High ELSA-2018-1200 1 CVE

Important: patch security update (Oracle Linux 7)

Published Apr 23, 2018 · Updated Apr 23, 2018

Ecosystem: Oracle Linux

Summary

[2.7.1-10]
- Fixed Coverity reported issues

[2.7.1-9]
- Fixed CVE-2018-1000156 - Malicious patch files cause ed to execute arbitrary commands

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 7	patch	0:2.7.1-10.el7_5

Vulnerabilities 1

Unscored —

CVE-2018-1000156

GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITOR…

patch patch patch patch Debian Ubuntu Azure Linux Alpine Wolfi

Apr 6, 2018