{"id":"CVE-2019-12779","aliases":["DEBIAN-CVE-2019-12779","EUVD-2019-4363","GHSA-wc62-h53h-g8qf","MGASA-2020-0048","OESA-2021-1141","RHSA-2019:3610","RHSA-2020:1189","SUSE-SU-2019:1791-1","SUSE-SU-2019:1806-1","SUSE-SU-2019:1812-1","UBUNTU-CVE-2019-12779","openSUSE-SU-2019:1718-1","openSUSE-SU-2019:1752-1","openSUSE-SU-2019:1891-1","openSUSE-SU-2024:10974-1"],"status":"published","title":"libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because...","description":"libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames (under /dev/shm and /tmp) without O_EXCL.","severity":{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00655,"percentile":0.51678,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-59"],"published":"2019-06-07T19:44:25Z","modified":"2026-10-20T10:50:40Z","fixes":[{"ecosystem":"Debian:12","package":"libqb","fixed_in":["1.0.4-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libqb","fixed_in":["1.0.4-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libqb","fixed_in":["1.0.4-1"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"libqb","fixed_in":["1.0.5-1.mga7"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"libqb","fixed_in":["1.0.3-7.oe1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libqb","fixed_in":["0:1.0.3-10.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libqb-debuginfo","fixed_in":["0:1.0.3-10.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libqb-debugsource","fixed_in":["0:1.0.3-10.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libqb-devel","fixed_in":["0:1.0.3-10.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libqb-tests-debuginfo","fixed_in":["0:1.0.3-10.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libqb","fixed_in":["0:1.0.1-9.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libqb-debuginfo","fixed_in":["0:1.0.1-9.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libqb-devel","fixed_in":["0:1.0.1-9.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libqb","fixed_in":["0:1.0.1-9.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libqb-debuginfo","fixed_in":["0:1.0.1-9.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libqb-devel","fixed_in":["0:1.0.1-9.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libqb","fixed_in":["0:1.0.1-9.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libqb-debuginfo","fixed_in":["0:1.0.1-9.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libqb-devel","fixed_in":["0:1.0.1-9.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libqb","fixed_in":["0:1.0.1-9.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libqb-debuginfo","fixed_in":["0:1.0.1-9.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libqb-devel","fixed_in":["0:1.0.1-9.el7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP1","package":"libqb","fixed_in":["1.0.3+20190326.a521604-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP3","package":"libdlm","fixed_in":["4.0.7-3.3.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP3","package":"libqb","fixed_in":["1.0.3+20171226.6d62b64-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP4","package":"libdlm","fixed_in":["4.0.7-3.3.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP4","package":"libqb","fixed_in":["1.0.3+20171226.6d62b64-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"libdlm","fixed_in":["4.0.7-3.3.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"libqb","fixed_in":["1.0.3+20171226.6d62b64-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 15","package":"libqb","fixed_in":["1.0.3+20171226.6d62b64-3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.0","package":"libqb","fixed_in":["1.0.3+20171226.6d62b64-lp150.2.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"libqb","fixed_in":["1.0.3+20190326.a521604-lp151.2.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP1","package":"libqb","fixed_in":["1.0.3+20190326.a521604-bp151.2.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.4-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.4-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.4-1"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.5-1.mga7"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3-7.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-10.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libqb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-10.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libqb-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-10.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libqb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-10.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libqb-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-10.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-9.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libqb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-9.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libqb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-9.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-9.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libqb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-9.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libqb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-9.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-9.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libqb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-9.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libqb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-9.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-9.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libqb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-9.