https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:45:53 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-292607 EUVD-2026-292607 https://cve.radiocsirt.org/vuln/euvd-2026-292607 https://cve.radiocsirt.org/vuln/fkie_cve-2026-35371 <p>The id utility in uutils coreutils exhibits incorrect behavior in its &#34;pretty print&#34; output when the real UID and effective UID differ. The implementation incorrectly uses the effective GID instead of the effective UID when performing a name lookup for the effective user. This results in misleading diagnostic output that can cause automated scripts or system administrators to make incorrect decisions regarding file permissions or access control.</p> <p>The id utility in uutils coreutils exhibits incorrect behavior in its &#34;pretty print&#34; output when the real UID and effective UID differ. The implementation incorrectly uses the effective GID instead of the effective UID when performing a name lookup for the effective user. This results in misleading diagnostic output that can cause automated scripts or system administrators to make incorrect decisions regarding file permissions or access control.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-35371 https://cve.radiocsirt.org/vuln/ghsa-xv5w-cw7x-72gj <p><strong>Affected:</strong> crates.io: uu_id</p> <p>The id utility in uutils coreutils exhibits incorrect behavior in its &#34;pretty print&#34; output when the real UID and effective UID differ. The implementation incorrectly uses the effective GID instead of the effective UID when performing a name lookup for the effective user. This results in misleading diagnostic output that can cause automated scripts or system administrators to make incorrect decisions regarding file permissions or access control.</p> <p>--- _Zellic finding 3.73. Reported in the Zellic *uutils coreutils Program Security Assessment* (for Canonical, Jan 2026), audited commit `3a07ffc5a9bd4c283e75afa548ba1f1957bad242`._</p> <p><strong>Affected:</strong> crates.io: uu_id</p> <p>The id utility in uutils coreutils exhibits incorrect behavior in its &#34;pretty print&#34; output when the real UID and effective UID differ. The implementation incorrectly uses the effective GID instead of the effective UID when performing a name lookup for the effective user. This results in misleading diagnostic output that can cause automated scripts or system administrators to make incorrect decisions regarding file permissions or access control.</p> <p>--- _Zellic finding 3.73. Reported in the Zellic *uutils coreutils Program Security Assessment* (for Canonical, Jan 2026), audited commit `3a07ffc5a9bd4c283e75afa548ba1f1957bad242`._</p> https://cve.radiocsirt.org/vuln/ghsa-xv5w-cw7x-72gj https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-35371 <p><strong>Affected:</strong> Ubuntu:24.04:LTS: rust-coreutils, Ubuntu:25.10: rust-coreutils, Ubuntu:26.04:LTS: rust-coreutils</p> <p>The id utility in uutils coreutils exhibits incorrect behavior in its &#34;pretty print&#34; output when the real UID and effective UID differ. The implementation incorrectly uses the effective GID instead of the effective UID when performing a name lookup for the effective user. This results in misleading diagnostic output that can cause automated scripts or system administrators to make incorrect decisions regarding file permissions or access control.</p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: rust-coreutils, Ubuntu:25.10: rust-coreutils, Ubuntu:26.04:LTS: rust-coreutils</p> <p>The id utility in uutils coreutils exhibits incorrect behavior in its &#34;pretty print&#34; output when the real UID and effective UID differ. The implementation incorrectly uses the effective GID instead of the effective UID when performing a name lookup for the effective user. This results in misleading diagnostic output that can cause automated scripts or system administrators to make incorrect decisions regarding file permissions or access control.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-35371