⚠ Withdrawn by GitHub Security Advisories

Withdrawn: July 6, 2026

GHSA-gpcg-h6x2-c26pMediumCVSS 5.5Disclosed before NVD

Duplicate Advisory: uutils coreutils has an Improper Input Validation issue

Published
April 22, 2026
Last Modified
July 6, 2026

📋 Description

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-p6rv-2qpm-fwvg. This link is maintained to preserve external references.

Original Description

An argument parsing error in the kill utility of uutils coreutils incorrectly interprets kill -1 as a request to send the default signal (SIGTERM) to PID -1. Sending a signal to PID -1 causes the kernel to terminate all processes visible to the caller, potentially leading to a system crash or massive process termination. This differs from GNU coreutils, which correctly recognizes -1 as a signal number in this context and would instead report a missing PID argument.

🎯 Affected products1

  • rust/coreutils:< 0.6.0

🔗 References (5)