ELSA-2026-84595

Type: Security

Severity: Moderate

Published: 2026-10-19

Oracle Linux 9

[36.1-1] - CVE-2026-91202 - Don't de-reference a symlink when creating a directory (RHEL-263134) - CVE-2026-91205 - Don't de-reference a symlink when creating a directory (RHEL-263141)

Evidence and freshness

Data current

Last supporting evidence check: 2026-10-23T07:36:47.492Z UTC

Official vendor advisory

Oracle Linux 9

View source

Observed 2026-10-23T07:36:47.492Z UTC. Last updated 2026-10-21T15:20:47.722Z UTC.

Upstream Advisory

View official advisory

Affected Packages

cockpit-files 36.1-1.el9_8

Interested in being alerted when there are new versions of cockpit-files? Set up an alert.