Summary
[2.7.6-11]
- Related: #1733565, apply the patch correctly
[2.7.6-10]
- CVE-2019-13636 , Dont follow symlinks unless --follow-symlinks is given
- Resolves: #1665928, patch has a huge error output and segfaults when the file to be patched does not exist
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | patch | 0:2.7.6-11.el8 |
Vulnerabilities 1
-
Unscored —
In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affec…