All errata/sisyphus_riscv64/ALT-PU-2026-2117-1
ALT-PU-2026-2117-1

Package update patch in branch sisyphus_riscv64

Version2.7.6.0.27.7623-alt2
Task#0
Published2026-02-01
Max severityMEDIUM
Severity:

Closed issues (1)

CVE-2019-20633
MEDIUM5.5

GNU patch through 2.7.6 contains a free(p_line[p_end]) Double Free vulnerability in the function another_hunk in pch.c that can cause a denial of service via a crafted patch file. NOTE: this issue exists because of an incomplete fix for CVE-2018-6952.

Published: 2020-03-25Modified: 2024-11-21
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:N/A:P
CVSS 3.xMEDIUM 5.5
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H