VDB
GCVE-110-MAGEIA-2020-93
GCVE-110-MAGEIA-2020-93
Advisory Published
Updated patch package fixes security vulnerabilities:
* In GNU patch through 2.7.6, the following of symlinks is mishandled
in certain cases other than input files. (CVE-2019-13636).
* A vulnerability was found in GNU patch through 2.7.6 is vulnerable to
OS shell command injection that can be exploited by opening a crafted
patch file that contains an ed style diff payload with shell
metacharacters (CVE-2019-13638).
* A vulnerability was found in do_ed_script in pch.c in GNU patch through
2.7.6 does not block strings beginning with a ! character. NOTE: this
is the same commit as for CVE-2019-13638, but the ! syntax is specific to
ed, and is unrelated to a shell metacharacter (CVE-2018-20969).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | tigervnc | 0 (affected), 1.10.1-1.1.mga7 (unaffected) | — |
| Mageia | patch | 0 (affected), 2.7.6-4.1.mga7 (unaffected), 2.7.6-4.1.mga7 (unaffected), 0 (affected) | — |
References
Updated tigervnc packages fixes bugs
advisory
Browse GCVE Records
72,409 records in the GCVE database · Updated July 14, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.