An update for patch is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The patch program applies diff files to originals. The diff command is used to compare an original to a changed file. Diff lists the changes made to the file. A person who has the original file can then use the patch command with the diff file to add the changes to their original file (patching the file).

Security Fix(es) :

* patch: do_ed_script in pch.c does not block strings beginning with a ! character (CVE-2018-20969)

* patch: OS shell command injection when processing crafted patch files (CVE-2019-13638)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that Tenable Network Security has attempted to extract the preceding description block directly from the corresponding Red Hat security advisory. Virtuozzo provides no description for VZLSA advisories. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the patch package has been released.

do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13638 , but the ! syntax is specific to ed, and is unrelated to a shell metacharacter.(CVE-2018-20969)

GNU patch through 2.7.6 is vulnerable to OS shell command injection that can be exploited by opening a crafted patch file that contains an ed style diff payload with shell metacharacters. The ed editor does not need to be present on the vulnerable system. This is different from CVE-2018-1000156 .(CVE-2019-13638)

A heap-based out-of-bounds read flaw was found in the way the patch utility parsed patch files. An attacker could potentially use this flaw to crash the patch utility by tricking it into processing crafted patch files.(CVE-2016-10713)

A double-free flaw was found in the way the patch utility processed patch files. An attacker could potentially use this flaw to crash the patch utility by tricking it into processing crafted patches.(CVE-2018-6952)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has patch packages installed that are affected by multiple vulnerabilities:

  - An issue was discovered in GNU patch before 2.7.6. Out-     of-bounds access within pch_write_line() in pch.c can     possibly lead to DoS via a crafted input file.
    (CVE-2016-10713)

  - A double free exists in the another_hunk function in     pch.c in GNU patch through 2.7.6. (CVE-2018-6952)

  - GNU patch through 2.7.6 is vulnerable to OS shell     command injection that can be exploited by opening a     crafted patch file that contains an ed style diff     payload with shell metacharacters. The ed editor does     not need to be present on the vulnerable system. This is     different from CVE-2018-1000156. (CVE-2019-13638)

  - do_ed_script in pch.c in GNU patch through 2.7.6 does     not block strings beginning with a ! character. NOTE:
    this is the same commit as for CVE-2019-13638, but the !     syntax is specific to ed, and is unrelated to a shell     metacharacter. (CVE-2018-20969)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the patch package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in GNU patch before 2.7.6.
    Out-of-bounds access within pch_write_line() in pch.c     can possibly lead to DoS via a crafted input     file.(CVE-2016-10713)

  - GNU patch 2.7.2 and earlier allows remote attackers to     cause a denial of service (memory consumption and     segmentation fault) via a crafted diff     file.(CVE-2014-9637)

  - GNU patch 2.7.1 allows remote attackers to write to     arbitrary files via a symlink attack in a patch     file.(CVE-2015-1196)

  - GNU patch through 2.7.6 is vulnerable to OS shell     command injection that can be exploited by opening a     crafted patch file that contains an ed style diff     payload with shell metacharacters. The ed editor does     not need to be present on the vulnerable system. This     is different from CVE-2018-1000156.(CVE-2019-13638)

  - do_ed_script in pch.c in GNU patch through 2.7.6 does     not block strings beginning with a ! character. NOTE:
    this is the same commit as for CVE-2019-13638, but the     ! syntax is specific to ed, and is unrelated to a shell     metacharacter.(CVE-2018-20969)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the patch package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A double free exists in the another_hunk function in     pch.c in GNU patch through 2.7.6.(CVE-2018-6952)

  - Directory traversal vulnerability in GNU patch versions     which support Git-style patching before 2.7.3 allows     remote attackers to write to arbitrary files with the     permissions of the target user via a .. (dot dot) in a     diff file name.(CVE-2015-1395)

  - An issue was discovered in GNU patch before 2.7.6.
    Out-of-bounds access within pch_write_line() in pch.c     can possibly lead to DoS via a crafted input     file.(CVE-2016-10713)

