Patchwire CVEs, their patch status, and feeds to follow them

CVE-2019-13636

Fixed in a distro release EPSS 4%

In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and util.c.

Published 2019-07-17 · CVE record · OSV

Products: gnu patch

Distro releases

ReleasePackageFixed in
AlmaLinux 8patch2.7.6-11.el8
Alpine 3.10patch2.7.6-r5
Alpine 3.11patch2.7.6-r5
Alpine 3.12patch2.7.6-r5
Alpine 3.13patch2.7.6-r5
Alpine 3.14patch2.7.6-r5
Alpine 3.15patch2.7.6-r5
Alpine 3.16patch2.7.6-r5
Alpine 3.17patch2.7.6-r5
Alpine 3.18patch2.7.6-r5
Alpine 3.19patch2.7.6-r5
Alpine 3.20patch2.7.6-r5
Alpine 3.21patch2.7.6-r5
Alpine 3.22patch2.7.6-r5
Alpine 3.23patch2.7.6-r5
Alpine 3.24patch2.7.6-r5
Alpine 3.7patch2.7.5-r3
Alpine 3.8patch2.7.6-r3
Alpine 3.9patch2.7.6-r5
Amazon Linux 2patch2.7.1-12.amzn2.0.2
Chainguardpatch2.7.6-r3
Debian 10patch2.7.6-3+deb10u1
Debian 12patch2.7.6-5
Debian 13patch2.7.6-5
Debian 14patch2.7.6-5
Debian 8patch2.7.5-1+deb8u2
Debian 9patch2.7.5-1+deb9u2
Red Hat Enterprise Linux 8patch0:2.7.6-11.el8
Red Hat Enterprise Linux 8patch-debuginfo0:2.7.6-11.el8
Red Hat Enterprise Linux 8patch-debugsource0:2.7.6-11.el8
Rocky Linux 8patch0:2.7.6-11.el8
SUSE Linux Enterprise Module for Basesystem 15 SP3patch2.7.6-150000.5.3.1
SUSE Linux Enterprise Module for Basesystem 15 SP4patch2.7.6-150000.5.3.1
SUSE Linux Enterprise Server 12 SP5patch2.7.5-8.8.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5patch2.7.5-8.8.1
Ubuntu 16.04 LTSpatch2.7.5-1ubuntu0.16.04.2
Ubuntu 18.04 LTSpatch2.7.6-2ubuntu1.1
Ubuntu Pro 14.04 LTSpatch2.7.1-4ubuntu2.4+esm1
Wolfipatch2.7.6-r3
openSUSE Leap 15.3patch2.7.6-150000.5.3.1
openSUSE Leap 15.4patch2.7.6-150000.5.3.1
openSUSE Tumbleweedpatch2.7.6-5.1