ELSA-2026-96215

ELSA-2026-96215 - patch security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-11-09

Description

[2.7.6-12]
- CVE-2026-115207 patch: Filename validation bypass in reversal fallback allows file creation outside the working directory
allows file creation outside the working directory
- Resolves: RHEL-289587

Related CVEs

CVE-2026-115207

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	patch-2.7.6-12.el8_10.src.rpm	38e0588aac699b2a9495b87d328640c0237cfea021da4ee9b18ce31bcd02bb02	-	ol8_aarch64_baseos_latest
	patch-2.7.6-12.el8_10.src.rpm	38e0588aac699b2a9495b87d328640c0237cfea021da4ee9b18ce31bcd02bb02	-	ol8_aarch64_u10_baseos_patch
	patch-2.7.6-12.el8_10.aarch64.rpm	63e6be16d2718df6d770b3aee1bfe93bc319170e040d9684aeef3b509187fa5b	-	ol8_aarch64_baseos_latest
	patch-2.7.6-12.el8_10.aarch64.rpm	63e6be16d2718df6d770b3aee1bfe93bc319170e040d9684aeef3b509187fa5b	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	patch-2.7.6-12.el8_10.src.rpm	38e0588aac699b2a9495b87d328640c0237cfea021da4ee9b18ce31bcd02bb02	-	ol8_x86_64_baseos_latest
	patch-2.7.6-12.el8_10.src.rpm	38e0588aac699b2a9495b87d328640c0237cfea021da4ee9b18ce31bcd02bb02	-	ol8_x86_64_u10_baseos_patch
	patch-2.7.6-12.el8_10.x86_64.rpm	89cdb5c81a605db1fdf961b1ac2b59c7de805043dfe201059a1fd6c72af3b4bd	-	ol8_x86_64_baseos_latest
	patch-2.7.6-12.el8_10.x86_64.rpm	89cdb5c81a605db1fdf961b1ac2b59c7de805043dfe201059a1fd6c72af3b4bd	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team