SUSE-SU-2015:1019-1: patch&distro=SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2015:1019-1 is a vulnerability in patch&distro=SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 03-06-2015
   PublishedVulnerability first disclosed.
2. 04-02-2026
   Last modifiedVulnerability information updated.

Description

Security update for patch The GNU patch utility was updated to 2.7.5 to fix three security issues and one non-security bug. The following vulnerabilities were fixed: * CVE-2015-1196: directory traversal flaw when handling git-style patches. This could allow an attacker to overwrite arbitrary files by tricking the user into applying a specially crafted patch. (bsc#913678) * CVE-2015-1395: directory traversal flaw when handling patches which rename files. This could allow an attacker to overwrite arbitrary files by tricking the user into applying a specially crafted patch. (bsc#915328) * CVE-2015-1396: directory traversal flaw via symbolic links. This could allow an attacker to overwrite arbitrary files by tricking the user into applying a by applying a specially crafted patch. (bsc#915329) The following bug was fixed: * bsc#904519: Function names in hunks (from diff -p) are now preserved in reject files.

No weakness data has been published for this record.