[Bug 2132139] Re: Incorrect seconds value from "date +%s"

[Julian Andres Klode]

I'm going to mark this as a security issue because wrong parsing might
have security implications, as we saw with the previous update.

** Changed in: rust-coreutils (Ubuntu)
       Status: New => Triaged

** Changed in: rust-coreutils (Ubuntu)
   Importance: Undecided => Critical

** Information type changed from Public to Public Security

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to coreutils-from in Ubuntu.
https://bugs.launchpad.net/bugs/2132139

Title:
  Incorrect seconds value from "date +%s"

Status in coreutils-from package in Ubuntu:
  Won't Fix
Status in rust-coreutils package in Ubuntu:
  Triaged

Bug description:
  On Ubuntu 25.10, the command "date" from package "coreutils-from-
  uutils" generates an incorrect value with format "+%s". There is a
  shift by one hour.

  Example:

  ~~~
  $ date --version
  date (uutils coreutils) 0.2.2
  $
  $ date -d "2020-06-13 05:00:00" +%s
  1592020800
  $
  $ date -d @1592020800 '+%Y-%m-%d %H:%M:%S'
  2020-06-13 06:00:00
  ~~~

  We see that output date is one hour later than the input date, event
  though the same seconds value was used.

  On another older system:

  ~~~
  $ date --version
  date (GNU coreutils) 9.5
  Copyright (C) 2024 Free Software Foundation, Inc.
  License GPLv3+: GNU GPL version 3 or later <https://gnu.org/licenses/gpl.html>.
  This is free software: you are free to change and redistribute it.
  There is NO WARRANTY, to the extent permitted by law.

  Written by David MacKenzie.
  $
  $ date -d "2020-06-13 05:00:00" +%s
  1592017200
  ~~~

  We see that the value from format "+%s" is 1592017200, 3600 seconds
  less than 1592020800, as output on Ubuntu 25.10.

  Impact: The test suite of a large project fails on Ubuntu 25.10
  because it contains shell scripts with date computation using this
  format. A long time was lost, trying to find a bug in the project,
  while it was a bug in that specific version of Ubuntu.

  ProblemType: Bug
  DistroRelease: Ubuntu 25.10
  Package: coreutils-from-uutils 0.0.0~ubuntu24
  ProcVersionSignature: Ubuntu 6.17.0-6.6-generic 6.17.1
  Uname: Linux 6.17.0-6-generic x86_64
  ApportVersion: 2.33.1-0ubuntu3
  Architecture: amd64
  CasperMD5CheckResult: pass
  CurrentDesktop: ubuntu:GNOME
  Date: Fri Nov 21 18:22:25 2025
  InstallationDate: Installed on 2022-06-22 (1248 days ago)
  InstallationMedia: Ubuntu 22.04 LTS "Jammy Jellyfish" - Release amd64 (20220419)
  PackageArchitecture: all
  SourcePackage: coreutils-from
  UpgradeStatus: Upgraded to questing on 2025-10-27 (25 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/coreutils-from/+bug/2132139/+subscriptions