CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

sysutils/coreutils 9.12

Free Software Foundation core utilities

Maintainer
jharris@widomaker.com
Packages
latest: 9.9, update to 9.12 not built yet
Upstream
up to date
Last update
to 9.12 · 690ad752cf
Quarterly
2026Q4: 9.9
Formerly
misc/sh-utils until 2004-01-21, sysutils/fileutils until 2004-01-21, textproc/textutils until 2004-01-21
WWW
https://www.gnu.org/software/coreutils/
Links
cgit · VuXML

Unaddressed (1)

The CVE record lists the packaged version 9.9 as affected, and no VuXML entry names the CVE. What does this mean?

CVECVSSPublishedDescription
CVE-2026-563914.62026-07-24GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() funct…

VuXML only (0)

Listed in VuXML, the packaged version 9.9 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (0)

No VuXML entries for this package.

Problem reports (2) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
293672regression maintainer-feedback? sysutils/coreutils: fails to build after (presumably) base 28599a1e5f1bIn Progress2026-10-18
294452maintainer-feedback? sysutils/coreutils does not compile with LibreSSL as of Q2 2026New2026-04-12

Commits (138)

Älven (alven) · 9.12
sysutils/coreutils: Update 9.9 => 9.12

* Clarify LICENSE
* Sort pkg-plist

Official release [0] with patch [1] by Pádraig Brady <P@draigBrady.com>
for revert of quoting env/printenv to non terminals

[0] https://lists.gnu.org/archive/html/coreutils-announce/2026-09/msg00000.html
[1] https://lists.gnu.org/archive/html/coreutils/2026-09/msg00064.html

PR:		298545
Co-authored by:	Collin Funk <collin.funk1@gmail.com>
Approved by:	Jason Harris <jharris@widomaker.com> (maintainer, timeout > 2 weeks)
690ad752cf
Piotr Kubaj (pkubaj) · 9.9
sysutils/coreutils: fix build on powerpc64le/CURRENT

Clang crashes with the default -mcpu, but builds with -O0:
Assertion failed: (Subtarget->hasP9Vector() && "XSCMPUQP requires Power9 Vector"), function SelectCC, file /usr/src/contrib/llvm-project/llvm/lib/Target/PowerPC/PPCISelDAGToDAG.cpp, line 4271.
60fde33a70
Dmitry Salychev (dsl) · 9.9
sysutils/coreutils: Fix build after 28599a1e5f1b

PR:		293672
Approved by:	portmgr@

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293672
2f52a07fda
Vladimir Druzenko (vvd) · 9.9
sysutils/coreutils: Update 9.7 => 9.9

Announce:
https://lists.gnu.org/archive/html/coreutils-announce/2025-09/msg00000.html
https://lists.gnu.org/archive/html/coreutils-announce/2025-11/msg00000.html

Fix "Warning: you need USES=ssl".

PR:	291700
7c94c3f1f1
Vladimir Druzenko (vvd) · 9.7
sysutils/coreutils: Update 9.6 => 9.7

Changelog:
https://lists.gnu.org/archive/html/info-gnu/2025-04/msg00006.html

PR:		286027
Approved by:	jharris@widomaker.com (maintainer)
d18ca0330e
Fernando Apesteguía (fernape) · 9.6
sysutils/coreutils: update 9.5 → 9.6

ChangeLog: https://lists.gnu.org/archive/html/info-gnu/2025-01/msg00008.html

PR:		284123
Reported by:	alster@vinterdalen.se
Approved by:	jharris@widomaker.com (maintainer, timeout > 2 weeks)
89000a6a21
Daniel Engberg (diizzy) · 9.5
sysutils/coreutils: Fix GMP option

Toggle is libgmp not gmp, while at adjust layout in Makefile

PR:		281075
Approved by:	portmgr (maintainer timeout, 2+ weeks)
ad05a2f3d0
Vladimir Druzenko (vvd) · 9.5
sysutils/coreutils: update 9.4 → 9.5, fix CVE-2024-0684

Release annonce:
https://lists.gnu.org/archive/html/coreutils-announce/2024-03/msg00000.html

PR:		281063
Approved by:	jharris@widomaker.com (maintainer)
MFH:		2024Q3
27cc784e0e
Li-Wen Hsu (lwhsu) · 9.4_1
sysutils/coreutils: Fix malformed conditional expression
e01e0ed77d
Li-Wen Hsu (lwhsu) · 9.4_1
sysutils/coreutils: Fix build on i386

PR:		277277
Approved by:	maintainer
79fe36a978
Li-Wen Hsu (lwhsu) · 9.4_1
sysutils/coreutils: Fix build with clang 18

PR:		277280
Approved by:	maintainer
45b681ee03
Fernando Apesteguía (fernape) · 9.4
sysutils/coreutils: Update to 9.4

ChangeLog: https://lists.gnu.org/archive/html/info-gnu/2023-08/msg00007.html

PR:		277055
Reported by:	collin.funk1@gmail.com
Approved by:	jharris@widomaker.com (maintainer)
f4caf228f3
Muhammad Moinur Rahman (bofh) · 9.1_1
sysutils/coreutils: Impelled to share/man

Approved by:    portmgr (blanket)
e251028b73
Alexander Leidinger (netchild) · 9.1
sysutils/coreutils: Mark as PIE_UNSAFE.

