CVE-2026-35343 uutils coreutils cut Inconsistent Output Suppression with Newline Delimiters

The cut utility in uutils coreutils incorrectly handles the -s only-delimited option when a newline character is specified as the delimiter. The implementation fails to verify the onlydelimited flag in the cutfieldsnewlinechardelim function, causing the utility to print non-delimited lines that...

CVE-2026-35343

The cut utility in uutils coreutils incorrectly handles the -s only-delimited option when a newline character is specified as the delimiter. The implementation fails to verify the onlydelimited flag in the cutfieldsnewlinechardelim function, causing the utility to print non-delimited lines that...

CVE-2026-35343

The issue (CVE-2026-35343) affects the uutils coreutils cut utility. When using -s with a newline delimiter, the code path in cut_fields_newline_char_delim does not verify the only_delimited flag, causing non-delimited lines to be emitted instead of suppressed. This is documented as a vulnerabili...

PT-2026-34516

A logic error in the cut utility of uutils coreutils causes the program to incorrectly interpret the literal two-byte string '' two single quotes as an empty delimiter. The implementation mistakenly maps this string to the NUL character for both the -d delimiter and --output-delimiter options. Th...

PT-2026-34517

Name of the Vulnerable Software and Affected Versions uutils coreutils affected versions not specified Description A logic error in the cut utility occurs when the -s only-delimited flag is used in conjunction with the -z null-terminated and -d '' empty delimiter options. The utility incorrectly...