ELSA-2026-67886

ELSA-2026-67886 - coreutils security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-09-16

Description

[9.5-8.0.1.el10_2.1]
- clean up empty file if cp is failed [Orabug 15973168]

[9.5-8.1]
- uniq: fix CVE-2026-56391 (RHEL-216794)
- fix read overrun with -w
- unexpand: fix CVE-2026-56392 and related crashes (RHEL-216784)
- fix direct.sh and unexpand/mb.sh tests
- fix unexpand/expand crash on invalid multibyte characters
- fix heap overflow with large tab stops
- fix heap overflow when a wide blank overshoots a tab stop

Related CVEs

CVE-2026-56391

CVE-2026-56392

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	coreutils-9.5-8.0.1.el10_2.1.src.rpm	9332fe020b87ee5caceb68a416f863e22649cc16c94e74c2b6e877512057b0a8	-	ol10_aarch64_baseos_latest
	coreutils-9.5-8.0.1.el10_2.1.src.rpm	9332fe020b87ee5caceb68a416f863e22649cc16c94e74c2b6e877512057b0a8	-	ol10_aarch64_u2_baseos_patch
	coreutils-9.5-8.0.1.el10_2.1.aarch64.rpm	bf1506937fd7a4c6b80b1cf320a0998ce48c96c96783954f1423fce919fa8d70	-	ol10_aarch64_baseos_latest
	coreutils-9.5-8.0.1.el10_2.1.aarch64.rpm	bf1506937fd7a4c6b80b1cf320a0998ce48c96c96783954f1423fce919fa8d70	-	ol10_aarch64_u2_baseos_patch
	coreutils-common-9.5-8.0.1.el10_2.1.aarch64.rpm	b0921a11cce0274992a8024b9f3ec240264864cb343e87a3d08760687bb0c4ac	-	ol10_aarch64_baseos_latest
	coreutils-common-9.5-8.0.1.el10_2.1.aarch64.rpm	b0921a11cce0274992a8024b9f3ec240264864cb343e87a3d08760687bb0c4ac	-	ol10_aarch64_u2_baseos_patch
	coreutils-single-9.5-8.0.1.el10_2.1.aarch64.rpm	0566725f7961a171675ad39feba63f4b5dc1779b333f6c758a06b87048495504	-	ol10_aarch64_baseos_latest
	coreutils-single-9.5-8.0.1.el10_2.1.aarch64.rpm	0566725f7961a171675ad39feba63f4b5dc1779b333f6c758a06b87048495504	-	ol10_aarch64_u2_baseos_patch
Oracle Linux 10 (x86_64)	coreutils-9.5-8.0.1.el10_2.1.src.rpm	9332fe020b87ee5caceb68a416f863e22649cc16c94e74c2b6e877512057b0a8	-	ol10_x86_64_baseos_latest
	coreutils-9.5-8.0.1.el10_2.1.src.rpm	9332fe020b87ee5caceb68a416f863e22649cc16c94e74c2b6e877512057b0a8	-	ol10_x86_64_u2_baseos_patch
	coreutils-9.5-8.0.1.el10_2.1.x86_64.rpm	b0f9fb55b1157e61118efc87289c1fa24576ac486318c351ddc22fbf6fa2fd5a	-	ol10_x86_64_baseos_latest
	coreutils-9.5-8.0.1.el10_2.1.x86_64.rpm	b0f9fb55b1157e61118efc87289c1fa24576ac486318c351ddc22fbf6fa2fd5a	-	ol10_x86_64_u2_baseos_patch
	coreutils-common-9.5-8.0.1.el10_2.1.x86_64.rpm	f4ae42d524a542e5fa1ff6a2ecd5576bd0515e59cb164b2642b50848104c9e33	-	ol10_x86_64_baseos_latest
	coreutils-common-9.5-8.0.1.el10_2.1.x86_64.rpm	f4ae42d524a542e5fa1ff6a2ecd5576bd0515e59cb164b2642b50848104c9e33	-	ol10_x86_64_u2_baseos_patch
	coreutils-single-9.5-8.0.1.el10_2.1.x86_64.rpm	d5d2734ca3848be68e5961ed108438d067ebdb14355036d133764d6360adfb60	-	ol10_x86_64_baseos_latest
	coreutils-single-9.5-8.0.1.el10_2.1.x86_64.rpm	d5d2734ca3848be68e5961ed108438d067ebdb14355036d133764d6360adfb60	-	ol10_x86_64_u2_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team