GCVE-1988-2026-0386
Vulnerability from gna-1988 – Published: 2026-10-02 04:57 – Updated: 2026-10-02 04:57
VLAI
EPSS
VEX
Title
[Bugtraq] [slackware-security] util-linux (SSA:2026-249-03)
Summary
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
[slackware-security] util-linux (SSA:2026-249-03)
New util-linux packages are available for Slackware 15.0 and -current to
fix security issues.
Here are the details from the Slackware 15.0 ChangeLog:
+--------------------------+
patches/packages/util-linux-2.42.3-i586-1_slack15.0.txz: Upgraded.
This update fixes bugs and security issues.
For more information, see:
https://www.cve.org/CVERecord?id=CVE-2026-76642
https://www.cve.org/CVERecord?id=CVE-2026-78410
https://www.cve.org/CVERecord?id=CVE-2026-78409
https://www.cve.org/CVERecord?id=CVE-2026-78408
https://www.cve.org/CVERecord?id=CVE-2024-28085
(* Security fix *)
+--------------------------+
Where to find the new packages:
+-----------------------------+
Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project! :-)
Also see the "Get Slack" section on http://slackware.com for
additional mirror sites near you.
Updated package for Slackware 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/util-linux-2.42.3-i586-1_slack15.0.txz
Updated package for Slackware x86_64 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/util-linux-2.42.3-x86_64-1_slack15.0.txz
Updated package for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/a/util-linux-2.42.3-i686-1.txz
Updated package for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/a/util-linux-2.42.3-x86_64-1.txz
MD5 signatures:
+-------------+
Slackware 15.0 package:
3e9483340c5f61509aa78a2f518d22a6 util-linux-2.42.3-i586-1_slack15.0.txz
Slackware x86_64 15.0 package:
f0071486595a2eb48bb4a46271d16604 util-linux-2.42.3-x86_64-1_slack15.0.txz
Slackware -current package:
a98354e9546a510ee1e34062a174fb86 a/util-linux-2.42.3-i686-1.txz
Slackware x86_64 -current package:
d37e23a77cb3b230b3e4f72704a39d00 a/util-linux-2.42.3-x86_64-1.txz
Installation instructions:
+------------------------+
Upgrade the package as root:
# upgradepkg util-linux-2.42.3-i586-1_slack15.0.txz
+-----+
Slackware Linux Security Team
http://slackware.com/gpg-key
security@slackware.com
+------------------------------------------------------------------------+
| To leave the slackware-security mailing list: |
+------------------------------------------------------------------------+
| Send an email to majordomo@slackware.com with this text in the body of |
| the email message: |
| |
| unsubscribe slackware-security |
| |
| You will get a confirmation message back containing instructions to |
| complete the process. Please do not reply to this email address. |
+------------------------------------------------------------------------+
-----BEGIN PGP SIGNATURE-----
iHkEARECADkWIQTsVknaQB4iq/pnNu9qRGPAQBAiMwUCap4B3BsUgAAAAAAEAA5t
YW51MiwyLjUrMS4xMiwyLDIACgkQakRjwEAQIjMXBwCfW1CoHKpvIYNLF6xsWpHZ
fLwhKH0AnjTNPEk//gWO9lqpIw2HVrUZVhTh
=QQk+
-----END PGP SIGNATURE-----
Severity
No CVSS data available.
Assigner
References
10 references
Impacted products
1 product
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| unknown | util-linux SSA:2026-249-03 |
Affected:
unknown
|
guessed |
Relationships
reference
GCVE-1988-2026-0386 (this record)
- related CVE-2024-28085
- related CVE-2026-76642
- related CVE-2026-78408
- related CVE-2026-78409
- related CVE-2026-78410
{
"containers": {
"cna": {
"affected": [
{
"product": "util-linux SSA:2026-249-03",
"vendor": "unknown",
"versions": [
{
"status": "affected",
"version": "unknown"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Slackware Security Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n[slackware-security] util-linux (SSA:2026-249-03)\nNew util-linux packages are available for Slackware 15.0 and -current to\nfix security issues.\nHere are the details from the Slackware 15.0 ChangeLog:\n+--------------------------+\npatches/packages/util-linux-2.42.3-i586-1_slack15.0.txz: Upgraded.\nThis update fixes bugs and security issues.\nFor more information, see:\nhttps://www.cve.org/CVERecord?id=CVE-2026-76642\nhttps://www.cve.org/CVERecord?id=CVE-2026-78410\nhttps://www.cve.org/CVERecord?id=CVE-2026-78409\nhttps://www.cve.org/CVERecord?id=CVE-2026-78408\nhttps://www.cve.org/CVERecord?id=CVE-2024-28085\n(* Security fix *)\n+--------------------------+\nWhere to find the new packages:\n+-----------------------------+\nThanks to the friendly folks at the OSU Open Source Lab\n(http://osuosl.org) for donating FTP and rsync hosting\nto the Slackware project! :-)\nAlso see the \"Get Slack\" section on http://slackware.com for\nadditional mirror sites near you.