GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling of consecutive end-of-file newline markers can corrupt internal hunk (single block of changes in diff) data structures, causing the application to pass a NULL pointer to fwrite() during patch processing.
An attacker can trigge…
GNU patch is vulnerable to a denial of service (DoS) due to improper validation of hunk (single block of changes in diff) line offsets in unified-diff input. A specially crafted patch can specify an extremely large line number, causing the application to enter an effectively infinite processing loop while attempting to locate the requested position.
This re…
VuXML only (0) · listed, port not fixed yet
None. pkg audit reports nothing for this version.
Fixed (1)
VuXML entries whose affected range this version has left.
Avoid conflict with /usr/bin/patch by installing the version from the ports collection as "gpatch". Beautify the descriptions. Update the ports which depend on this version.
PR: 23702
Submitted by: Christian Weisgerber <naddy@mips.inka.de>
Reviewed by: knu
Remove manpages define in MAN? fom PLIST for all the devel ports. I'm going to leave p5-* alone for now (where the version stuff is going to land is still unclear).