shield Security update for patch

SUSE-SLE-DESKTOP-12-2015-247

The GNU patch utility was updated to 2.7.5 to fix three security issues and one non-security bug. The following vulnerabilities were fixed: * CVE-2015-1196: directory traversal flaw when handling git-style patches. This could allow an attacker to overwrite arbitrary files by tricking the user into applying a specially crafted patch. (bsc#913678) * CVE-2015-1395: directory traversal flaw when handling patches which rename files. This could allow an attacker to overwrite arbitrary files by tricking the user into applying a specially crafted patch. (bsc#915328) * CVE-2015-1396: directory traversal flaw via symbolic links. This could allow an attacker to overwrite arbitrary files by tricking the user into applying a by applying a specially crafted patch. (bsc#915329) The following bug was fixed: * bsc#904519: Function names in hunks (from diff -p) are now preserved in reject files.

• Release Date
  Jun 3 2015
• References
  Bugzilla: 915328, 904519, 915329, 913678
  CVEs: CVE-2015-1196, CVE-2015-1395, CVE-2015-1396
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Desktop 12 x86_64

• Packages
  patch
  GNU patch

  2.7.5-7.1 lock rpm lock src