Release date:
2026-10-28 04:56:04 UTC
Description:
* SECURITY UPDATE: Out-of-tree file creation on reverse-applied deletion
- debian/patches/CVE-2026-115207.patch: in intuit_diff_type(),
src/pch.c, reject an unsafe (absolute or ../) file name before
offering to reverse-apply a patch that deletes a missing file, so
patch no longer creates files outside the working directory
- CVE-2026-115207
Updated packages:
-
patch_2.7.6-7+tuxcare.els2_amd64.deb
sha:f23b3c87e76d42b024a50aff862b662d38c37df7
-
patch_2.7.6-7+tuxcare.els2_arm64.deb
sha:5dd88a1ab790b3276fa7e83c6679754824897080
-
patch_2.7.6-7+tuxcare.els2_armel.deb
sha:ee51be7f359b5efee0edfe6ea34d562d0749ebb6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
