REDHAT-BUG-903464: Low severity suse coreutils vulnerability
It was reported [1] that the sort command suffered from a segfault when processing input streams that contained extremely long strings when used with the -d and -M switches. This flaw is due to the inclusion of the coreutils-i18n.patch.
SUSE has fixed this by fixing the patch. The changes can be seen here [2]. (There is probably e better place to get the patch, but I don't know where).
[1] https://bugzilla.novell.com/showbug.cgi?id=798538 [2] https://build.opensuse.org/request/show/149348#diffheadlinecoreutils-i18n-patchdiffaction0submit019
Statement:
(none)
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-903464?
The severity of REDHAT-BUG-903464 is categorized as critical due to the potential for segmentation faults in the sort command.
How do I fix REDHAT-BUG-903464?
To fix REDHAT-BUG-903464, update the coreutils package to the latest version where this bug has been addressed.
Which software is affected by REDHAT-BUG-903464?
The software affected by REDHAT-BUG-903464 is SUSE coreutils, specifically when using the sort command with certain options.
What causes the issue in REDHAT-BUG-903464?
The issue in REDHAT-BUG-903464 is caused by a segmentation fault that occurs due to extremely long input strings processed by the sort command.
Is there a workaround for REDHAT-BUG-903464?
A possible workaround for REDHAT-BUG-903464 is to avoid using the -d and -M switches in the sort command when processing long strings.