High ELSA-2019-2964 2 CVEs

Important: patch security update (Oracle Linux 7)

Published Oct 3, 2019 · Updated Oct 3, 2019

Ecosystem: Oracle Linux

Summary

[2.7.1-12]
- Fixed CVE-2018-20969, invoke ed directly instead of using the shell

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 7	patch	0:2.7.1-12.el7_7

Vulnerabilities 2

Unscored —

CVE-2018-20969

do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the…

patch patch patch patch Debian Ubuntu Azure Linux Alpine Wolfi

Aug 16, 2019
Unscored —

CVE-2019-13638

GNU patch through 2.7.6 is vulnerable to OS shell command injection that can be exploited by opening a crafted patch fi…

patch patch patch patch Debian Ubuntu Azure Linux Alpine Wolfi

Jul 26, 2019