https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 02:33:37 +0000 https://vulnerability.circl.lu/vuln/cve-2018-1000156 <p>GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITOR_PROGRAM invocation (using ed) can result in code execution. This attack appear to be exploitable via a patch file processed via the patch utility. This is similar to FreeBSD&#39;s CVE-2015-1418 however although they share a common ancestry the code bases have diverged over time.</p> <p>GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITOR_PROGRAM invocation (using ed) can result in code execution. This attack appear to be exploitable via a patch file processed via the patch utility. This is similar to FreeBSD&#39;s CVE-2015-1418 however although they share a common ancestry the code bases have diverged over time.</p> https://vulnerability.circl.lu/vuln/cve-2018-1000156