Mageia Advisories for package patch

MGASA-2020-0093 - Updated patch packages fix security vulnerabilities

Fri, 21 Feb 2020 23:06:01 GMT

Publication date: 21 Feb 2020
Type: security
Affected Mageia releases : 7
CVE: CVE-2019-13636 , CVE-2019-13638 , CVE-2018-20969

Description

Updated patch package fixes security vulnerabilities:

* In GNU patch through 2.7.6, the following of symlinks is mishandled
  in certain cases other than input files. (CVE-2019-13636).

* A vulnerability was found in GNU patch through 2.7.6 is vulnerable to
  OS shell command injection that can be exploited by opening a crafted
  patch file that contains an ed style diff payload with shell
  metacharacters (CVE-2019-13638).

* A vulnerability was found in do_ed_script in pch.c in GNU patch through
  2.7.6 does not block strings beginning with a ! character. NOTE: this
 is the same commit as for CVE-2019-13638, but the ! syntax is specific to
  ed, and is unrelated to a shell metacharacter (CVE-2018-20969).

References

SRPMS

7/core

patch-2.7.6-4.1.mga7

MGASA-2018-0448 - Updated patch packages fix security vulnerabilities

Thu, 15 Nov 2018 22:04:32 GMT

Publication date: 15 Nov 2018
Type: security
Affected Mageia releases : 6
CVE: CVE-2018-6951 , CVE-2018-6952

Description

A NULL pointer dereference flaw was found in the way patch processed
patch files. An attacker could potentially use this flaw to crash patch
by tricking it into processing crafted patches (CVE-2018-6951).

A double-free flaw was found in the way the patch utility processed
patch files. An attacker could potentially use this flaw to crash the
patch utility by tricking it into processing crafted patches
(CVE-2018-6952).

References

SRPMS

6/core

patch-2.7.6-1.1.mga6

MGASA-2018-0277 - Updated patch packages fix security vulnerabilities

Thu, 14 Jun 2018 18:14:36 GMT

Publication date: 14 Jun 2018
Type: security
Affected Mageia releases : 5 , 6
CVE: CVE-2016-10713 , CVE-2018-6951 , CVE-2018-1000156

Description

Updated patch package fixes security vulnerabilities:

It was discovered that Patch incorrectly handled certain files. An attacker
could possibly use this to cause a denial of service (CVE-2016-10713).

It was discovered that Patch incorrectly handled certain inputs. An attacker
could possibly use this to cause a denial of service (CVE-2018-6951).

It was discovered that Patch incorrectly handled certain input validation. An
attacker could possibly use this to execute arbitrary code (CVE-2018-1000156).

References

SRPMS

5/core

patch-2.7.6-1.mga5

6/core

patch-2.7.6-1.mga6

MGAA-2015-0066 - Updated patch package fixes symlink regression

Thu, 23 Jul 2015 09:39:14 GMT

Publication date: 23 Jul 2015
Type: bugfix
Affected Mageia releases : 4 , 5

Description

The update to the patch package in MGASA-2015-0068 broke the patch
command's ability to patch files inside of a directory whose name was a
symlink (savannah#44251).

The patch package has been updated to version 2.7.5 to fix this
regression.

References

SRPMS

4/core

patch-2.7.5-1.mga4

5/core

patch-2.7.5-1.mga5

MGASA-2015-0068 - Updated patch packages fix security vulnerabilities

Tue, 17 Feb 2015 18:38:13 GMT

Publication date: 17 Feb 2015
Type: security
Affected Mageia releases : 4
CVE: CVE-2014-9637 , CVE-2015-1196 , CVE-2015-1395

Description

Updated patch package fixes security vulnerabilities:

It was reported that a crafted diff file can make patch eat memory and later
segfault (CVE-2014-9637).

It was reported that the versions of the patch utility that support Git-style
patches are vulnerable to a directory traversal flaw. This could allow an
attacker to overwrite arbitrary files by applying a specially crafted patch,
with the privileges of the user running patch (CVE-2015-1395).

GNU patch before 2.7.4 allows remote attackers to write to arbitrary files via
a symlink attack in a patch file (CVE-2015-1196).

References

SRPMS

4/core

patch-2.7.4-1.mga4