There is no error message, but libstdbuf.so is not created.

PR:		268924
Approved by:	maintainer
00b43bf80f
Stefan Eßer (se) · 9.1
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 9.1
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Piotr Kubaj (pkubaj) · 9.1
sysutils/coreutils: update to 9.1

PR:	265770
Approved by:	jharris@widomaker.com (maintainer)
9b21b2e65c
Stefan Eßer (se) · 8.32
Fix CONFLICTS entries of multiple ports

There have been lots of missing CONFLICTS_INSTALL entries, either
because conflicting ports were added without updating existing ports,
due to name changes of generated packages, due to mis-understanding
the format and semantics of the conflicts entries, or just due to
typoes in package names.

This patch is the result of a comparison of all files contained in
the official packages with each other. This comparison was based on
packages built with default options and may therefore have missed
further conflicts with optionally installed files.

Where possible, version numbers in conflicts entries have been
generalized, some times taking advantage of the fact that a port
cannot conflict with itself (due to logic in bsd.port.mk that
supresses the pattern match result in that case).

A few ports that set the conflicts variables depending on complex
conditions (e.g. port options), have been left unmodified, despite
probably containing outdated package names.

These changes should only affect the installation of locally built
ports, not the package building with poudriere. They should give an
early indication of the install conflict in cases where currently
the pkg command aborts an installation when it detects that an
existing file would be overwritten,

Approved by:	portmgr (implicit)
bcaf25a8c8
Mathieu Arnold (mat) · 8.32
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 8.32
Remove # $FreeBSD$ from Makefiles.
305f148f48
Tobias Kortkamp (tobik) · 8.32
devel/idutils: Resolve conflict with coreutils

pkg-static: idutils-4.6_2 conflicts with coreutils-8.28 (installs files into the same place).  Problematic file: /usr/local/bin/gid

For lack of a better solution resolve this by prefixing gid with a g.
It is now installed as ggid.

linux-gid and sh-utils no longer seem to exist in the tree, so drop
CONFLICTS completely.

PR:		224985
Submitted by:	Trond.Endrestol@ximalas.info
Approved by:	peterj (maintainer timeout, 3 years)
3f18f8fc06
Loïc Bartoletti (lbartoletti) · 8.32
sysutils/coreutils: update to 8.32

- Update to 8.32
 - Fix order (pet portlint)

PR:		247332
Submitted by:	jharris@widomaker.com (maintainer)
Approved by:	tcberner (mentor)
Differential Revision:	https://reviews.freebsd.org/D25313
9bf933633c
Jan Beich (jbeich) · 8.31
Drop workaround for qemu-user-static hang after r517350

GSlice as used by qemu-user still aborts due to low RLIMIT_VMEM in an
emulated application but no longer hangs. While the behavior differs
from real hardware it matches the one from before r456518 that was
hardcoded as gl_cv_func_printf_enomem=no workaround.

PR:		224740
cc952b51f9
Alexey Dokuchaev (danfe) · 8.31
- Update GNU coreutils to the latest version 8.31 - Enable tests via our framework (set the TEST_TARGET) - Remove MAKE_JOBS_UNSAFE which was added in r306718 (due to "help2man:   can't get '--help' info from man/stty.td/stty") as it looks like this   very error had been fixed long time ago, per their ChangeLog:

2015-03-06  Padraig Brady  <P@draigBrady.com>

	build: fix make dependencies for test.1
	In certain parallel build situations this would give the error:
	  help2man: can't get `--help' info from man/test.td/[
	  Makefile:14189: recipe for target 'man/test.1' failed

  That said, the port should have been jobs-safe for about four years
  now, but for some strange reason nobody had noticed that.

Approved by:	maintainer
826a3df314
Baptiste Daroussin (bapt) · 8.30_1
Install texinfo files (GNU info) into ${PREFIX}/share/info

After a discussion on the mailing list on moving manpages to
${PREFIX}/share/man for consistency with base where it is
installed in usr/share/man, it appeared the same should happen
to GNU info files which were installed under share in base and
not in ports.

