A double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6.Referenceshttps://savannah.gnu.org/bugs/index.php?53133http://www.securityfocus.com/bid/103047https://security.gentoo.org/glsa/201904-17https://access.redhat.com/errata/RHSA-2019:2033
