Package: jdupes Version: 1.12-1 Severity: grave Tags: upstream patch Justification: causes non-serious data loss
>From the upstream in a private message: jdupes inherited interactive deletion from fdupes and there were zero input safeguards. A user tried to use ranges "2-4" and files 3 and 4 were deleted, not preserved. This is a major data loss concern because the behavior is destructive and contrary to user expectations. In the latest commit I've placed heavy safeguards in the interactive deletion code that should prevent all of the invalid input scenarios I can conceive. The commit 4888e85[1] can and should be immediately applied to ALL versions of jdupes that are being distributed. It should cleanly apply and work without modification to every remotely recent version spanning several years back. [1] https://codeberg.org/jbruchon/jdupes/commit/4888e85