CVE-2015-1395: Directory traversal vulnerability in GNU patch versions which support Git-style patching before 2.7.3 allow...

Security readout for executives and security teams

CVE-2015-1395 is a GNU patch flaw where a malicious patch file can escape the intended directory and write files elsewhere as the user running patch. The practical risk is highest on developer workstations, build servers, or automation that applies patches from untrusted sources. Exposure is likely where GNU patch before 2.7.3 is installed and used to apply patches from email, issue trackers, dependency workflows, package builds, or external contributors. Systems that only apply trusted patches have lower practical exposure, but should still be upgraded. Prioritize remediation on build infrastructure and developer systems that process external patches. This is not shown as actively exploited in the bundle, but arbitrary file write in build workflows can create meaningful supply-chain and integrity risk. Mitigation focus: Upgrade GNU patch to version 2.7.3 or a vendor-fixed package.; Apply relevant Debian, Fedora, Ubuntu, or Red Hat package updates where applicable.; Avoid applying untrusted patch files in privileged accounts or sensitive directories..

Prepared

Jun 12, 2026, 21:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.