Updated Patch packages has been released for Debian GNU/Linux 7 Extended LTS to address an issue with quoting when invoking ed

Package: patch
Version: 2.6.1-3+deb7u3
Related CVE: CVE-2019-13638
An issue with quoting has been found when invoking ed. In order to avoid this, ed is now directly started instead of calling a shell which starts ed.

For Debian 7 Wheezy, these problems have been fixed in version 2.6.1-3+deb7u3.

We recommend that you upgrade your patch packages.

Further information about Extended LTS security advisories can be found at: https://deb.freexian.com/extended-lts/