github jbruchon/jdupes v1.15.0
jdupes-1.15.0 (UPDATE IMMEDIATELY)

  • Disable single file addition on the command line for safety

PLEASE UPDATE YOUR REPOSITORIES AND BINARIES IMMEDIATELY IF AT ALL POSSIBLE.

This release disables the ability to add individual files on the command line until it can be fixed and is confirmed to behave safely. This bug should be present in every jdupes starting with v1.9.

A potential data loss bug was discovered where a file added by a recursive path and an explicit specification of that file would cause it to be loaded into the file tree twice and match itself. Any dot-directory in a path can trigger this, as well as the -H option, if the file is added through both routes. With hard link matching disabled, the risk of loss is lower. The underlying issue is that adding a file explicitly has no checks to ensure the file isn't already in the file tree before adding the file.

The reason it was not caught sooner is that it's an unlikely bug to trigger in the first place and it is strongly mitigated against in the default state (no -H specified), so the real-world potential for loss in most use cases was already extremely low.

latest releases: v1.20.1, v1.20.0, v1.19.2...
17 months ago