High ELSA-2019-2798 2 CVEs

Important: patch security update (Oracle Linux 8)

Published Sep 19, 2019 · Updated Sep 19, 2019

Ecosystem: Oracle Linux

Summary

[2.7.6-9]
- CVE-2018-20969, invoke ed directly instead of using the shell

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	patch	0:2.7.6-9.el8_0

Vulnerabilities 2

Unscored —

CVE-2018-20969

do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the…

patch patch patch patch Debian Ubuntu Azure Linux Alpine Wolfi

Aug 16, 2019
Unscored —

CVE-2019-13638

GNU patch through 2.7.6 is vulnerable to OS shell command injection that can be exploited by opening a crafted patch fi…

patch patch patch patch Debian Ubuntu Azure Linux Alpine Wolfi

Jul 26, 2019