Now texinfo is not in base on any of the supported version of FreeBSD
it is possible to proceed to this move and it is easier to do than
the manpage change.

Other benefit than consistency are less patching: all build tools but
cmake are expecting info files to be under share/info and cmake (patched here)
was having an exception for BSD so the patch makes FreeBSD case less
specific for them

Bump revision of all impacted ports

PR:		232907
exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D17816
7990f81066
Fernando Apesteguía (fernape) · 8.30
sysutils/coreutils: update to 8.30

Also reorder some variables.

Announcement:

http://lists.gnu.org/archive/html/coreutils-announce/2018-07/msg00000.html

PR:	231573
Submitted by:	pkubaj@anongoth.pl
Approved by:	tcberner (mentor, implicit), jharris@widomaker.com (maintainer)
b0a163659a
Antoine Brodin (antoine) · 8.28
Skip ENOMEM check for printf when building with qemu, this makes configure hang

PR:		224740
Reported by:	pkg-fallou
MFH:		2018Q1
04cfb6a84f
Frederic Culot (culot) · 8.28
- Update to 8.28

PR:		223345
Submitted by:	Piotr Kubaj <pkubaj@anongoth.pl>
Approved by:	jharris@widomaker.com (maintainer)
1f5d2f0a2b
Dmitry Marakasov (amdmi3) · 8.25
Remove NLS, DOCS, EXAMPLES and IPV6 from OPTIONS_DEFAULT, they are enabled by default anyway and don't need to be listed

Approved by:	portmgr blanket
c86e9d9724
Mathieu Arnold (mat) · 8.25
Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.

With hat:	portmgr
Sponsored by:	Absolight
597afc47ba
Kurt Jaeger (pi) · 8.25
sysutils/coreutils: 8.23 -> 8.25

- cp now correctly copies files with a hole at the end of the file,
  and extents allocated beyond the apparent size of the file.
  That combination resulted in the trailing hole not being reproduced.
- cut --fields no longer outputs extraneous characters on some uClibc
  configs.
- install -D again copies relative file names when absolute file names
  are also specified along with an absolute destination directory name.
- ls no longer prematurely wraps lines when printing short file names.
- mv no longer causes data loss due to removing a source directory specified
  multiple times, when that directory is also specified as the destination.
- shred again uses defined patterns for all iteration counts.
- sort --debug -b now correctly marks the matching extents for keys
  that specify an offset for the first field.
- tail -F now works with initially non existent files on a remote file system.

Please note: usability issue for 'ls' is discussed in
http://lists.gnu.org/archive/html/coreutils/2016-02/msg00000.html

PR:		206512
Submitted by:	w.schwarzenfeld@aon.at
Approved by:	jharris@widomaker.com (maintainer)
2130826c2e
Mathieu Arnold (mat) · 8.23
Remove OSVERSION checks that do not make sense any more.

For example (${OSVERSION} >= 900000 && ${OSVERSION} < 900021) is always true,
as is (${OSVERSION} > 900002 || ${OSVERSION} < 900000 && ${OSVERSION} > 800107).

Regarding patches, when an EXTRA_PATCHES is no longer needed, I remove it, when
it is always needed, I renamed it, in one case, I merged two patches.

Differential Revision:	https://reviews.freebsd.org/D2209
0438143249
Bartek Rutkowski (robak) · 8.23
sysutils/coreutils: add CPE information

- Maintainer's timeout (jharris@widomaker.com)

PR:		198235
Submitted by:	Shun <shun.fbsd.pr@dropcut.net>
6599ceb150
Antoine Brodin (antoine) · 8.23
Cleanup plist
23b328aaf9
Kurt Jaeger (pi) · 8.23
sysutils/coreutils: fix pkg-plist for NLS=off

PR:		192309
Submitted by:	mat
e840be18ad
Kurt Jaeger (pi) · 8.23
sysutils/coreutils: avoid rebuilding WRKSRC/doc/coreutils.info

PR:		192309
Submitted by:	Martin Birgmeier <la5lbtyi@aon.at>
eb2643090c
Kurt Jaeger (pi) · 8.23
sysutils/coreutils: 8.22 -> 8.23

- fix CONFLICTS

PR:		192304
Submitted by:	jharris@widomaker.com (maintainer)
a767a1d09a
Philippe Audeoud (jadawin) · 8.22_2
- Submitter take maintainership - While I'm here use tar:xz

PR:		ports/191409
Submitted by:	jharris@widomaker.com
237f8bd9c9
Baptiste Daroussin (bapt) · 8.22_2
Convert GMAKE to MAKE_CMD Please note that lots of invocation of MAKE_CMD here are wrong as they do not properly respect MAKE_ENV and friends

With hat:	portmgr
a33191366c
Tijl Coosemans (tijl) · 8.22_2
Support LIBS like LDFLAGS.

