Red Hat Security AdvisoryRHSA-2018:1199
patch security update
Released 2018-04-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) patch-2.6-8.el6_9
- Red Hat Enterprise Linux HPC Node (v. 6) patch-2.6-8.el6_9
- Red Hat Enterprise Linux Server (v. 6) patch-2.6-8.el6_9
- Red Hat Enterprise Linux Workstation (v. 6) patch-2.6-8.el6_9
Fixes 1 record
Priority MEDIUM 42
GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITOR_PROGRAM invocation (using ed) can result in code execution.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.05329 · Published 2018-04-06 · Partial fix CWE-20
