CVE-2026-35360 vulnerabilities

Vulnerabilities for packages: uutils...

GHSA-X2WV-9P67-MH9W vulnerabilities

Vulnerabilities for packages: uutils...

GHSA-Q6M9-XJ2W-XMRC vulnerabilities

Vulnerabilities for packages: uutils...

CVE-2026-35377 vulnerabilities

Vulnerabilities for packages: uutils...

CVE-2026-35371 vulnerabilities

Vulnerabilities for packages: uutils...

CVE-2026-35350 vulnerabilities

Vulnerabilities for packages: uutils...

CVE-2026-35371 vulnerabilities

Vulnerabilities for packages: uutils...

GHSA-X2WV-9P67-MH9W vulnerabilities

Vulnerabilities for packages: uutils...

CVE-2026-35350 vulnerabilities

Vulnerabilities for packages: uutils...

CVE-2026-35352 vulnerabilities

Vulnerabilities for packages: uutils...

GHSA-9GH9-HWPR-RVQQ vulnerabilities

Vulnerabilities for packages: uutils...

GHSA-53GR-WMF4-8HH3 vulnerabilities

Vulnerabilities for packages: uutils...

GHSA-5V4G-VW9X-H534 vulnerabilities

Vulnerabilities for packages: uutils...

CVE-2026-35360 vulnerabilities

Vulnerabilities for packages: uutils...

GHSA-Q6M9-XJ2W-XMRC vulnerabilities

Vulnerabilities for packages: uutils...

CVE-2026-35377 vulnerabilities

Vulnerabilities for packages: uutils...

CVE-2026-35348

The sort utility in uutils coreutils is vulnerable to a process panic when using the --files0-from option with inputs containing non-UTF-8 filenames. The implementation enforces UTF-8 encoding and utilizes expect, causing an immediate crash when encountering valid but non-UTF-8 paths. This diverg...

CVE-2026-35339

The recursive mode -R of the chmod utility in uutils coreutils incorrectly handles exit codes when processing multiple files. The final return value is determined solely by the success or failure of the last file processed. This allows the command to return an exit code of 0 success even if error...

CVE-2026-35340

A flaw in the ChownExecutor used by uutils coreutils chown and chgrp causes the utilities to return an incorrect exit code during recursive operations. The final exit code is determined only by the last file processed. If the last operation succeeds, the command returns 0 even if earlier ownershi...

CVE-2026-35358

The cp utility in uutils coreutils, when performing recursive copies -R, incorrectly treats character and block device nodes as stream sources rather than preserving them. Because the implementation reads bytes into regular files at the destination instead of using mknod, device semantics are...