[SECURITY] Fedora 32 Update: timeshift-20.03-1.fc32
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-c18248f61a
2020-03-23 20:23:29.706872
--------------------------------------------------------------------------------
Name : timeshift
Product : Fedora 32
Version : 20.03
Release : 1.fc32
URL : https://github.com/teejee2008/timeshift
Summary : System restore tool for Linux
Description :
Timeshift for Linux is an application that provides functionality similar to
the System Restore feature in Windows and the Time Machine tool in Mac OS.
Timeshift protects your system by taking incremental snapshots of the file
system at regular intervals. These snapshots can be restored at a later date
to undo all changes to the system.
In RSYNC mode, snapshots are taken using rsync and hard-links. Common files
are shared between snapshots which saves disk space. Each snapshot is a full
system backup that can be browsed with a file manager.
In BTRFS mode, snapshots are taken using the in-built features of the BTRFS
filesystem. BTRFS snapshots are supported only on BTRFS systems having an
Ubuntu-type subvolume layout (with @ and @home subvolumes).
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2020-10174
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 15 2020 Samuel Rakitni��an <samuel.rakitnican(a)gmail.com> 20.03-1
- Update to 20.03
- Rework the uninstall script removal
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1811684 - CVE-2020-10174 timeshift: Arbitrary local code execution due to
unsafe usage of temporary directory in /tmp/timeshift
https://bugzilla.redhat.com/show_bug.cgi?id=1811684
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-c18248f61a' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------