CVE-2026-35373
MediumSummary
A logic error in the `ln` utility of uutils coreutils causes the program to reject source paths containing non-UTF-8 filename bytes when using target-directory forms (e.g., `ln SOURCE... DIRECTORY`). While GNU ln treats filenames as raw bytes and creates links correctly, the uutils implementation enforces UTF-8 encoding.
Risk Assessment
The organization may face issues creating links to files with non-UTF-8 names, potentially causing errors in scripts and automation processes. In environments with diverse filesystems or data from various sources, this could disrupt critical operations.
Recommendation
Update the uutils coreutils package to a version that fixes non-UTF-8 byte handling in the `ln` utility. If an update is unavailable, temporarily use GNU coreutils or avoid filenames containing non-UTF-8 characters.
Original NVD description (English source)
A logic error in the ln utility of uutils coreutils causes the program to reject source paths containing non-UTF-8 filename bytes when using target-directory forms (e.g., ln SOURCE... DIRECTORY). While GNU ln treats filenames as raw bytes and creates the links correctly, the uutils implementation en