Patchwire CVEs, their patch status, and feeds to follow them

CVE-2018-6952

Fixed in a distro release EPSS 8%

A double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6.

Published 2018-02-13 · CVE record · OSV

Products: gnu patch

Distro releases

ReleasePackageFixed in
Alpine 3.10patch2.7.6-r4
Alpine 3.11patch2.7.6-r4
Alpine 3.12patch2.7.6-r4
Alpine 3.13patch2.7.6-r4
Alpine 3.14patch2.7.6-r4
Alpine 3.15patch2.7.6-r4
Alpine 3.16patch2.7.6-r4
Alpine 3.17patch2.7.6-r4
Alpine 3.18patch2.7.6-r4
Alpine 3.19patch2.7.6-r4
Alpine 3.20patch2.7.6-r4
Alpine 3.21patch2.7.6-r4
Alpine 3.22patch2.7.6-r4
Alpine 3.23patch2.7.6-r4
Alpine 3.24patch2.7.6-r4
Alpine 3.7patch2.7.6-r0
Alpine 3.8patch2.7.6-r4
Alpine 3.9patch2.7.6-r4
Amazon Linux 2patch2.7.1-12.amzn2
Arch Linuxpatch2.7.6-3
Arch Linuxpatch2.7.6-7
Chainguardpatch2.7.6-r3
Debian 12patchno fix
Debian 13patchno fix
Debian 14patchno fix
Red Hat Enterprise Linux 7patch0:2.7.1-11.el7
Red Hat Enterprise Linux 7patch-debuginfo0:2.7.1-11.el7
SUSE Linux Enterprise Module for Basesystem 15 SP3patch2.7.6-150000.5.3.1
SUSE Linux Enterprise Module for Basesystem 15 SP4patch2.7.6-150000.5.3.1
SUSE Linux Enterprise Server 12 SP5patch2.7.5-8.8.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5patch2.7.5-8.8.1
Ubuntu 16.04 LTSpatchno fix
Ubuntu 18.04 LTSpatchno fix
Ubuntu 20.04 LTSpatchno fix
Ubuntu 22.04 LTSpatchno fix
Ubuntu 24.04 LTSpatchno fix
Ubuntu 25.10patchno fix
Ubuntu 26.04 LTSpatchno fix
Ubuntu 26.10patchno fix
Ubuntu Pro 14.04 LTSpatchno fix
Wolfipatch2.7.6-r3
openSUSE Leap 15.3patch2.7.6-150000.5.3.1
openSUSE Leap 15.4patch2.7.6-150000.5.3.1
openSUSE Tumbleweedpatch2.7.6-5.1