\nUpdated package for Slackware 15.0:\nftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/util-linux-2.42.3-i586-1_slack15.0.txz\nUpdated package for Slackware x86_64 15.0:\nftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/util-linux-2.42.3-x86_64-1_slack15.0.txz\nUpdated package for Slackware -current:\nftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/a/util-linux-2.42.3-i686-1.txz\nUpdated package for Slackware x86_64 -current:\nftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/a/util-linux-2.42.3-x86_64-1.txz\nMD5 signatures:\n+-------------+\nSlackware 15.0 package:\n3e9483340c5f61509aa78a2f518d22a6 util-linux-2.42.3-i586-1_slack15.0.txz\nSlackware x86_64 15.0 package:\nf0071486595a2eb48bb4a46271d16604 util-linux-2.42.3-x86_64-1_slack15.0.txz\nSlackware -current package:\na98354e9546a510ee1e34062a174fb86 a/util-linux-2.42.3-i686-1.txz\nSlackware x86_64 -current package:\nd37e23a77cb3b230b3e4f72704a39d00 a/util-linux-2.42.3-x86_64-1.txz\nInstallation instructions:\n+------------------------+\nUpgrade the package as root:\n# upgradepkg util-linux-2.42.3-i586-1_slack15.0.txz\n+-----+\nSlackware Linux Security Team\nhttp://slackware.com/gpg-key\nsecurity@slackware.com\n+------------------------------------------------------------------------+\n| To leave the slackware-security mailing list: |\n+------------------------------------------------------------------------+\n| Send an email to majordomo@slackware.com with this text in the body of |\n| the email message: |\n| |\n| unsubscribe slackware-security |\n| |\n| You will get a confirmation message back containing instructions to |\n| complete the process. Please do not reply to this email address. |\n+------------------------------------------------------------------------+\n-----BEGIN PGP SIGNATURE-----\niHkEARECADkWIQTsVknaQB4iq/pnNu9qRGPAQBAiMwUCap4B3BsUgAAAAAAEAA5t\nYW51MiwyLjUrMS4xMiwyLDIACgkQakRjwEAQIjMXBwCfW1CoHKpvIYNLF6xsWpHZ\nfLwhKH0AnjTNPEk//gWO9lqpIw2HVrUZVhTh\n=QQk+\n-----END PGP SIGNATURE-----"
}
],
"providerMetadata": {
"dateUpdated": "2026-10-02T04:57:25Z",
"orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"shortName": "VULNARCHIVE"
},
"references": [
{
"tags": [
"technical-description"
],
"url": "https://vuln.freearchive.org/archive/item/1b6fc391e1ba52855185d6d6ce4d9d4434161b3e29e2ac70ba6c69f0784fd3ce"
},
{
"tags": [
"technical-description"
],
"url": "https://lists.securityfocus.com/hyperkitty/list/bugtraq@securityfocus.com/message/26IJHCEBETHNNXUFHSVBINVM62IHWWW4/"
},
{
"url": "http://osuosl.org"
},
{
"url": "http://slackware.com"
},
{
"url": "http://slackware.com/gpg-key"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28085"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76642"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78408"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78409"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78410"
}
],
"source": {
"defect": [
"alpine.LNX.2.02.2609061717540.6083%40connie.slackware.com"
],
"discovery": "EXTERNAL"
},
"title": "[Bugtraq] [slackware-security] util-linux (SSA:2026-249-03)",
"x_gcve": [
{
"recordType": "reference",
"relationships": [
{
"destId": "CVE-2024-28085",
"type": "related"
},
{
"destId": "CVE-2026-76642",
"type": "related"
},
{
"destId": "CVE-2026-78408",
"type": "related"
},
{
"destId": "CVE-2026-78409",
"type": "related"
},
{
"destId": "CVE-2026-78410",
"type": "related"
}
],
"vulnId": "GCVE-1988-2026-0386",
"x_vulnarchive": {
"archiveUrl": "https://vuln.freearchive.org/archive/item/1b6fc391e1ba52855185d6d6ce4d9d4434161b3e29e2ac70ba6c69f0784fd3ce",
"automated": true,
"contentSha256": "1b6fc391e1ba52855185d6d6ce4d9d4434161b3e29e2ac70ba6c69f0784fd3ce",
"evidenceScore": 6,
"messageId": "alpine.LNX.2.02.2609061717540.6083%40connie.slackware.com",
"originalUrl": "https://lists.securityfocus.com/hyperkitty/list/bugtraq@securityfocus.com/message/26IJHCEBETHNNXUFHSVBINVM62IHWWW4/",
"policy": "vulnarchive-1",
"sourceFormat": "text/html",
"sourcePublishedAt": "2026-10-02T04:57:25Z"
}
},
{
"recordType": "advisory",
"vulnId": "gcve-1988-2026-0386"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"assignerShortName": "VULNARCHIVE",
"datePublished": "2026-10-02T04:57:25Z",
"dateUpdated": "2026-10-02T04:57:25Z",
"state": "PUBLISHED",
"vulnId": "GCVE-1988-2026-0386"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…