[El-errata] ELSA-2026-93461 Important: Oracle Linux 10 util-linux security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-93461

http://linux.oracle.com/errata/ELSA-2026-93461.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
libblkid-2.40.2-18.0.1.el10_2.20.x86_64.rpm
libblkid-devel-2.40.2-18.0.1.el10_2.20.x86_64.rpm
libfdisk-2.40.2-18.0.1.el10_2.20.x86_64.rpm
libfdisk-devel-2.40.2-18.0.1.el10_2.20.x86_64.rpm
libmount-2.40.2-18.0.1.el10_2.20.x86_64.rpm
libmount-devel-2.40.2-18.0.1.el10_2.20.x86_64.rpm
libsmartcols-2.40.2-18.0.1.el10_2.20.x86_64.rpm
libsmartcols-devel-2.40.2-18.0.1.el10_2.20.x86_64.rpm
libuuid-2.40.2-18.0.1.el10_2.20.x86_64.rpm
libuuid-devel-2.40.2-18.0.1.el10_2.20.x86_64.rpm
python3-libmount-2.40.2-18.0.1.el10_2.20.x86_64.rpm
util-linux-2.40.2-18.0.1.el10_2.20.x86_64.rpm
util-linux-core-2.40.2-18.0.1.el10_2.20.x86_64.rpm
uuidd-2.40.2-18.0.1.el10_2.20.x86_64.rpm

aarch64:
libblkid-2.40.2-18.0.1.el10_2.20.aarch64.rpm
libblkid-devel-2.40.2-18.0.1.el10_2.20.aarch64.rpm
libfdisk-2.40.2-18.0.1.el10_2.20.aarch64.rpm
libfdisk-devel-2.40.2-18.0.1.el10_2.20.aarch64.rpm
libmount-2.40.2-18.0.1.el10_2.20.aarch64.rpm
libmount-devel-2.40.2-18.0.1.el10_2.20.aarch64.rpm
libsmartcols-2.40.2-18.0.1.el10_2.20.aarch64.rpm
libsmartcols-devel-2.40.2-18.0.1.el10_2.20.aarch64.rpm
libuuid-2.40.2-18.0.1.el10_2.20.aarch64.rpm
libuuid-devel-2.40.2-18.0.1.el10_2.20.aarch64.rpm
python3-libmount-2.40.2-18.0.1.el10_2.20.aarch64.rpm
util-linux-2.40.2-18.0.1.el10_2.20.aarch64.rpm
util-linux-core-2.40.2-18.0.1.el10_2.20.aarch64.rpm
uuidd-2.40.2-18.0.1.el10_2.20.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/util-linux-2.40.2-18.0.1.el10_2.20.src.rpm

Related CVEs:

CVE-2026-13595
CVE-2026-27456
CVE-2026-53612
CVE-2026-53613
CVE-2026-53614
CVE-2026-53615
CVE-2026-76642
CVE-2026-78408
CVE-2026-78410




Description of changes:

[2.40.2-18.0.1.el10_2.20]
- fix -d -t output regression [OLDIS-51984]

[2.40.2-20]
- libblkid: validate EBR data [CVE-2026-53615]

[2.40.2-19]
- libmount and blkid security fixes
- libblkid: fix use-after-free in nested partition probing [CVE-2026-13595]
- nsenter: close cgroup.procs fd after join to prevent authority leak
  [CVE-2026-78408]
- libmount: fix SUID bypass via LIBMOUNT_FORCE_MOUNT2 and legacy mount
  [CVE-2026-53614]
- libmount: TOCTOU in the mount program via ancestor directory swap on
  target path  [CVE-2026-53613]
- libmount: TOCTOU in the mount program when applying post-mount
  ownership/mode changes [CVE-2026-53612]
- libmount: restrict the mount source for non-root users [CVE-2026-78410]
- libmount: skip post-mount hooks after a failed mount helper
  [CVE-2026-76642]
- loopdev: do not follow symlinks for the backing file [CVE-2026-27456]