Patch

by GnuWin32v2.5.9-7

Last updated Jul 27, 2026

Patch: apply a diff file to an original.

Install with winget

$ winget install --id GnuWin32.Patch --exact --version 2.5.9-7

Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.

Built by Pckgr

For IT teams

Deploy this app to your whole fleet with Pckgr RMM.

App deployment, patching, and remote support in one place. Push this app to every device you manage, keep it patched automatically, and see new CVEs the moment they land. Works with Intune or fully standalone.

Free for up to 5 devices.

About

'patch' takes a patch file containing a difference listing produced by diff and applies those differences to one or more original files, producing patched versions.

Installers · v2.5.9-7

Architecture	Type	Scope	Install	Download
x86	ZIP archive	-		Direct

Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.

Security

3 known CVEs via NVD

medium5.5Fix availableCVE-2026-56289affects <=2.8.0Jul 9, 2026
GNU patch is vulnerable to a denial of service (DoS) due to improper validation of hunk (single block of changes in diff) line offsets in unified-diff input. A specially crafted patch can specify an extremely large line number, causing the application to enter an effectively inf...
Patch
medium5.5Fix availableCVE-2026-56288affects <=2.8.0Jul 9, 2026
GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling of consecutive end-of-file newline markers can corrupt internal hunk (single block of changes in diff) data structures, causing the application to...
Patch
medium5.5Patched in wingetCVE-2021-45261affects v2.7Dec 22, 2021
An Invalid Pointer vulnerability exists in GNU patch 2.7 via the another_hunk function, which causes a Denial of Service.
Vendor advisory

Source: NVD, updated 4h ago. Patch status is best-effort: NVD's fix version is compared against the latest version in winget, but the two version formats don't always align. Confirm with the vendor advisory before treating any specific build as safe.

See a CVE that affects your fleet? Pckgr RMM flags vulnerable devices and pushes the patched version automatically.

Related apps

GnuWin32: MakeGnuWin32
GnuWin32.Makev3.81
GnuWin32.Make
GnuWin32: GzipGnuWin32
GnuWin32.Gzipv1.3.12-1
gzip (GNU zip) is a compression utility designed to be a replacement for compress. Its main advantages over compress are much better compression and freedom from patented algorithms.
GnuWin32: GrepGnuWin32
GnuWin32.Grepv2.5.4
Grep searches one or more input files for lines containing a match to a specified pattern. By default, grep prints the matching lines.
GnuWin32: GetTextGnuWin32
GnuWin32.GetTextv0.14.4
GetText: library and tools for native language support
GnuWin32: UnZipGnuWin32
GnuWin32.UnZipv5.51-1
UnZip is an extraction utility for archives compressed in .zip format (also called "zipfiles").
GnuWin32: FlexGnuWin32
GnuWin32.Flexv2.5.4a
fast lexical analyzer generator

Frequently asked questions

How do I install Patch on Windows?

Open Windows Terminal, PowerShell, or Command Prompt and run: winget install --id GnuWin32.Patch --exact --version 2.5.9-7. winget downloads the installer from GnuWin32 and runs it. Requires Windows 10 (1809+) or Windows 11.

How do I install Patch silently for unattended deployment?

Add --silent and accept the agreements upfront: winget install --id GnuWin32.Patch --exact 2.5.9-7 --silent --accept-package-agreements --accept-source-agreements. This is the variant Intune, Configuration Manager, and other deployment tools should use.

How do I uninstall Patch via winget?

Run: winget uninstall --id GnuWin32.Patch --exact. Add --silent for unattended uninstalls. winget will use the registered uninstaller from Patch's Apps & Features entry.

Is Patch free?

Patch is distributed under Multiple licenses. Refer to the publisher (https://gnuwin32.sourceforge.net/packages/patch.htm) for the full license terms - Wingetly itself does not charge for installation.

Does Patch work on Windows 10?

Yes, as long as your Windows 10 build supports winget (1809 or newer). winget ships with App Installer on Windows 10/11 and pulls Patch directly from the publisher.

How do I keep Patch up to date?

Run winget upgrade --id GnuWin32.Patch --exact, or winget upgrade --all to update everything winget tracks. We index 1 version of Patch from microsoft/winget-pkgs.