FreeBSD Security Advisory - Due to insufficient sanitization of the input patch stream, it is possible for a patch file to cause patch to run commands in addition to the desired SCCS or RCS commands.
a20c17eaa0d678a6581f823ffc677e815ad4e27a81210c150dd342d5e8c22101