CVE-2019-13229: deepin-clone before 1.1.3 uses a fixed path /tmp/partclone.log in the Helper::getPartitionSizeInfo() functi...

Security readout for executives and security teams

CVE-2019-13229 is a local file-handling flaw in deepin-clone before 1.1.3. A regular user could abuse a predictable temporary log path to make a root-run process create or overwrite files elsewhere. The content written is not attacker-controlled, which limits impact but does not remove operational risk. Exposure is most likely on Linux systems with deepin-clone installed, especially versions before 1.1.3 or distro packages predating the Fedora and upstream fixes. This is not a remote network vulnerability; it requires local user access. Treat this as a moderate-priority local privilege and integrity risk. It is unlikely to drive internet-wide emergency response, but it matters on shared workstations, build hosts, support systems, and any environment where untrusted local users can run software. Mitigation focus: Upgrade deepin-clone to 1.1.3 or a vendor-fixed package.; Apply relevant Linux distribution security updates, including Fedora guidance where applicable.; Check SUSE, Fedora, and upstream guidance for package-specific remediation details..

Prepared

Jun 6, 2026, 20:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.