UbuntuUpdates.org

Package "gnu-coreutils"

Name: gnu-coreutils

Description:

GNU core utilities
Latest version: 9.7-3ubuntu2.1
Release: resolute (26.04)
Level: security
Repository: main
Head package: coreutils
Homepage: https://gnu.org/software/coreutils

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "gnu-coreutils"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "gnu-coreutils" in Resolute

Repository Area Version
base main 9.7-3ubuntu2
updates main 9.7-3ubuntu2.1

Changelog

Version: 9.7-3ubuntu2.1 2026-08-31 13:07:53 UTC

coreutils (9.7-3ubuntu2.1) resolute-security; urgency=medium

  * SECURITY UPDATE: out-of-bounds read in sort
    - debian/patches/CVE-2025-5278.patch: sort: fix buffer under-read in
      src/sort.c, tests/local.mk, tests/sort/sort-field-limit.sh,
      Makefile.in.
    - CVE-2025-5278
  * SECURITY UPDATE: out���of���bounds read in uniq
    - debian/patches/CVE-2026-56391.patch: uniq: fix read overrun with -w in
      src/uniq.c, tests/uniq/uniq.pl.
    - CVE-2026-56391

 -- Marc Deslauriers Tue, 25 Aug 2026 11:07:27 -0400
CVE-2025-5278 A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory ou
CVE-2026-56391 GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. Th


About   -   Send Feedback to @ubuntu_updates