  - GNU patch 2.7.2 and earlier allows remote attackers to     cause a denial of service (memory consumption and     segmentation fault) via a crafted diff     file.(CVE-2014-9637)

  - This vulnerability has been modified since it was last     analyzed by the NVD. It is awaiting reanalysis which     may result in further changes to the information     provided.(CVE-2015-1196)

  - GNU patch through 2.7.6 is vulnerable to OS shell     command injection that can be exploited by opening a     crafted patch file that contains an ed style diff     payload with shell metacharacters. The ed editor does     not need to be present on the vulnerable system. This     is different from CVE-2018-1000156.(CVE-2019-13638)

  - do_ed_script in pch.c in GNU patch through 2.7.6 does     not block strings beginning with a ! character. NOTE:
    this is the same commit as for CVE-2019-13638, but the     ! syntax is specific to ed, and is unrelated to a shell     metacharacter.(CVE-2018-20969)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

来自 Red Hat 安全公告 2019:2798： 修补程序的更新现在可用于 Red Hat Enterprise Linux 8。 Red Hat 产品安全团队将此更新评级为具有重要安全影响。可从“参考”部分中的 CVE 链接获取通用漏洞评分系统 (CVSS) 基本分数，其针对每个漏洞给出了详细的严重性等级。 补丁程序将 diff 文件应用于原始文件。Diff 命令用于比较原始文件和更改后的文件。Diff 列出了对文件所做的更改。如果拥有原始文件，可使用带有 diff 文件的补丁命令，将更改添加到原始文件中（对文件进行修补）。 安全补丁： * 修补程序：pch.c 中的 do_ed_script 不会拦截以 ! 字符开头的字符串 (CVE-2018-20969) * 修补程序：当处理构建的修补程序文件时，发生 OS shell 命令注入 (CVE-2019-13638) 有关此安全问题的详细信息，包括其影响、CVSS 分数、致谢和其他相关信息，请参阅列于“参考”部分的 CVE 页面。

来自 Red Hat 安全公告 2019:2964： 修补程序的更新现在可用于 Red Hat Enterprise Linux 7。 Red Hat 产品安全团队将此更新评级为具有重要安全影响。可从“参考”部分中的 CVE 链接获取通用漏洞评分系统 (CVSS) 基本分数，其针对每个漏洞给出了详细的严重性等级。 补丁程序将 diff 文件应用于原始文件。Diff 命令用于比较原始文件和更改后的文件。Diff 列出了对文件所做的更改。如果拥有原始文件，可使用带有 diff 文件的补丁命令，将更改添加到原始文件中（对文件进行修补）。 安全补丁： * 修补程序：pch.c 中的 do_ed_script 不会拦截以 ! 字符开头的字符串 (CVE-2018-20969) * 修补程序：当处理构建的修补程序文件时，发生 OS shell 命令注入 (CVE-2019-13638) 有关此安全问题的详细信息，包括其影响、CVSS 分数、致谢和其他相关信息，请参阅列于“参考”部分的 CVE 页面。

补丁的更新现在可用于 Red Hat Enterprise Linux 7。Red Hat 产品安全团队将此更新评级为具有重要安全影响。可从“参考”部分中的 CVE 链接获取通用漏洞评分系统 (CVSS) 基本分数，其针对每个漏洞给出了详细的严重性等级。补丁程序将 diff 文件应用于原始文件。Diff 命令用于比较原始文件和更改后的文件。Diff 列出了对文件所做的更改。如果拥有原始文件，可使用带有 diff 文件的补丁命令，将更改添加到原始文件中（对文件进行修补）。安全修复： * 修补程序：pch.c 中的 do_ed_script 不会阻止以 a ! 字符开头的字符串 (CVE-2018-20969) * 修补程序：处理特制的修补程序文件时发生 OS shell 命令注入 (CVE-2019-13638) 有关此安全问题的详细信息，包括其影响、CVSS 分数、致谢和其他相关信息，请参阅列于“参考”部分的 CVE 页面。

