CVE-2026-35352 vulnerabilities

Vulnerabilities for packages: uutils...

CVE-2026-35360 vulnerabilities

Vulnerabilities for packages: uutils...

CVE-2026-35371 vulnerabilities

Vulnerabilities for packages: uutils...

CVE-2026-35350 vulnerabilities

Vulnerabilities for packages: uutils...

CVE-2026-35371 vulnerabilities

Vulnerabilities for packages: uutils...

GHSA-9GH9-HWPR-RVQQ vulnerabilities

Vulnerabilities for packages: uutils...

GHSA-X2WV-9P67-MH9W vulnerabilities

Vulnerabilities for packages: uutils...

CVE-2026-35352 vulnerabilities

Vulnerabilities for packages: uutils...

GHSA-53GR-WMF4-8HH3 vulnerabilities

Vulnerabilities for packages: uutils...

CVE-2026-35377 vulnerabilities

Vulnerabilities for packages: uutils...

GHSA-Q6M9-XJ2W-XMRC vulnerabilities

Vulnerabilities for packages: uutils...

CVE-2026-35360 vulnerabilities

Vulnerabilities for packages: uutils...

GHSA-5V4G-VW9X-H534 vulnerabilities

Vulnerabilities for packages: uutils...

CVE-2026-35348

The sort utility in uutils coreutils is vulnerable to a process panic when using the --files0-from option with inputs containing non-UTF-8 filenames. The implementation enforces UTF-8 encoding and utilizes expect, causing an immediate crash when encountering valid but non-UTF-8 paths. This diverg...

CVE-2026-35339

The recursive mode -R of the chmod utility in uutils coreutils incorrectly handles exit codes when processing multiple files. The final return value is determined solely by the success or failure of the last file processed. This allows the command to return an exit code of 0 success even if error...

CVE-2026-35340

A flaw in the ChownExecutor used by uutils coreutils chown and chgrp causes the utilities to return an incorrect exit code during recursive operations. The final exit code is determined only by the last file processed. If the last operation succeeds, the command returns 0 even if earlier ownershi...

CVE-2026-35358

The cp utility in uutils coreutils, when performing recursive copies -R, incorrectly treats character and block device nodes as stream sources rather than preserving them. Because the implementation reads bytes into regular files at the destination instead of using mknod, device semantics are...

CVE-2026-35375

A logic error in the split utility of uutils coreutils causes the corruption of output filenames when provided with non-UTF-8 prefix or suffix inputs. The implementation utilizes tostringlossy when constructing chunk filenames, which automatically rewrites invalid byte sequences into the UTF-8...

CVE-2026-35349

A vulnerability in the rm utility of uutils coreutils allows a bypass of the --preserve-root protection. The implementation uses a path-string check rather than comparing device and inode numbers to identify the root directory. An attacker or accidental user can bypass this safeguard by using a...

CVE-2026-35365

The mv utility in uutils coreutils improperly handles directory trees containing symbolic links during moves across filesystem boundaries. Instead of preserving symlinks, the implementation expands them, copying the linked targets as real files or directories at the destination. This can lead to...