Advisory ROSA-SA-2024-2468

software: patch 2.7.6
OS: ROSA-CHROME

package_evr_string: patch-2.7.6-5

CVE-ID: CVE-2018-6951
BDU-ID: 2023-01652
CVE-Crit: HIGH
CVE-DESC.: A vulnerability in the intuit_diff_type() function of the pch.c component of the Patch edit transfer program is related to pointer dereferencing errors. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service
CVE-STATUS: Fixed
CVE-REV: To close, run the command: sudo dnf update patch

CVE-ID: CVE-2018-20969
BDU-ID: None
CVE-Crit: HIGH
CVE-DESC.: do_ed_script in pch.c in the GNU patch does not block strings starting with the character !
CVE-STATUS: Fixed
CVE-REV: To close, run the command: sudo dnf update patch

CVE-ID: CVE-2019-20633
BDU-ID: None
CVE-Crit: MEDIUM
CVE-DESC.: The GNU patch contains a free(p_line[p_end]) Double Free vulnerability in the another_hunk function in pch.c that can cause a denial of service via the generated patch file.
CVE-STATUS: Fixed
CVE-REV: To close, run the command: sudo dnf update patch