| Package | Affected versions | Patched versions |
|---|---|---|
| patch | < 2.7.4 | 2.7.4 |
A Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can write to arbitrary files via a symlink attack in a patch file. NOTE: this issue exists because of an incomplete fix for CVE-2015-1196.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free