Vulnerability Database · Debian · patch · Version
patch 2.8-2
2.8-2 is affected by 8 vulnerabilities.
The vulnerabilities that cover this exact version are listed below with the fixed version to move to.
Critical 0 High 0 Medium 3 Low 0 Unrated 5
-
Database updated 23/Oct/2026
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Vulnerabilities affecting this version
patch 2.8-2 vulnerabilities
8 vulnerabilities cover patch 2.8-2. Open the full list in the database.
| Vulnerability | Severity | Fixed version | Disclosed |
|---|---|---|---|
| NULL Pointer Dereference Vulnerability in GNU Patch Package | 5.5 medium | No fix published | 09 Jul 2026 |
| Denial of Service Vulnerability in GNU Patch Package | 5.5 medium | No fix published | 09 Jul 2026 |
| Invalid Pointer Vulnerability in GNU patch | 5.5 medium | No fix published | 22 Dec 2021 |
| Denial of Service Vulnerability in GNU Patch Package | N/A unrated | No fix published | 22 Dec 2021 |
| Double Free Vulnerability in GNU Patch Package: CVE-2018-6952 | N/A unrated | No fix published | 13 Feb 2018 |
| Segmentation Fault Vulnerability in GNU Patch Package Leading to Denial of Service | N/A unrated | No fix published | 13 Feb 2018 |
| Directory Traversal Vulnerability in GNU patch | N/A unrated | No fix published | 11 Mar 2011 |
| Directory Traversal Vulnerability in GNU Patch Package | N/A unrated | No fix published | 11 Mar 2011 |
Looking for another version, or everything Vulert holds for patch?
Questions
About patch 2.8-2
Is patch 2.8-2 vulnerable?
Yes. 8 vulnerabilities in the Vulert database cover patch 2.8-2: 0 critical, 0 high, 3 medium and 0 low, plus 5 not yet rated. Each entry above names the fixed version to move to.
How do I monitor patch for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the patch version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.