Red Hat Security Advisory

RHSA-2026:66403

coreutils security update

Released 2026-09-10 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 9) coreutils-8.32-41.el9_8.1, coreutils-single-8.32-41.el9_8.1

Fixes 1 record

TI-2026-40752 CVE-2026-56392 · GHSA-g24f-m2hx-pfgx

Heap-based Buffer Overflow in GNU coreutils

LOW 9

GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values.

CVSS 4.0LOW 1.8 Local No auth User interaction EPSS 0.00186 Published 2026-07-24 Partial fix CWE-122