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libqb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-9.el7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP1","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3+20190326.a521604-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP3","package":"libdlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.7-3.3.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP3","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3+20171226.6d62b64-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP4","package":"libdlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.7-3.3.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP4","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3+20171226.6d62b64-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"libdlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.7-3.3.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3+20171226.6d62b64-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3+20171226.6d62b64-3.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.16.0.real-1ubuntu2","0.16.0.real-1ubuntu3","0.16.0.real-1ubuntu4","0.16.0.real-1ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.17.0-2ubuntu1","0.17.2.real-4ubuntu1","0.17.2.real-6ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.1-1ubuntu1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3+20171226.6d62b64-lp150.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3+20190326.a521604-lp151.2.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP1","package":"libqb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3+20190326.a521604-bp151.2.3.1"}]}]}],"products":[{"vendor":"clusterlabs","product":"libqb"}],"references":[{"url":"https://github.com/ClusterLabs/libqb/issues/338","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1695948","tags":["x_refsource_MISC","x_transferred","Exploit","Patch","Third Party Advisory","VDB Entry","fix","report"]},{"url":"https://github.com/ClusterLabs/libqb/releases/tag/v1.0.5","tags":["x_refsource_MISC","x_transferred","Release Notes","Third Party Advisory","advisory","report"]},{"url":"https://github.com/ClusterLabs/libqb/releases/tag/v1.0.4","tags":["x_refsource_MISC","x_transferred","Release Notes","Third Party Advisory","advisory","report"]},{"url":"http://www.securityfocus.com/bid/108691","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00017.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00027.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00031.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3610","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://security.gentoo.org/glsa/202107-03","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12779","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-wc62-h53h-g8qf"},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-12779","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0048.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25751","tags":["report"]},{"url":"https://lists.opensuse.org/opensuse-updates/2019-07/msg00083.html","tags":["web"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1141","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.1_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1718773","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3610.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12779","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12779","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1189","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.8_release_notes/index","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1189.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191791-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1137835","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12779","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191806-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1069468","tags":["report"]},{"url":"https://bugzilla.suse.com/1074327","tags":["report"]},{"url":"https://bugzilla.suse.com/1098449","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191812-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-12779","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XZULCDIKWQRWYN77SCOGRQMMYMT62MM3/#XZULCDIKWQRWYN77SCOGRQMMYMT62MM3","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LJ3QR2QSCYHVQGSCKZRFXB33KK4AAVYH/#LJ3QR2QSCYHVQGSCKZRFXB33KK4AAVYH","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MNI5EGA4ITHBYFWJQONAG73DSNBCMD5G/#MNI5EGA4ITHBYFWJQONAG73DSNBCMD5G","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-12779","description":"libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames (under /dev/shm and /tmp) without O_EXCL.","status":"published","published":"2019-06-07T19:44:25Z","modified":"2024-08-04T23:32:54.924Z","updated_at":"2026-11-02T14:20:24.025419Z"}],"euvd":[{"id":"EUVD-2019-4363","description":"libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames (under /dev/shm and /tmp) without O_EXCL.","status":"published","published":"2019-06-07T19:44:25Z","modified":"2024-08-04T23:32:54Z","updated_at":"2026-11-03T02:40:44.884887Z"}],"ghsa":[{"id":"GHSA-wc62-h53h-g8qf","title":"libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because...","description":"libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames (under /dev/shm and /tmp) without O_EXCL.","status":"published","published":"2022-05-24T16:47:37Z","modified":"2024-04-04T00:54:30Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T14:55:53.307931Z"}],"nvd":[{"id":"CVE-2019-12779","description":"libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames (under /dev/shm and /tmp) without