SUSE SLES16: coreutils / coreutils-doc / coreutils-lang / coreutils-single / etc (SUSE-SU-2026:24268-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:24268-1 advisory. This update for coreutils fixes the following issue: - CVE-2026-56391: uniq: denial of service and information disclosure via out-of-bounds...

openSUSE 16: coreutils / coreutils-lang / coreutils-single / coreutils-systemd / etc (openSUSE-SU-2026:22147-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22147-1 advisory. This update for coreutils fixes the following issue: - CVE-2026-56391: uniq: denial of service and information disclosure via out-of-bounds read with...

Security update for coreutils (moderate)

openSUSE security update: security update for coreutils ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22147-1 Rating: moderate References: bsc1272698 Cross-References: CVE-2026-56391 CVSS scores: CVE-2026-56391 SUSE : 6.1...

SUSE-SU-2026:24406-1 Security update for coreutils

This update for coreutils fixes the following issue: - CVE-2026-56391: uniq: denial of service and information disclosure via out-of-bounds read with multibyte input bsc1272698...

SUSE-SU-2026:24268-1 Security update for coreutils

This update for coreutils fixes the following issue: - CVE-2026-56391: uniq: denial of service and information disclosure via out-of-bounds read with multibyte input bsc1272698...

Security update for coreutils

This update for coreutils fixes the following issue: CVE-2026-56391: uniq: denial of service and information disclosure via out-of-bounds read with multibyte input bsc1272698. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or...

OPENSUSE-SU-2026:22147-1 Security update for coreutils

This update for coreutils fixes the following issue: - CVE-2026-56391: uniq: denial of service and information disclosure via out-of-bounds read with multibyte input bsc1272698...

Security update for coreutils

This update for coreutils fixes the following issue: CVE-2026-56391: uniq: denial of service and information disclosure via out-of-bounds read with multibyte input bsc1272698. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : GNU Core Utilities vulnerabilities (USN-8697-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8697-1 advisory. It was discovered that GNU Core Utilities sort had a heap buffer under-read in its begfield function. A local attacker could...

CVE-2026-105789

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the executecommand tool in ufo/client/mcp/httpservers/linuxmcpserver.py treats sort and uniq as read-only commands while the free-form command parameter can select their file-output...

CVE-2026-105789 Microsoft UFO: Arbitrary file write in the Linux MCP `execute_command` tool

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the executecommand tool in ufo/client/mcp/httpservers/linuxmcpserver.py treats sort and uniq as read-only commands while the free-form command parameter can select their file-output...

coreutils security update

An update is available for coreutils. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The coreutils packages contain the GNU Core Utilities and represent a...

RLSA-2026:67886 Moderate: coreutils security update

The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils packages. Security Fixes: coreutils: GNU coreutils uniq: Denial of Service and information disclosure via out-of-bounds read with multibyte input...

RockyLinux 10 : coreutils (RLSA-2026:67886)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:67886 advisory. coreutils: GNU coreutils uniq: Denial of Service and information disclosure via out-of-bounds read with multibyte input CVE-2026-56391 coreutils: GNU...

AlmaLinux 10 : coreutils (ALSA-2026:67886)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:67886 advisory. coreutils: GNU coreutils uniq: Denial of Service and information disclosure via out-of-bounds read with multibyte input CVE-2026-56391 coreutils: GNU...

coreutils: GNU coreutils uniq: Denial of Service and information disclosure via out-of-bounds read with multibyte input

A flaw was found in GNU coreutils uniq. When processing specially crafted multibyte input with the --check-chars option, an attacker can trigger an out-of-bounds read. This vulnerability can lead to a denial of service DoS due to an application crash and potentially expose sensitive information...

Moderate: Red Hat Security Advisory: coreutils security update

An update for coreutils is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

coreutils security update

9.5-8.0.1.el102.1 - clean up empty file if cp is failed Orabug 15973168 9.5-8.1 - uniq: fix CVE-2026-56391 RHEL-216794 - fix read overrun with -w - unexpand: fix CVE-2026-56392 and related crashes RHEL-216784 - fix direct.sh and unexpand/mb.sh tests - fix unexpand/expand crash on invalid multibyt...

RHEL 10 : coreutils (RHSA-2026:67886)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67886 advisory. The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and...

Oracle Linux 10 : coreutils (ELSA-2026-67886)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-67886 advisory. - uniq: fix CVE-2026-56391 RHEL-216794 - fix read overrun with -w Tenable has extracted the preceding description block directly from the Oracle Linu...