SUSE CVE-2018-6952

A double free exists in the anotherhunk function in pch.c in GNU patch through 2.7.6...

patch: do_ed_script in pch.c does not block strings beginning with a ! character

A flaw was found in GNU patch through version 2.7.6. Strings beginning with a exclamation mark are not blocked by default. When ed receives an exclamation mark-prefixed command line argument, the argument is executed as a shell command. The highest threat from this vulnerability is to data...

ALPINE-CVE-2018-6952

A double free exists in the anotherhunk function in pch.c in GNU patch through 2.7.6...

UBUNTU-CVE-2018-6951

An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuitdifftype function in pch.c, aka a "mangled rename" issue...