Unrated
In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and util.c.
CVE-2019-13636
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2019-13636 patch Fixed in: 2.7.6-r5
- Debian DEBIAN-CVE-2019-13636 patch Fixed in: 2.7.6-5
References
- advisory lists.debian.org
- advisory security.gentoo.org
- advisory security.netapp.com
- advisory debian.org
- package github.com
- patch git.savannah.gnu.org
- web packetstormsecurity.com
- web lists.fedoraproject.org
- web seclists.org
- web seclists.org
- web usn.ubuntu.com
- web usn.ubuntu.com