Launchpad.net

CVE 2019-13636

In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and util.c.

See the CVE page on Mitre.org for more details.