https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 10:19:52 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-292632 EUVD-2026-292632 https://cve.radiocsirt.org/vuln/euvd-2026-292632 https://cve.radiocsirt.org/vuln/fkie_cve-2026-35351 <p>The mv utility in uutils coreutils fails to preserve file ownership during moves across different filesystem boundaries. The utility falls back to a copy-and-delete routine that creates the destination file using the caller&#39;s UID/GID rather than the source&#39;s metadata. This flaw breaks backups and migrations, causing files moved by a privileged user (e.g., root) to become root-owned unexpectedly, which can lead to information disclosure or restricted access for the intended owners.</p> <p>The mv utility in uutils coreutils fails to preserve file ownership during moves across different filesystem boundaries. The utility falls back to a copy-and-delete routine that creates the destination file using the caller&#39;s UID/GID rather than the source&#39;s metadata. This flaw breaks backups and migrations, causing files moved by a privileged user (e.g., root) to become root-owned unexpectedly, which can lead to information disclosure or restricted access for the intended owners.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-35351 https://cve.radiocsirt.org/vuln/ghsa-957r-r8gc-vv3h <p><strong>Affected:</strong> crates.io: coreutils</p> <p>The mv utility in uutils coreutils fails to preserve file ownership during moves across different filesystem boundaries. The utility falls back to a copy-and-delete routine that creates the destination file using the caller&#39;s UID/GID rather than the source&#39;s metadata. This flaw breaks backups and migrations, causing files moved by a privileged user (e.g., root) to become root-owned unexpectedly, which can lead to information disclosure or restricted access for the intended owners.</p> <p><strong>Affected:</strong> crates.io: coreutils</p> <p>The mv utility in uutils coreutils fails to preserve file ownership during moves across different filesystem boundaries. The utility falls back to a copy-and-delete routine that creates the destination file using the caller&#39;s UID/GID rather than the source&#39;s metadata. This flaw breaks backups and migrations, causing files moved by a privileged user (e.g., root) to become root-owned unexpectedly, which can lead to information disclosure or restricted access for the intended owners.</p> https://cve.radiocsirt.org/vuln/ghsa-957r-r8gc-vv3h https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-35351 <p><strong>Affected:</strong> Ubuntu:24.04:LTS: rust-coreutils, Ubuntu:25.10: rust-coreutils, Ubuntu:26.04:LTS: rust-coreutils</p> <p>The mv utility in uutils coreutils fails to preserve file ownership during moves across different filesystem boundaries. The utility falls back to a copy-and-delete routine that creates the destination file using the caller&#39;s UID/GID rather than the source&#39;s metadata. This flaw breaks backups and migrations, causing files moved by a privileged user (e.g., root) to become root-owned unexpectedly, which can lead to information disclosure or restricted access for the intended owners.</p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: rust-coreutils, Ubuntu:25.10: rust-coreutils, Ubuntu:26.04:LTS: rust-coreutils</p> <p>The mv utility in uutils coreutils fails to preserve file ownership during moves across different filesystem boundaries. The utility falls back to a copy-and-delete routine that creates the destination file using the caller&#39;s UID/GID rather than the source&#39;s metadata. This flaw breaks backups and migrations, causing files moved by a privileged user (e.g., root) to become root-owned unexpectedly, which can lead to information disclosure or restricted access for the intended owners.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-35351