Alerts This Week
Warning Icon 1 1,220
Alerts This Week
Warning Icon 1 1,220

Ubuntu 19.10: USN-4312-1 Critical: Timeshift Admin Access Risk

ubuntu
Calendar Grey March 30, 2020
Dist Ubuntu Esm H88
Recent glitch in Timeshift allows unauthorized program execution as an admin on Ubuntu. Ensure you update promptly to maintain your security.
Timeshift could be made to run programs as an administrator.

Summary

Timeshift could be made to run programs as an administrator.

Software Description:

- timeshift: System restore utility

Details:

Matthias Gerstner discovered that Timeshift did not securely create temporary

files. An attacker could exploit a race condition in Timeshift and potentially

execute arbitrary commands as root.

Topics%20covered

Topics Covered

security advisory Ubuntu system update administrative access Timeshift

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.10:
  timeshift                       19.01+ds-2ubuntu0.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4312-1

CVE-2020-10174

Severity
critical
Lowest
Low
Medium
High
Critical

March 30, 2020

Topics%20covered

Topics Covered

security advisory Ubuntu system update administrative access Timeshift

Package Information

https://launchpad.net/ubuntu/+source/timeshift/19.01+ds-2ubuntu0.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here