GNU patch 2.8.1 released, fixing CVE-2026-115207
Original title: GNU patch 2.8.1 released, fixes CVE-2026-115207
An oss-security note points to a GNU announcement, but the feed snippet gives no flaw details.
Alan Coopersmith forwarded a GNU bug-patch list announcement that GNU patch 2.8.1 is released and fixes CVE-2026-115207. The available text does not describe the vulnerability, affected versions, or exploitation status.
Unconfirmed: The snippet does not state the bug's impact, affected versions, or whether it is exploited.
- The post is dated October 26.
- It links to the GNU bug-patch mailing list announcement.
| Product | Affected | Fixed in |
|---|---|---|
| GNU patch | — | 2.8.1 |
- 1.Upgrade to GNU patch 2.8.1.
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-115207 | Arbitrary file creation in GNU patch reversal | 5.5 | — |
From the original article
Posted by Alan Coopersmith on Oct 26 https://lists. gnu. org/archive/html/bug-patch/2026-10/msg00014.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.