PT-2019-5127 · Gnu+7 · Gnu Patch+7

Imre Rad · Publicado 2018-06-08 · Atualizado 2026-04-01 · CVE-2019-13636

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions GNU patch versions prior to 2.7.7

Description The issue is related to the mishandling of symlinks in certain cases, affecting inp.c and util.c. This can potentially allow a remote attacker to impact data integrity.

Recommendations For GNU patch versions prior to 2.7.7, update to version 2.7.7 or later to resolve the issue.

Correção

Link Following

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

ALSA-2020:1852

ALT-PU-2018-1872

AZL-35105

AZL-6789

BDU:2020-01794

CESA-2020_1852

CLEANSTART-2026-NA21773

CLEANSTART-2026-PM79547

CVE-2019-13636

DLA-1856-1

DSA-4489-1

MGASA-2020-0093

OPENSUSE-SU-2022_1925-1

OPENSUSE-SU-2024:12060-1

RHSA-2020:1852

RHSA-2020_1852

RLSA-2020:1852

SUSE-SU-2022:1925-1

SUSE-SU-2022:1932-1

USN-4071-1

USN-4071-2

Produtos afetados

Alt Linux

Almalinux

Centos

Gnu Patch

Red Hat

Rocky Linux

Suse

Ubuntu

Referências · 74

• https://github.com/irsl/gnu-patch-vulnerabilities · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-NA21773 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-PM79547.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-NA21773.json · Nota
• https://ubuntu.com/security/CVE-2019-13636 · Aviso do Fabricante
• https://osv.dev/vulnerability/DSA-4489-1 · Aviso do Fabricante
• https://bugzilla.suse.com/1092500 · Nota
• https://osv.dev/vulnerability/ALPINE-CVE-2019-13636 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-13636 · Aviso do Fabricante
• https://git.savannah.gnu.org/cgit/patch.git/commit/?id=dce4683cbbe107a95f1f0d45fabc304acfb5d71a · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-4071-2 · Aviso do Fabricante
• https://osv.dev/vulnerability/CLEANSTART-2026-NA21773 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2022/suse-su-20221932-1 · Nota
• https://osv.dev/vulnerability/AZL-35105 · Aviso do Fabricante
• https://errata.rockylinux.org/RLSA-2020:1852 · Aviso do Fabricante