Red Hat Security AdvisoryRHSA-2018:1200
patch security update
Released 2018-04-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) patch-2.7.1-10.el7_5
- Red Hat Enterprise Linux ComputeNode (v. 7) patch-2.7.1-10.el7_5
- Red Hat Enterprise Linux Server (v. 7) patch-2.7.1-10.el7_5
- Red Hat Enterprise Linux Workstation (v. 7) patch-2.7.1-10.el7_5
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) patch-2.7.1-10.el7_5
Fixes 1 record
Priority MEDIUM 42
GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITOR_PROGRAM invocation (using ed) can result in code execution.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.05329 · Published 2018-04-06 · Partial fix CWE-20
