[CLSA-2026:1788268556] coreutils: Fix of CVE-2026-56392
Type:
security
Severity:
Moderate
Release date:
2026-09-01 13:16:07 UTC
Description:
- CVE-2026-56392: fix heap buffer overflow in unexpand caused by an integer overflow when allocating the pending-blank buffer for large -t values (backport of upstream b60a159f and follow-up 4ade9cf7)
CVEs fixed:
Updated packages:
  • coreutils-8.32-34.el9.tuxcare.els2.x86_64.rpm
    sha:6c9aca2dabf60b9cf394c42059c7129f3dedc13c256f937adf03c446be9d9c09
  • coreutils-common-8.32-34.el9.tuxcare.els2.x86_64.rpm
    sha:4249c5bcb7037062717c5b39726a5d55f5c2a068bce4aaeb9400f6c34594b7e3
  • coreutils-single-8.32-34.el9.tuxcare.els2.x86_64.rpm
    sha:5bd398890266eb6e554b5764d6a8ba66695de7a39b12cfd4e19a6607a84839e1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.