[SECURITY] Fedora 30 Update: timeshift-20.03-1.fc30
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-1050d60507
2020-03-24 10:14:33.857726
--------------------------------------------------------------------------------
Name : timeshift
Product : Fedora 30
Version : 20.03
Release : 1.fc30
URL : https://github.com/teejee2008/timeshift
Summary : System restore tool for Linux
Description :
Timeshift for Linux is an application that provides functionality similar to
the System Restore feature in Windows and the Time Machine tool in Mac OS.
Timeshift protects your system by taking incremental snapshots of the file
system at regular intervals. These snapshots can be restored at a later date
to undo all changes to the system.
In RSYNC mode, snapshots are taken using rsync and hard-links. Common files
are shared between snapshots which saves disk space. Each snapshot is a full
system backup that can be browsed with a file manager.
In BTRFS mode, snapshots are taken using the in-built features of the BTRFS
filesystem. BTRFS snapshots are supported only on BTRFS systems having an
Ubuntu-type subvolume layout (with @ and @home subvolumes).
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2020-10174
--------------------------------------------------------------------------------
ChangeLog:
* Sun Mar 15 2020 Samuel Rakitni��an <samuel.rakitnican(a)gmail.com> 20.03-1
- Update to 20.03
- Rework the uninstall script removal
* Fri Jan 31 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 19.08.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Sat Sep 28 2019 Richard Shaw <hobbes1069(a)gmail.com> - 19.08.1-1
- Update to 19.08.1.
- Add patch to deal with abstract class compile error.
* Sat Mar 9 2019 Samuel Rakitni��an <samuel.rakitnican(a)gmail.com> 19.01-1
- Update to 19.01
- Remove upstream gcc optimisation flag -O3 (Since timeshift 18.8)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1811684 - CVE-2020-10174 timeshift: Arbitrary local code execution due to
unsafe usage of temporary directory in /tmp/timeshift
https://bugzilla.redhat.com/show_bug.cgi?id=1811684
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-1050d60507' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------