GNU 修补程序到版本 2.7.6 中的 pch.c 中的 do_ed_script 不会拦截以 ! 字符开头的字符串。注意：这是与 CVE-2019-13638 相同的提交，但 ! 语法特定于 ed，与 shell 元字符无关。(CVE-2018-20969) GNU 修补程序到 2.7.6 容易受到 OS shell 命令注入攻击，可通过打开包含带有 shell 元字符的 ed style diff 有效负载构建的修补程序文件遭到利用。ed 编辑器无需呈现在漏洞系统上。这与 CVE-2018-1000156 不同。(CVE-2019-13638)

远程主机上安装的修补程序版本低于 2.8。因此，如公告 SSA:2025-256-01 所述，其会受到多个漏洞影响。

    为 Slackware 15.0 提供了用于修复安全问题的新 patch 程序包。

Tenable 已直接从修补程序安全公告中提取上述描述块。

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

來自 Red Hat 安全性公告 2019:2798： 現已提供適用於 Red Hat Enterprise Linux 8 的修補程式更新。 Red Hat 產品安全性團隊已將此更新評等為具有重要安全性影響。可從〈參照〉一節的 CVE 連結中取得每個弱點之常見弱點評分系統 (CVSS) 的基本分數，其中包含有關嚴重性評等的詳細資訊。 修補程式會將 diff 檔案套用到原始檔案。diff 命令用於比較原始檔案和變更的檔案。Diff 會列出檔案的變更。擁有原始檔案的人員可使用具 diff 檔案的修補程式命令，新增變更到原始檔案 (對檔案進行修補)。 安全性修正： * 修補程式：pch.c 中的 do_ed_script 不會攔截以 ! 字元開頭的字串 (CVE-2018-20969) * 修補程式：當處理特製的修補程式檔案時，發生 OS shell 命令插入 (CVE-2019-13638) 如需安全性問題的詳細資料，包括影響、CVSS 分數、確認及其他相關資訊，請參閱〈參照〉一節列出的 CVE 頁面。

來自 Red Hat 安全性公告 2019:2964： 現已提供適用於 Red Hat Enterprise Linux 7 的修補程式更新。 Red Hat 產品安全性團隊已將此更新評等為具有重要安全性影響。可從〈參照〉一節的 CVE 連結中取得每個弱點之常見弱點評分系統 (CVSS) 的基本分數，其中包含有關嚴重性評等的詳細資訊。 修補程式會將 diff 檔案套用到原始檔案。diff 命令用於比較原始檔案和變更的檔案。Diff 會列出檔案的變更。擁有原始檔案的人員可使用具 diff 檔案的修補程式命令，新增變更到原始檔案 (對檔案進行修補)。 安全性修正： * 修補程式：pch.c 中的 do_ed_script 不會攔截以 ! 字元開頭的字串 (CVE-2018-20969) * 修補程式：當處理特製的修補程式檔案時，發生 OS shell 命令插入 (CVE-2019-13638) 如需安全性問題的詳細資料，包括影響、CVSS 分數、確認及其他相關資訊，請參閱〈參照〉一節列出的 CVE 頁面。

現已提供適用於 Red Hat Enterprise Linux 7 的修補程式更新。Red Hat 產品安全性團隊已將此更新評等為具有重要安全性影響。可從〈參照〉一節的 CVE 連結中取得每個弱點之常見弱點評分系統 (CVSS) 的基本分數，其中包含有關嚴重性評等的詳細資訊。修補程式會將 diff 檔案套用到原始檔案。diff 命令用於比較原始檔案和變更的檔案。Diff 會列出檔案的變更。擁有原始檔案的人員之後可使用具 diff 檔案的修補程式命令，新增變更到原始檔案 (對檔案進行修補)。安全性更新：* patch：pch.c 中的 do_ed_script 未封鎖開頭為 ! 字元的字串 (CVE-2018-20969) * patch：處理特製的 patch 檔案時發生 OS 殼層命令插入 (CVE-2019-13638) 如需安全性問題的詳細資料，包括影響、CVSS 分數、致謝及其他相關資訊，請參閱〈參照〉一節列出的 CVE 頁面。

