Amazon Linux 2 Security Advisory: ALASMATE-DESKTOP1.X-2024-009
Advisory Release Date: 2024-06-06 20:37 Pacific
Advisory Updated Date: 2024-06-06 20:37 Pacific
Severity:
Medium
Issue Overview:
In deletefiles in FDUPES before 2.2.0, a TOCTOU race condition allows arbitrary file deletion via a symlink. (CVE-2022-48682)
Affected Packages:
fdupes
Note:
This advisory is applicable to Amazon Linux 2 - Mate-desktop1.x Extra. Visit this page to learn more about Amazon Linux 2 (AL2) Extras and this FAQ section for the difference between AL2 Core and AL2 Extras advisories.
Issue Correction:
Run yum update fdupes to update your system.
New Packages:
aarch64:
fdupes-2.3.0-1.amzn2.aarch64
fdupes-debuginfo-2.3.0-1.amzn2.aarch64
src:
fdupes-2.3.0-1.amzn2.src
x86_64:
fdupes-2.3.0-1.amzn2.x86_64
fdupes-debuginfo-2.3.0-1.amzn2.x86_64