Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
AlmaLinux coreutils can crash with large tab settings
published 2 months ago
Summary
The coreutils tools on AlmaLinux, including the coreutils, coreutils-common, and coreutils-single packages, may run out of memory and stop working when a command requests very large tab widths. This can cause the program to stop unexpectedly, affecting scripts or users that rely on it. Update the coreutils packages to the latest version to prevent the crash.
What to do
- Update almalinux coreutils to version 8.32-39.el9.tuxcare.els2.
- Update almalinux coreutils-common to version 8.32-39.el9.tuxcare.els2.
- Update almalinux coreutils-single to version 8.32-39.el9.tuxcare.els2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:AlmaLinux:9.6 | almalinux | coreutils |
< 8.32-39.el9.tuxcare.els2 Fix: upgrade to 8.32-39.el9.tuxcare.els2
|
| TuxCare:AlmaLinux:9.6 | almalinux | coreutils-common |
< 8.32-39.el9.tuxcare.els2 Fix: upgrade to 8.32-39.el9.tuxcare.els2
|
| TuxCare:AlmaLinux:9.6 | almalinux | coreutils-single |
< 8.32-39.el9.tuxcare.els2 Fix: upgrade to 8.32-39.el9.tuxcare.els2
|
Original advisory text
coreutils: Fix of CVE-2026-56392
- CVE-2026-56392: fix heap buffer overflow in unexpand caused by an integer
overflow when allocating the pending-blank buffer for large -t values
(backport of upstream b60a159f and follow-up 4ade9cf7)
overflow when allocating the pending-blank buffer for large -t values
(backport of upstream b60a159f and follow-up 4ade9cf7)
References
- https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1788177078.html Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-56392 Vendor Advisory
Timeline
Published31 Aug 2026
Updated26 Oct 2026
First seen26 Oct 2026
Sources
CLSA-2026-1788177078 · OSV
Track software like this
Free during beta