Red Hat Security Advisory

RHSA-2018:2093

patch security update

Released 2018-06-27 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server AUS (v. 7.2) patch-2.7.1-10.el7_2
Red Hat Enterprise Linux Server E4S (v. 7.2) patch-2.7.1-10.el7_2
Red Hat Enterprise Linux Server TUS (v. 7.2) patch-2.7.1-10.el7_2

Fixes 1 record

TI-2018-15808 CVE-2018-1000156 · GHSA-r9rq-mhxg-686q

GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch…

MEDIUM 42

GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITOR_PROGRAM invocation (using ed) can result in code execution.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.05329 Published 2018-04-06 Partial fix CWE-20