Oval Definition:	oval:org.opensuse.security:def:93613
Revision Date: 2022-06-02 Version: 1 Title: (Moderate) Description: This update for patch fixes the following issues: Security issues fixed: - CVE-2019-13636: Fixed follow symlinks unless --follow-symlinks is given. This increases the security against malicious patches (bsc#1142041). - CVE-2018-6952: Fixed swapping fakelines in pch_swap. This bug was causing a double free leading to a crash (bsc#1080985). Bugfixes: - Abort when cleaning up fails. This bug could cause an infinite loop when a patch wouldn't apply, leading to a segmentation fault (bsc#1111572). - Pass the correct stat to backup files. This bug would occasionally cause backup files to be missing when all hunks failed to apply (bsc#1198106). Family: unix Class: patch Status: Reference(s): 1080985 1111572 1142041 1149931 1198106 CVE-2016-10937 CVE-2018-6952 CVE-2019-13636 openSUSE-SU-2020:0765-1 Platform(s): Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE SUSE Linux Enterprise High Performance Computing 15 SP1 SUSE Linux Enterprise Server 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Storage 6 SUSE Manager Proxy 4.0 SUSE Manager Server 4.0 SUSE Package Hub for SUSE Linux Enterprise 15 SP1 Product(s): Definition Synopsis SUSE Package Hub for SUSE Linux Enterprise 15 SP1 is installed AND imapfilter-2.6.16-bp151.4.3.1 is installed Definition Synopsis Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE is installed AND patch-2.7.6-150000.5.3.1 is installed
BACK