Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-13636: In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and util.c. 1732781: CVE-2019-13636 patch: the following of symlinks in inp.c and util.c is mishandled in cases other than input files
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | patch | 0:2.7.1-12.amzn2.0.2 |
| Amazon Linux · 2 | patch-debuginfo | 0:2.7.1-12.amzn2.0.2 |
Vulnerabilities 1
-
Unscored —
In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affec…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2019-13636.html