在到 2.7.6 為止的 GNU 修補程式中，pch.c 中 do_ed_script 未封鎖開頭為 ! 字元的字串。請注意：這是與適用於 CVE-2019-13638 相同的認可，但 ! 語法為 ed 特定，且與 shell 詮釋字元無關。(CVE-2018-20969) 在到 2.7.6 為止的 GNU 修補程式容易發生 OS shell 命令插入，以 shell 詮釋字元開啟含有 ed 樣式 diff 承載的特製修補程式檔案即可加以惡意利用。ed 編輯器不需顯示在易受害系統上。這與 CVE-2018-1000156 不同。(CVE-2019-13638)

遠端主機上安裝的 patch 版本比 2.8舊。因此會受到 SSA:2025-256-01 公告中提及的多個弱點影響。

    現已提供適用於 Slackware 15.0 的新修補程式套件可修正多個安全性問題。

Tenable 已直接從修補程式安全性公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
144025	Virtuozzo 7 : patch (VZLSA-2019-2964)	Nessus	Virtuozzo Local Security Checks	2020/12/10	2024/2/2	high
128739	Photon OS 3.0: Patch PHSA-2019-3.0-0025	Nessus	PhotonOS Local Security Checks	2019/9/12	2025/8/22	high
130214	Amazon Linux 2 : patch (ALAS-2019-1317)	Nessus	Amazon Linux Local Security Checks	2019/10/25	2024/4/17	high
132496	NewStart CGSL CORE 5.05 / MAIN 5.05 : patch Multiple Vulnerabilities (NS-SA-2019-0253)	Nessus	NewStart CGSL Local Security Checks	2019/12/31	2021/1/14	high
134514	EulerOS Virtualization for ARM 64 3.0.2.0 : patch (EulerOS-SA-2020-1225)	Nessus	Huawei Local Security Checks	2020/3/13	2024/3/22	high
135608	EulerOS Virtualization 3.0.2.2 : patch (EulerOS-SA-2020-1446)	Nessus	Huawei Local Security Checks	2020/4/16	2024/3/15	high
233765	Photon OS 5.0: Patch PHSA-2024-5.0-0424	Nessus	PhotonOS Local Security Checks	2025/4/2	2025/4/2	high
129086	Oracle Linux 8：修补程序 (ELSA-2019-2798)	Nessus	Oracle Linux Local Security Checks	2019/9/20	2024/10/22	high
129574	Oracle Linux 7：修补程序 (ELSA-2019-2964)	Nessus	Oracle Linux Local Security Checks	2019/10/4	2024/10/23	high
130176	CentOS 7 : patch (CESA-2019:2964)	Nessus	CentOS Local Security Checks	2019/10/24	2024/4/17	high
130282	Amazon Linux AMI : patch (ALAS-2019-1312)	Nessus	Amazon Linux Local Security Checks	2019/10/28	2024/4/16	high
264686	Slackware Linux 15.0 patch 多种漏洞SSA2025-256-01	Nessus	Slackware Local Security Checks	2025/9/13	2025/9/13	high
129086	Oracle Linux 8：修補程式 (ELSA-2019-2798)	Nessus	Oracle Linux Local Security Checks	2019/9/20	2024/10/22	high
129574	Oracle Linux 7：修補程式 (ELSA-2019-2964)	Nessus	Oracle Linux Local Security Checks	2019/10/4	2024/10/23	high
130176	CentOS 7：patch (CESA-2019:2964)	Nessus	CentOS Local Security Checks	2019/10/24	2024/4/17	high
130282	Amazon Linux AMI：patch (ALAS-2019-1312)	Nessus	Amazon Linux Local Security Checks	2019/10/28	2024/4/16	high
264686	Slackware Linux 15.0 修補程式多個弱點 (SSA2025-256-01)	Nessus	Slackware Local Security Checks	2025/9/13	2025/9/13	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high