Summary
[2.7.6-12]
- CVE-2026-115207 patch: Filename validation bypass in reversal fallback allows file creation outside the working directory
allows file creation outside the working directory
- Resolves: RHEL-289587
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | patch | 0:2.7.6-12.el8_10 |
Vulnerabilities 1
-
Medium 5.5
Patch: filename validation bypass in reversal fallback allows file creation outside the working directory
A flaw was found in GNU patch. An attacker can achieve arbitrary file creation outside the intended working directory by enticing a user or automated workflow to apply a specially crafted patch file. Due to missing validation during automatic patch reversal, …