Ubuntu alert USN-8697-1 (coreutils)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8697-1] GNU Core Utilities vulnerabilities
Date:
             
 
Mon, 31 Aug 2026 14:09:23 +0000
Message-ID:
             
 
<E1x12hP-0004Z9-2r@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8697-1
August 31, 2026

coreutils vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

Several security issues were fixed in GNU Core Utilities.

Software Description:
- coreutils: GNU core utilities

Details:

It was discovered that GNU Core Utilities sort had a heap buffer under-read
in its begfield() function. A local attacker could possibly use this issue
to cause GNU Core Utilities to crash, resulting in a denial of service, or
obtain sensitive information. (CVE-2025-5278)

It was discovered that GNU Core Utilities uniq had an out-of-bounds read
when the -w option was used with crafted multibyte input. A local attacker
could possibly use this issue to cause GNU Core Utilities to crash,
resulting in a denial of service, or obtain sensitive information. This
issue only affected Ubuntu 26.04 LTS. (CVE-2026-56391)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  gnu-coreutils                   9.7-3ubuntu2.1

Ubuntu 24.04 LTS
  coreutils                       9.4-3ubuntu6.3

Ubuntu 22.04 LTS
  coreutils                       8.32-4.1ubuntu1.4

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8697-1
  CVE-2025-5278, CVE-2026-56391

Package Information:
  https://launchpad.net/ubuntu/+source/coreutils/9.7-3ubunt...
  https://launchpad.net/ubuntu/+source/coreutils/9.4-3ubunt...
  https://launchpad.net/ubuntu/+source/coreutils/8.32-4.1ub...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=BHEd
-----END PGP SIGNATURE-----