O_EXCL.","status":"published","published":"2019-06-07T20:29:00.857Z","modified":"2026-06-17T02:15:26.347Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.6,"vector":"AV:L/AC:L/Au:N/C:N/I:C/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T14:05:16.285679Z"}],"osv":[{"id":"CVE-2019-12779","description":"libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames (under /dev/shm and /tmp) without O_EXCL.","status":"published","published":"2019-06-07T20:29:00.857Z","modified":"2026-10-20T10:50:40.912312875Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:10.718934Z"},{"id":"DEBIAN-CVE-2019-12779","description":"libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames (under /dev/shm and /tmp) without O_EXCL.","status":"published","published":"2019-06-07T20:29:00.857Z","modified":"2026-09-21T07:00:27.864139788Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:31.467893Z"},{"id":"OESA-2021-1141","title":"libqb security update","description":"libqb provides high-performance, reusable features for client-server architecture, such as logging, tracing, inter-process communication (IPC), and polling.\r\n\r\nSecurity Fix(es):\r\n\r\nlibqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames (under /dev/shm and /tmp) without O_EXCL.(CVE-2019-12779)","status":"published","published":"2021-04-07T11:04:23Z","modified":"2026-08-18T01:15:28.508722694Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2019:3610","title":"Red Hat Security Advisory: libqb security and bug fix update","status":"published","published":"2024-09-16T02:37:58Z","modified":"2026-01-14T11:03:25.715343Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:1189","title":"Red Hat Security Advisory: libqb security update","status":"published","published":"2024-09-16T02:38:05Z","modified":"2026-06-26T10:47:15Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"UBUNTU-CVE-2019-12779","description":"libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames (under /dev/shm and /tmp) without O_EXCL.","status":"published","published":"2019-06-07T20:29:00Z","modified":"2026-04-22T12:08:36.308717Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:19.202697Z"},{"id":"MGASA-2020-0048","title":"Updated libqb packages fix security vulnerability","description":"Insecure treatment of IPC temporary files which could allow a local\nattacker to overwrite privileged system files (CVE-2019-12779).\n","status":"published","published":"2020-01-28T07:52:40Z","modified":"2026-04-16T04:40:56.9990906Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2019:1718-1","title":"Security update for libqb","description":"This update for libqb fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2019-12779: Fixed an issue where a local attacker could overwrite privileged system files (bsc#1137835).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-07-19T06:03:21Z","modified":"2026-02-04T03:19:53.461222Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2019:1752-1","title":"Security update for libqb","description":"This update for libqb fixes the following issue:\n\nSecurity issue fixed:\t  \n\n- CVE-2019-12779: Fixed an insecure treatment of IPC temporary files which could\n  have allowed a local attacker to overwrite privileged system files (bsc#1137835).\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","status":"published","published":"2019-07-20T06:25:14Z","modified":"2026-02-04T04:03:25.585032Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2019:1891-1","title":"Security update for libqb","description":"This update for libqb fixes the following issue:\n\nSecurity issue fixed:\t  \n\n- CVE-2019-12779: Fixed an insecure treatment of IPC temporary files which could\n  have allowed a local attacker to overwrite privileged system files (bsc#1137835).\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.\nThis update was imported from the openSUSE:Leap:15.1:Update update project.","status":"published","published":"2019-08-14T14:35:04Z","modified":"2026-02-04T03:56:39.145238Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2024:10974-1","title":"doxygen2man-2.0.2+20201203.def947e-1.6 on GA media","description":"These are all security issues fixed in the doxygen2man-2.0.2+20201203.def947e-1.6 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:13:08.110837Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2019:1791-1","title":"Security update for libqb","description":"This update for libqb fixes the following issue:\n\nSecurity issue fixed:\t  \n\n- CVE-2019-12779: Fixed an insecure treatment of IPC temporary files which could\n  have allowed a local attacker to overwrite privileged system files (bsc#1137835).\n","status":"published","published":"2019-07-09T14:51:30Z","modified":"2026-02-04T04:14:00.255172Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:1806-1","title":"Security update for libdlm, libqb","description":"This update for libdlm, libqb fixes the following issues:\n\nlibqb to version 1.0.3:\n\n- CVE-2019-12779: Fixed an insecure treatment of IPC temporary files which could\n  have allowed a local attacker to overwrite privileged system files (bsc#1137835).\n- Enabled use of filesystem sockets for linux (fate#323415).\n- Fixed logging with newer binutils version (bsc#1074327).\n\nlibdlm:\n\n- Explicitly used and linked libstonithd from libpacemaker3 (bsc#1098449).\n","status":"published","published":"2019-07-10T09:29:09Z","modified":"2026-02-04T04:15:19.592501Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:1812-1","title":"Security update for libqb","description":"This update for libqb fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2019-12779: Fixed an issue where a local attacker could overwrite privileged system files (bsc#1137835).\n","status":"published","published":"2019-07-10T13:59:31Z","modified":"2026-02-04T03:39:52.687394Z","updated_at":"2026-11-02T15:53:46.44301Z"}]}}