VYPR

rpm package

suse/patch&distro=SUSE Linux Enterprise Module for Basesystem 15 SP5

pkg:rpm/suse/patch&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5

Vulnerabilities (1)

  • CVE-2019-20633Mar 25, 2020
    affected < 2.7.6-150000.5.6.1fixed 2.7.6-150000.5.6.1

    GNU patch through 2.7.6 contains a free(p_line[p_end]) Double Free vulnerability in the function another_hunk in pch.c that can cause a denial of service via a crafted patch file. NOTE: this issue exists because of an incomplete fix for CVE-2018-6952.