Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Scientific Linux SL6: SLSA-2018-1199-1 High Risk of Command Exploitation

Calendar Apr 23, 2018 • User Avatar LinuxSecurity Advisories
1 min read
Scientific Large Esm H500
Topics%20covered

Topics Covered

security advisory security fix patch arbitrary commands x86_64 malicious file SL6
patch: Malicious patch files cause ed to execute arbitrary commands (CVE-2018-1000156) SL6 x86_64 patch-2.6-8.el6_9.x86_64.rpm patch-debuginfo-2.6-8.el6_9.x86_64.rpm i386 patch-2.6-8.el6_9.i686.rpm patch-debuginfo-2.6-8.el6_9.i686.rpm - Scientific Linux Development Team 
Synopsis:          Important: patch security update
Advisory ID:       SLSA-2018:1199-1
Issue Date:        2018-04-23
CVE Numbers:       CVE-2018-1000156
--

Patch should be installed because it is a common way of upgrading
applications.

Security Fix(es):

* patch: Malicious patch files cause ed to execute arbitrary commands
(CVE-2018-1000156)
--

SL6
  x86_64
    patch-2.6-8.el6_9.x86_64.rpm
    patch-debuginfo-2.6-8.el6_9.x86_64.rpm
  i386
    patch-2.6-8.el6_9.i686.rpm
    patch-debuginfo-2.6-8.el6_9.i686.rpm

- Scientific Linux Development Team
Your message here