Debian/rust-coreutils: medium 4.4
The mknod utility in uutils coreutils fails to handle security labels atomically by creating device nodes before setting the SELinux context. If labeling fails, the utility attempts cleanup using std:
Action: Upgrade rust-coreutils to 0.6.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.0-1 | - |
Fixed versions
| 0.6.0-1 |
Sources
- osv: DEBIAN-CVE-2026-35361#Debian:14/rust-coreutils
- https://security-tracker.debian.org/tracker/CVE-2026-35361
published · modified · JSON