Debian/timeshift: high 7
init_tmp in TeeJee.FileSystem.vala in Timeshift before 20.03 unsafely reuses a preexisting temporary directory in the predictable location /tmp/timeshift. It follows symlinks in this location or uses
Action: Upgrade timeshift to 20.03+ds-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 20.03+ds-1 | - |
Fixed versions
| 20.03+ds-1 |
Sources
- osv: DEBIAN-CVE-2020-10174#Debian:14/timeshift
- https://security-tracker.debian.org/tracker/CVE-2020-10174
published · modified · JSON