FEDORA-2019-3d418f349c — security update for deepin-clone, dtkcore, & 1 more

stable

deepin-clone-1.1.4-1.fc30, dtkcore-2.0.16.1-1.fc30, & 1 more

FEDORA-2019-3d418f349c created by cheeselee 3 years ago for Fedora 30

Security fix for CVE-2019-13228, CVE-2019-13229, CVE-2019-13227, CVE-2019-13226.

How to install

sudo dnf upgrade --refresh --advisory=FEDORA-2019-3d418f349c

This update has been submitted for testing by cheeselee.

3 years ago

This update test gating status has been changed to 'waiting'.

3 years ago

This update test gating status has been changed to 'ignored'.

3 years ago

This update has been pushed to testing.

3 years ago

cheeselee edited this update.

3 years ago

This update can be pushed to stable now if the maintainer wishes

3 years ago

This update has been submitted for stable by cheeselee.

3 years ago

This update has been pushed to stable.

3 years ago

Please login to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

deepin-clone-1.1.4-1.fc30

dtkcore-2.0.16.1-1.fc30

dtkwidget-2.0.16.1-1.fc30

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

3 years ago

in testing

3 years ago

in stable

3 years ago

modified

3 years ago

BZ#1693055 dtkcore-2.0.15 is available

BZ#1693056 dtkwidget-2.0.15 is available

BZ#1693085 deepin-clone-1.1.3 is available

BZ#1730300 CVE-2019-13226 deepin-clone: predictable path in the Helper::temporaryMountDevice() function enabling a symlink exploit

BZ#1730301 CVE-2019-13226 deepin-clone: predictable path in the Helper::temporaryMountDevice() function enabling a symlink exploit [fedora-30]

BZ#1730306 CVE-2019-13227 deepin-clone: log file at the fixed path created as root leads to a symlink attack

BZ#1730307 CVE-2019-13227 deepin-clone: log file at the fixed path created as root leads to a symlink attack [fedora-30]

BZ#1730308 CVE-2019-13229 deepin-clone: fixed path in the Helper::getPartitionSizeInfo() function allows symlink attack

BZ#1730309 CVE-2019-13229 deepin-clone: fixed path in the Helper::getPartitionSizeInfo() function allows symlink attack [fedora-30]

BZ#1730312 CVE-2019-13228 deepin-clone: fixed path in the BootDoctor::fix() function allows symlink attack

BZ#1730313 CVE-2019-13228 deepin-clone: fixed path in the BootDoctor::fix() function allows symlink attack [fedora-30]

BZ#1730314 CVE-2019-13228 deepin-clone: fixed path in the BootDoctor::fix() function allows symlink attack [fedora-30]

deepin-clone-1.1.4-1.fc30

dtkcore-2.0.16.1-1.fc30

dtkwidget-2.0.16.1-1.fc30

Automated Test Results

ignored