Red Hat Security Advisory

RHSA-2026:67886

coreutils security update

Released 2026-09-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 10) coreutils-9.5-8.el10_2.1, coreutils-single-9.5-8.el10_2.1

Fixes 2 records

TI-2026-40751 CVE-2026-56391 · GHSA-7xvj-m9x7-qgxq

Out‑of‑bounds Read in GNU coreutils

LOW 20

GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used.

CVSS 4.0MEDIUM 4.6 Local No auth User interaction EPSS 0.00131 Published 2026-07-24 Partial fix CWE-125

TI-2026-40752 CVE-2026-56392 · GHSA-g24f-m2hx-pfgx

Heap-based Buffer Overflow in GNU coreutils

LOW 9

GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values.

CVSS 4.0LOW 1.8 Local No auth User interaction EPSS 0.00186 Published 2026-07-24 Partial fix CWE-122