REDHAT-BUG-903465: Low severity suse coreutils vulnerability
It was reported [1] that the uniq command suffered from a segfault when processing input streams that contained extremely long strings. This flaw is due to the inclusion of the coreutils-i18n.patch.
SUSE has fixed this by fixing the patch. The changes can be seen here [2]. (There is probably e better place to get the patch, but I don't know where).
[1] https://bugzilla.novell.com/showbug.cgi?id=796243 [2] https://build.opensuse.org/request/show/149348#diffheadlinecoreutils-i18n-patchdiffaction0submit019
Statement:
(none)
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-903465?
The severity of REDHAT-BUG-903465 is considered critical due to potential segmentation faults that can affect the uniq command.
How do I fix REDHAT-BUG-903465?
To fix REDHAT-BUG-903465, you should update your SUSE coreutils package to the latest version that includes the patch for this issue.
What software is affected by REDHAT-BUG-903465?
The software affected by REDHAT-BUG-903465 is SUSE coreutils.
What is the root cause of REDHAT-BUG-903465?
The root cause of REDHAT-BUG-903465 is a segmentation fault triggered by the uniq command when processing extremely long strings due to a problematic patch.
Is there a workaround for REDHAT-BUG-903465?
A possible workaround for REDHAT-BUG-903465 is to avoid using the uniq command with excessively long string inputs until a fix is applied.