Unrated
do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13...
CVE-2018-20969
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2018-20969 patch Fixed in: 2.7.6-r6
- Debian DEBIAN-CVE-2018-20969 patch Fixed in: 2.7.6-5
Original description The description as published by the source.
References
- advisory packetstormsecurity.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- package github.com
- patch git.savannah.gnu.org
- patch seclists.org