Patchwire CVEs, their patch status, and feeds to follow them

CVE-2018-20969

Fixed in a distro release EPSS 3%

do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13638, but the ! syntax is specific to ed, and is unrelated to a shell metacharacter.

Published 2019-08-16 · CVE record · OSV

Products: gnu patch

Distro releases

ReleasePackageFixed in
Alpine 3.10patch2.7.6-r6
Alpine 3.11patch2.7.6-r6
Alpine 3.12patch2.7.6-r6
Alpine 3.13patch2.7.6-r6
Alpine 3.14patch2.7.6-r6
Alpine 3.15patch2.7.6-r6
Alpine 3.16patch2.7.6-r6
Alpine 3.17patch2.7.6-r6
Alpine 3.18patch2.7.6-r6
Alpine 3.19patch2.7.6-r6
Alpine 3.20patch2.7.6-r6
Alpine 3.21patch2.7.6-r6
Alpine 3.22patch2.7.6-r6
Alpine 3.23patch2.7.6-r6
Alpine 3.24patch2.7.6-r6
Alpine 3.9patch2.7.6-r6
Amazon Linux 2patch2.7.1-12.amzn2
Chainguardpatch2.7.6-r3
Debian 10patch2.7.6-3+deb10u1
Debian 12patch2.7.6-5
Debian 13patch2.7.6-5
Debian 14patch2.7.6-5
Debian 8patch2.7.5-1+deb8u3
Debian 9patch2.7.5-1+deb9u2
Red Hat Enterprise Linux 7patch0:2.7.1-12.el7_7
Red Hat Enterprise Linux 7patch-debuginfo0:2.7.1-12.el7_7
Red Hat Enterprise Linux 8patch0:2.7.6-9.el8_0
Red Hat Enterprise Linux 8patch-debuginfo0:2.7.6-9.el8_0
Red Hat Enterprise Linux 8patch-debugsource0:2.7.6-9.el8_0
Red Hat rhel aus 7.4patch0:2.7.1-11.el7_4
Red Hat rhel aus 7.4patch-debuginfo0:2.7.1-11.el7_4
Red Hat rhel e4s 7.4patch0:2.7.1-11.el7_4
Red Hat rhel e4s 7.4patch-debuginfo0:2.7.1-11.el7_4
Red Hat rhel eus 7.5patch0:2.7.1-11.el7_5
Red Hat rhel eus 7.5patch-debuginfo0:2.7.1-11.el7_5
Red Hat rhel eus 7.6patch0:2.7.1-11.el7_6
Red Hat rhel eus 7.6patch-debuginfo0:2.7.1-11.el7_6
Red Hat rhel tus 7.4patch0:2.7.1-11.el7_4
Red Hat rhel tus 7.4patch-debuginfo0:2.7.1-11.el7_4
Ubuntu 16.04 LTSpatch2.7.5-1ubuntu0.16.04.2
Ubuntu 18.04 LTSpatch2.7.6-2ubuntu1.1
Ubuntu Pro 14.04 LTSpatch2.7.1-4ubuntu2.4+esm1
Wolfipatch2.7.6-r3