- Add LIBS="${LIBS}" to MAKE_ENV and CONFIGURE_ENV.
- Add an option helper for LIBS.
- Adjust all ports that already use LIBS.  Also remove references to
  PTHREAD_CFLAGS and PTHREAD_LIBS while here.
- Some ports did not support having a LIBS environment variable and
  required additional patches.

Somewhat simplified a linker command line looks like:

${CC} ${src_LDFLAGS} ${LDFLAGS} ${src_LIBS} ${LIBS}

where src_LDFLAGS and src_LIBS are controlled by upstream and LDFLAGS and
LIBS can be controlled by us.  If possible -L and -l flags need to be
added to LIBS to make sure they appear after any -L and -l flags set by
upstream.  Many ports currently add -L${LOCALBASE}/lib to LDFLAGS but this
may appear too early on the command line causing installed libraries to
be linked in instead of freshly built ones.

Additional changes:
benchmarks/netio: Replace WITH_IPV6 with an IPV6 option.
comms/gnokii: Replace some patches with USES=pathfix.  Also remove -fPIC.
graphics/gimageview: USES=libtool and install desktop file in DESKTOPDIR.
graphics/visionworkbench: Remove FreeBSD 7 support.
multimedia/libmovtar: New LIB_DEPENDS syntax.
multimedia/opencinematools: Use standard do-build.
net/siproxd: USES=libtool:keepla (port actually needs .la files for plugins)
net-mgmt/nagios: Remove -fPIC.
net-mgmt/nagios4: Remove -fPIC.
print/cups-base: Only add -lssp_nonshared on i386 and OSVERSION < 1000036.
security/p11-kit: Replace PTHREAD_LIBS in CONFIGURE_ENV with
ac_cv_func_pthread_mutexattr_init=no in CONFIGURE_ARGS.  This skips a test
in configure that falsely detects pthread_mutexattr_init in our libc.
sysutils/dar: Fix iconv detection.
x11/rxvt-unicode: Remove -lstdc++ and patch configure to remove a FreeBSD
hack and use $CXX as linker as on other platforms.

PR:		190592
Exp-run by:	antoine
Approved by:	portmgr (antoine)
9f8b4bcde3
John Marino (marino) · 8.22_2
sysutils/coreutils: Reset maintainer

Three consecutive PR timeouts...
7741f8bee4
Tijl Coosemans (tijl) · 8.22_2
- Add missing dependency on iconv. - Fix GMP option.
61237efd1f
Martin Wilke (miwi) · 8.22_1
- Fix package build
ce7038d597
Martin Wilke (miwi) · 8.22_1
- Unbreak build
dfba767ae8
Jason Helfman (jgh) · 8.22
- update to 8.22 - support staging, strip libraries - trim master_site - use option helpers - shift away from inclusion of bsd.port.pre.mk as bsd.port.options.mk   can test OSVERSION (less expensive) - patch of Makefile was merged upstream so removed patch

PR:		185599
Submitted by:	jgh@ (myself)
Approved by:	maintainer timeout, jharris@widomaker.com ( 15 days )
8e9e1e5652
Baptiste Daroussin (bapt) · 8.20_2
Add NO_STAGE all over the place in preparation for the staging support (cat: sysutils)
83f65384c9
Andrej Zverev (az) · 8.20_2
- convert to the new perl5 framework - convert USE_GMAKE to Uses

Approved by:	portmgr (bapt@, blanket)
7ec4b3d1a2
Alex Kozlov (ak) · 8.20_2
- Convert USE_GETTEXT to USES (part 3)

Approved by:	portmgr (bapt)
e159824929
Bryan Drewery (bdrewery) · 8.20_2
- Fix build when NLS is disabled

PR:		ports/174021 [1]
PR:		ports/175745 [2]
Reported by:	Rusty Nejdl <rnejdl@ringofsaturn.com> [1]
Reported by:	Z Beeblebrox <zaphod@berentweb.com> [2]
Approved by:	maintainer timeout
Obtained from:	http://git.savannah.gnu.org/gitweb/?p=coreutils.git;a=commitdiff;h=88a6201
8eb049b327
Bryan Drewery (bdrewery) · 8.20_1
- Fix reinstall/upgrade trying to use gmkdir since it   was detected during build [1] - Mark MAKE_JOBS_UNSAFE:     help2man: can't get '--help' info from man/stty.td/stty     gmake[2]: *** [man/stty.1] Error 127     gmake[2]: *** Waiting for unfinished jobs....

PR:		ports/173218 [1]
Submitted by:	Jason Harris <jharris@widomaker.com> (maintainer) [1]
Feature safe:	yes
9ffee13dd9