Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2020-1852

Опубликовано: 05 мая 2020
Источник: oracle-oval
Платформа: Oracle Linux 8

Описание

ELSA-2020-1852: patch security and bug fix update (MODERATE)

[2.7.6-11]

  • Related: #1733565, apply the patch correctly

[2.7.6-10]

  • CVE-2019-13636 , Dont follow symlinks unless --follow-symlinks is given
  • Resolves: #1665928, patch has a huge error output and segfaults when the file to be patched does not exist

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

patch

2.7.6-11.el8

Oracle Linux x86_64

patch

2.7.6-11.el8

Связанные CVE

Связанные уязвимости

CVSS3: 5.9
ubuntu
почти 6 лет назад

In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and util.c.

CVSS3: 5.9
redhat
почти 6 лет назад

In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and util.c.

CVSS3: 5.9
nvd
почти 6 лет назад

In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and util.c.

CVSS3: 5.9
msrc
почти 5 лет назад

Описание отсутствует

CVSS3: 5.9
debian
почти 6 лет назад

In GNU patch through 2.7.6, the following of symlinks is mishandled in ...