ALPINE-CVE-2018-20969

doedscript in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13638, but the ! syntax is specific to ed, and is unrelated to a shell metacharacter...

FreeBSD patch(1) shell injection vulnerability

patch1 applies the differences from the patch file generated by the diff1 program to the original file to generate the patched version. Due to ineffective filtering of the input patch stream, a patch file may cause patch1 to forward certain ed1 scripts to the ed1 editor to run commands to gain...