Search
Search is not available in local development.
Run npx pagefind --site __site after building to enable it.
JLSEC-2026-18

JLSEC-2026-18

SourceEditHistoryOSVJSON (OSV)
JLSEC Published
Modified
Affected Packages
patch_jll < 2.8.0+0
Aliases / Upstream
CVE-2019-20633

GNU patch through 2.7.6 contains a free(pline[pend]) Double Free vulnerability in the function another_hunk in pch.c that can cause a denial of service via a crafted patch file. NOTE: this issue exists because of an incomplete fix for CVE-2018-6952.

References