Most recent entries from all

bdu:2018-01502

Withdrawn: BELL-CVE-2018-1000156 — CVE-2018-1000156 does not affect BellSoft software

Withdrawn by the publisher.

Withdrawn: CLEANSTART-2026-AO25763 — Security fixes in patch 2.7.6-r6

Withdrawn by the publisher.

Affected: CleanStart: patch

Package patch version 2.7.6-r6 fixes 3 vulnerabilities: CVE-2018-1000156, CVE-2019-13638, CVE-2018-20969

EUVD-2026-229208

fkie_cve-2018-1000156

GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITOR_PROGRAM invocation (using ed) can result in code execution. This attack appear to be exploitable via a patch file processed via the patch utility. This is similar to FreeBSD's CVE-2015-1418 however although they share a common ancestry the code bases have diverged over time.

GHSA-r9rq-mhxg-686q

gsd-2018-1000156

msrc_CVE-2018-1000156 — GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITOR…

msrc_CVE-2018-1000156

openSUSE-SU-2024:11151-1 — patch-2.7.6-3.43 on GA media

patch-2.7.6-3.43 on GA media

RHSA-2018:1199 — Red Hat Security Advisory: patch security update

patch: Malicious patch files cause ed to execute arbitrary commands

SUSE-SU-2018:1128-1 — Security update for patch

Security update for patch

UBUNTU-CVE-2018-1000156

Affected: Ubuntu:14.04:LTS: patch, Ubuntu:16.04:LTS: patch

VDE-2025-053 — Phoenix Contact: Multiple Vulnerabilities in PLCnext Firmware

Coreutils: heap overflow in split --line-bytes with very long lines Unprivileged overlay + shiftfs read access Nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file SSL_select_next_proto buffer overread Remote Code Execution in pypa/setuptools