EUVD-2022-51377

Malicious code in bioql PyPI...

Medium: fdupes

Issue Overview: In deletefiles in FDUPES before 2.2.0, a TOCTOU race condition allows arbitrary file deletion via a symlink. CVE-2022-48682 Affected Packages: fdupes Issue Correction: Run dnf update fdupes --releasever 2023.4.20240528 to update your system. New Packages: aarch64: ...

FDUPES 安全漏洞

FDUPES is a program by Adrian Lopez, a personal developer, for identifying or deleting duplicate files that reside in a specified directory. A security vulnerability exists in FDUPES versions prior to 2.2.0 that stems from the presence of a TOCTOU contention condition that allows an attacker to...