Vulnerabilities

The mv utility in uutils coreutils improperly handles directory trees containing symbolic links during moves across filesystem boundaries.

The cp utility in uutils coreutils, when performing recursive copies (-R), incorrectly treats character and block device nodes as stream sources rather than preserving them.

A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the install utility of uutils coreutils when using the -D flag.

A vulnerability in the rm utility of uutils coreutils allows a bypass of the --preserve-root protection.

The cut utility in uutils coreutils incorrectly handles the -s (only-delimited) option when a newline character is specified as the delimiter.