CVE-2022-2961 affecting package kernel for versions less than 5.15.167.1-2

CVE-2022-2961 affecting package kernel for versions less than 5.15.167.1-2. A patched version of the package is available...

patch: Malicious patch files cause ed to execute arbitrary commands

GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITORPROGRAM invocation using ed can result in code execution. This attack appear to be exploitable via a patch file processed via the patch utility. This is similar to FreeBSD's...