DHAVE_ISSETUID=1 if issetugid works, 0 otherwise (default is guessed) +# -DHAVE_ISSETUGID=1 if issetugid works, 0 otherwise (default is guessed) +# If 0, you may also use -DHAVE_SYS_AUXV_H=1 if <sys/auxv.h> works, +# 0 otherwise (default is guessed). # -DHAVE_LINK=0 if your system lacks a link function # -DHAVE_LOCALTIME_R=0 if your system lacks a localtime_r function # -DHAVE_LOCALTIME_RZ=0 if you do not want zdump to use localtime_rz @@ -268,8 +269,8 @@ LDLIBS= # -DHAVE_POSIX_DECLS=0 if your system's include files do not declare # variables like 'tzname' required by POSIX # -DHAVE_PWD_H=0 if your system lacks pwd.h, grp.h and corresponding functions -# The following additional options may be needed: -# -Dgid_t=T, -Duid_t=T to define gid_t, uid_t to be type T +# If 0, you may also need -Dgid_t=G -Duid_t=U +# to define gid_t and uid_t to be types G and U. # -DHAVE_SETENV=0 if your system lacks the setenv function # -DHAVE_SETMODE=[01] if your system lacks or has the setmode and getmode # functions (default is guessed) @@ -285,8 +286,7 @@ LDLIBS= # -DHAVE_STRUCT_TIMESPEC=0 if your system lacks struct timespec+ # -DHAVE_SYMLINK=0 if your system lacks the symlink function # -DHAVE_SYS_STAT_H=0 if <sys/stat.h> does not work* -# The following additional option may be needed: -# -Dmode_t=T to define mode_t to be type T +# If 0, you may also need -Dmode_t=M to define mode_t to be type M. # -DHAVE_TZSET=0 if your system lacks a tzset function # -DHAVE_UNISTD_H=0 if <unistd.h> does not work* # -DHAVE_UTMPX_H=0 if <utmpx.h> does not work* diff --git a/NEWS b/NEWS index 37ac9fba..64d32bf3 100644 --- a/NEWS +++ b/NEWS @@ -44,12 +44,13 @@ Unreleased, experimental changes no less caution than TZ strings taken from the environment, as the old undocumented behavior would have been hard to explain. tzset etc. no longer use the 'access' system call to check access; - instead they now use the system calls issetuid, getauxval, + instead they now use the system calls issetugid, getauxval, getresuid/getresgid, and geteuid/getegid/getuid/getgid (whichever first works) to test whether a program is privileged. - Compile with -DHAVE_ISSETUID=[01], -DHAVE_GETAUXVAL=[01], - -DHAVE_GETRESUID=[01], and -DHAVE_GETEUID=[01] to enable or - disable these system calls' use. + Compile with -DHAVE_SYS_AUXV_H=[01] to enable or disable + <sys/auxv.h> which (if it defines AT_SECURE) enables getauxval, + and compile with -DHAVE_ISSETUGID=[01], -DHAVE_GETRESUID=[01], and + -DHAVE_GETEUID=[01] to enable or disable the other calls' use. The new CFLAGS option -DTZ_CHANGE_INTERVAL=N makes tzset etc. check for TZif file changes if the in-memory data are N seconds diff --git a/localtime.c b/localtime.c index a8c442dd..f2d35813 100644 --- a/localtime.c +++ b/localtime.c @@ -19,10 +19,6 @@ #include "tzfile.h" #include <fcntl.h> -#if HAVE_GETAUXVAL && !HAVE_ISSETUGID -# include <sys/auxv.h> -#endif - #if HAVE_SYS_STAT_H # include <sys/stat.h> # ifndef S_ISREG @@ -366,12 +362,29 @@ static int openat(int dd, char const *path, int oflag) { unreachable (); } # define O_SEARCH 0 #endif -/* Return 1 if the process is privileged, 0 otherwise. */ #if !HAVE_ISSETUGID + +# if !defined HAVE_SYS_AUXV_H && defined __has_include +# if __has_include(<sys/auxv.h>) +# define HAVE_SYS_AUXV_H 1 +# endif +# endif +# ifndef HAVE_SYS_AUXV_H +# if defined __GLIBC__ && 2 < __GLIBC__ + (19 <= __GLIBC_MINOR__) +# define HAVE_SYS_AUXV_H 1 +# else +# define HAVE_SYS_AUXV_H 0 +# endif +# endif +# if HAVE_SYS_AUXV_H +# include <sys/auxv.h> +# endif + +/* Return 1 if the process is privileged, 0 otherwise. */ static int issetugid(void) { -# if HAVE_GETAUXVAL && defined AT_SECURE +# if HAVE_SYS_AUXV_H && defined AT_SECURE unsigned long val; errno = 0; val = getauxval(AT_SECURE); diff --git a/private.h b/private.h index 8d3d6404..4daa4864 100644 --- a/private.h +++ b/private.h @@ -294,19 +294,6 @@ extern int optind; # endif #endif -#if !defined HAVE_GETAUXVAL && defined __has_include -# if __has_include(<sys/auxv.h>) -# define HAVE_GETAUXVAL 1 -# endif -#endif -#ifndef HAVE_GETAUXVAL -# if defined __GLIBC__ && 2 < __GLIBC__ + (19 <= __GLIBC_MINOR__) -# define HAVE_GETAUXVAL 1 -# else -# define HAVE_GETAUXVAL 0 -# endif -#endif - #ifndef HAVE_ISSETUGID # if (defined __FreeBSD__ || defined __NetBSD__ || defined __OpenBSD__ \ || (defined __linux__ && !defined __GLIBC__) /* Android, musl, etc. */ \ -- 2.51.0

1 4

[PROPOSED] Shorten GCC_INSTRUMENT à la GCC 14
by Paul Eggert Oct. 25, 2025

Oct. 25, 2025

* Makefile (GCC_INSTRUMENT): Switch from -fsanitize-undefined-trap-on-error to its shorter alias -fsanitize-trap=all, introduced in GCC 14. --- Makefile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Makefile b/Makefile index f57042df..3b259c80 100644 --- a/Makefile +++ b/Makefile @@ -380,7 +380,7 @@ LDLIBS= # Select instrumentation via "make GCC_INSTRUMENT='whatever'". GCC_INSTRUMENT = \ -fsanitize=undefined -fsanitize-address-use-after-scope \ - -fsanitize-undefined-trap-on-error -fstack-protector + -fsanitize-trap=all -fstack-protector # Omit -fanalyzer from GCC_DEBUG_FLAGS, as it makes GCC too slow. GCC_DEBUG_FLAGS = -DGCC_LINT -g3 -O3 \ $(GCC_INSTRUMENT) \ -- 2.51.0

1 0

[PROPOSED 0/3] zic options -D, -m, and -u from FreeBSD
by Paul Eggert Oct. 24, 2025

Oct. 24, 2025

This thread contains proposed patches to add support for the zic options -D, -m, and -u, which have been in FreeBSD zic for many years. The implementation differs from that of FreeBSD, to fix some unlikely security races. I installed these patches in the development repository on GitHub. Paul Eggert (3): New zic option -D, inspired by FreeBSD New zic option -m, inspired by FreeBSD New zic option -u, inspired by FreeBSD Makefile | 8 ++ NEWS | 2 + zic.8 | 32 +++++++ zic.c | 259 +++++++++++++++++++++++++++++++++++++++++++++++++++++-- 4 files changed, 293 insertions(+), 8 deletions(-) -- 2.48.1

2 5