patch-2.7.1-11.el7
エラータID: AXSA:2019-3967:01
The patch program applies diff files to originals. The diff command is used to compare an original to a changed file. Diff lists the changes made to the file. A person who has the original file can then use the patch command with the diff file to add the changes to their original file (patching the file).
Security Fix(es):
* patch: Out-of-bounds access in pch_write_line function in pch.c (CVE-2016-10713)
* patch: Double free of memory in pch.c:another_hunk() causes a crash (CVE-2018-6952)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Asianux Server 7.7 Release Notes linked from the References section.
CVE-2016-10713
An issue was discovered in GNU patch before 2.7.6. Out-of-bounds access within pch_write_line() in pch.c can possibly lead to DoS via a crafted input file.
CVE-2018-6952
A double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6.
Update packages.
An issue was discovered in GNU patch before 2.7.6. Out-of-bounds access within pch_write_line() in pch.c can possibly lead to DoS via a crafted input file.
N/A
SRPMS
- patch-2.7.1-11.el7.src.rpm
MD5: 9b83c06ca86faecea4bd703b94f66f42
SHA-256: 227ac84745e6606fe7b56b68ad0189b41d23ad7c4c672d9045b349d29baeecaa
Size: 684.88 kB
Asianux Server 7 for x86_64
- patch-2.7.1-11.el7.x86_64.rpm
MD5: 179748db33517a9ef0aac01854ea7ff6
SHA-256: 385dde492e1eafff82639d8287a8e3aa4736c7196cb0c36c96e593f2e1f93329
Size: 109.44 kB