uutils coreutils security vulnerabilities

uutils coreutils is a cross-platform core command-line toolset developed by Uutils. There is a security vulnerability in uutils coreutils. This vulnerability arises from the mv utility failing to retain file ownership when moving between different file system boundaries. The utility reverts to th...

PT-2026-34485

Name of the Vulnerable Software and Affected Versions uutils coreutils affected versions not specified Description A flaw in the rm utility allows a bypass of the --preserve-root protection. The system uses a path-string check instead of comparing device and inode numbers to identify the root...

uutils coreutils post-linkage vulnerability

uutils coreutils is a cross-platform core command-line toolset developed by Uutils. uutils coreutils has a post-installation link vulnerability, which arises from improper handling of directories containing symbolic links during the mv command’s file system boundary movement. This vulnerability m...

PT-2026-34511

Name of the Vulnerable Software and Affected Versions uutils coreutils affected versions not specified Description A logic error in the split utility occurs when non-UTF-8 prefix or suffix inputs are provided. The implementation uses the to string lossy function to construct chunk filenames, whic...

PT-2026-34498

Name of the Vulnerable Software and Affected Versions uutils coreutils affected versions not specified Description The safe traversal module, designed to protect against Time-of-Check to Time-of-Use TOCTOU symlink races—a condition where a file is modified between the time it is checked and the...

CVE-2026-35340: Incorrect Check of Function Return Value

A flaw in the ChownExecutor used by uutils coreutils chown and chgrp causes the utilities to return an incorrect exit code during recursive operations. The final exit code is determined only by the last file processed. If the last operation succeeds, the command returns 0 even if earlier ownershi...

PT-2026-34480

Name of the Vulnerable Software and Affected Versions uutils coreutils affected versions not specified Description The dd utility suppresses errors during file truncation operations by unconditionally calling the Result::ok function on truncation attempts. Although this was intended to mimic GNU...

PT-2026-34478

Name of the Vulnerable Software and Affected Versions uutils coreutils affected versions not specified Description The mktemp utility fails to properly handle an empty TMPDIR environment variable. While other implementations fall back to /tmp when TMPDIR is an empty string, this implementation...

PT-2026-34514

Name of the Vulnerable Software and Affected Versions uutils coreutils affected versions not specified Description A logic error in the expr utility causes the program to evaluate parenthesized subexpressions during the parsing phase instead of the execution phase. This flaw prevents proper...

PT-2026-34481

Name of the Vulnerable Software and Affected Versions uutils coreutils affected versions not specified Description A flaw in the tail utility occurs when using the '--follow=name' option. The implementation continues to monitor a path even after it has been replaced by a symbolic link, which lead...

uutils coreutils security vulnerabilities

uutils coreutils is a cross-platform core command-line toolset developed by Uutils. There is a security vulnerability in uutils coreutils. This vulnerability stems from the recursive processing mode of the chmod utility, which improperly handles exit codes when processing multiple files. As a...

uutils coreutils security vulnerabilities

uutils coreutils is a cross-platform core command-line toolset developed by Uutils. There is a security vulnerability in uutils coreutils, which stems from a race condition during the installation process of the install file. This vulnerability could allow local attackers to redirect privileged...

uutils coreutils security vulnerabilities

uutils coreutils is a cross-platform core command-line toolset developed by Uutils. There is a security vulnerability in uutils coreutils. This vulnerability stems from the mkdir utility incorrectly applying permissions when using the -m flag. It first uses umask to derive directory permissions a...

uutils coreutils security vulnerabilities

uutils coreutils is a cross-platform core command-line toolset developed by Uutils Open Source. There is a security vulnerability in uutils coreutils, which stems from a timing race condition in the mkfifo utility. The utility creates a FIFO and then performs a path-based chmod operation to set...

uutils coreutils code-related vulnerabilities

uutils coreutils is a cross-platform core command-line toolset developed by Uutils Open Source. There is a code vulnerability in uutils coreutils. This vulnerability arises from the use of the --userspec option during chroot operations. After entering chroot, the user specification is resolved,...

uutils coreutils post-linkage vulnerability

uutils coreutils is a cross-platform core command-line toolset developed by Uutils. uutils coreutils has a post-installation link vulnerability, which stems from a race condition. This vulnerability could allow attackers to bypass the intended references, enabling the privileged cp process to cop...

uutils coreutils security vulnerabilities

uutils coreutils is a cross-platform core command-line toolset developed by Uutils. There is a security vulnerability in uutils coreutils, which stems from a split logic error. When non-UTF-8-prefixed or -suffixed inputs are provided, the output file name may be corrupted, potentially causing fil...

uutils coreutils security vulnerabilities

uutils coreutils is a cross-platform core command-line toolset developed by Uutils Open Source. uutils coreutils has a security vulnerability that stems from race conditions during file creation. This vulnerability could allow attackers to truncate existing files, resulting in permanent data loss...

uutils coreutils security vulnerabilities

uutils coreutils is a cross-platform core command-line toolset developed by Uutils. There is a security vulnerability in uutils coreutils. This vulnerability arises from the process of creating device nodes using mknod and setting SELinux contexts. As a result, nodes with incorrect markings may b...

uutils coreutils security vulnerabilities

uutils coreutils is a cross-platform core command-line toolset developed by Uutils. There is a security vulnerability in uutils coreutils, which stems from a logical error in the expr function. This error causes the subexpressions within parentheses to be evaluated during the parsing phase rather...