Logic Error in uutils Coreutils Tr Utility Affects Data Integrity

CVE-2026-35379

What is CVE-2026-35379?

A logic error in the tr utility of uutils coreutils misdefines the [:graph:] and [:print:] character classes. The issue arises from the erroneous inclusion of the ASCII space character (0x20) in the [:graph:] class while excluding it from the [:print:] class, which contradicts established POSIX and GNU coreutils standards. Consequently, automated scripts and data-cleaning processes relying on these character classes may experience unintentional data loss or corruption. For instance, an attempt to remove non-whitespace graphical characters could inadvertently lead to the deletion of ASCII space characters, resulting in significant errors in data processing workflows.

References