https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T16:23:53.832704+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-292633 EUVD-2026-292633 2026-10-06T16:23:53.912402+00:00 EUVD-2026-292633 https://cve.radiocsirt.org/vuln/fkie_cve-2026-35343 fkie_cve-2026-35343 2026-10-06T16:23:53.912443+00:00

The cut utility in uutils coreutils incorrectly handles the -s (only-delimited) option when a newline character is specified as the delimiter. The implementation fails to verify the only_delimited flag in the cut_fields_newline_char_delim function, causing the utility to print non-delimited lines that should have been suppressed. This can lead to unexpected data being passed to downstream scripts that rely on strict output filtering.

 https://cve.radiocsirt.org/vuln/ghsa-wv33-5pxh-r7j7 GHSA-wv33-5pxh-r7j7 — cut: -s (only-delimited) ignored when delimiter is a newline 2026-10-06T16:23:53.912480+00:00

Affected: crates.io: uu_cut

The cut utility in uutils coreutils incorrectly handles the -s (only-delimited) option when a newline character is specified as the delimiter. The implementation fails to verify the only_delimited flag in the cut_fields_newline_char_delim function, causing the utility to print non-delimited lines that should have been suppressed. This can lead to unexpected data being passed to downstream scripts that rely on strict output filtering.

--- _Zellic finding 3.22. Reported in the Zellic *uutils coreutils Program Security Assessment* (for Canonical, Jan 2026), audited commit `3a07ffc5a9bd4c283e75afa548ba1f1957bad242`._

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-35343 UBUNTU-CVE-2026-35343 2026-10-06T16:23:53.912509+00:00

Affected: Ubuntu:24.04:LTS: rust-coreutils, Ubuntu:25.10: rust-coreutils

The cut utility in uutils coreutils incorrectly handles the -s (only-delimited) option when a newline character is specified as the delimiter. The implementation fails to verify the only_delimited flag in the cut_fields_newline_char_delim function, causing the utility to print non-delimited lines that should have been suppressed. This can lead to unexpected data being passed to downstream scripts that rely on strict output filtering.