https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:48:31.246496+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-292607 EUVD-2026-292607 2026-10-03T06:48:31.308314+00:00 EUVD-2026-292607 https://cve.radiocsirt.org/vuln/fkie_cve-2026-35371 fkie_cve-2026-35371 2026-10-03T06:48:31.308351+00:00

The id utility in uutils coreutils exhibits incorrect behavior in its "pretty print" output when the real UID and effective UID differ. The implementation incorrectly uses the effective GID instead of the effective UID when performing a name lookup for the effective user. This results in misleading diagnostic output that can cause automated scripts or system administrators to make incorrect decisions regarding file permissions or access control.

 https://cve.radiocsirt.org/vuln/ghsa-xv5w-cw7x-72gj GHSA-xv5w-cw7x-72gj — id: pretty-print uses effective GID instead of effective UID for name lookup 2026-10-03T06:48:31.308386+00:00

Affected: crates.io: uu_id

The id utility in uutils coreutils exhibits incorrect behavior in its "pretty print" output when the real UID and effective UID differ. The implementation incorrectly uses the effective GID instead of the effective UID when performing a name lookup for the effective user. This results in misleading diagnostic output that can cause automated scripts or system administrators to make incorrect decisions regarding file permissions or access control.

--- _Zellic finding 3.73. Reported in the Zellic *uutils coreutils Program Security Assessment* (for Canonical, Jan 2026), audited commit `3a07ffc5a9bd4c283e75afa548ba1f1957bad242`._

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-35371 UBUNTU-CVE-2026-35371 2026-10-03T06:48:31.308415+00:00

Affected: Ubuntu:24.04:LTS: rust-coreutils, Ubuntu:25.10: rust-coreutils, Ubuntu:26.04:LTS: rust-coreutils

The id utility in uutils coreutils exhibits incorrect behavior in its "pretty print" output when the real UID and effective UID differ. The implementation incorrectly uses the effective GID instead of the effective UID when performing a name lookup for the effective user. This results in misleading diagnostic output that can cause automated scripts or system administrators to make incorrect decisions regarding file permissions or access control.