GNU (Organization): news timeline & CVEs

Re: CVE-2026-100310: GNU libextractor < 1.16 Privilege Escalation via LIBEXTRACTOR_PREFIX

Simon McVittie questions whether libextractor CVE-2026-100310 is a realistic setuid privilege escalation.

On oss-security, Simon McVittie replied about CVE-2026-100310, a claimed privilege escalation in GNU libextractor before 1.16 via the LIBEXTRACTOR_PREFIX environment variable. He asked whether the library was ever advertised as safe for setuid, setgid, or other privileged processes. Package descriptions present it as a metadata library for file-sharing networks, file managers, and web-indexing bots. He argues those are not typical setuid use cases, limiting practical impact.

oss-securitySep 26, 17:34 UTC · 16h agoVulnerability 3 sources CVE-2026-100310

CVE-2026-95510: GNU Inetutils: use of uninitialized struct sigaction

GNU Inetutils CVE-2026-95510 uses an uninitialized sigaction in rlogin, rlogind, and telnetd, risking crashes.

Collin Funk disclosed CVE-2026-95510 in GNU Inetutils after Brian Mak privately reported a bug in libinetutils on 2026-09-14. A function used by rlogin, rlogind, and telnetd uses an uninitialized struct sigaction. Mak saw telnetd crash, which can cause denial of service, and maintainers also discussed possible code execution on some platforms. Possible exploits are not fully clear, and no in-the-wild exploitation is reported.

oss-securityupdated Sep 26, 17:34 UTC · 16h agofirst Sep 26, 06:17 UTC · 1d agoVulnerability 3 sources CVE-2026-95510

CVE-2026-100310: GNU libextractor < 1.16 Privilege Escalation via LIBEXTRACTOR_PREFIX

GNU libextractor before 1.16 can be locally escalated via the LIBEXTRACTOR_PREFIX search path.

An untrusted search path flaw, CVE-2026-100310, affects GNU libextractor versions before 1.16. The library uses getenv("LIBEXTRACTOR_PREFIX") in extractor_plugpath.c to choose plugin search paths without verifying the calling process. Controlling that variable can redirect plugin loading and enable local privilege escalation. The report does not describe observed exploitation.

oss-securityupdated Sep 26, 17:34 UTC · 16h agofirst Sep 25, 22:31 UTC · 1d agoVulnerability 3 sources CVE-2026-100310

Re: GNU Emacs vulnerability upon opening arbitrary file

CVE-2026-96269 was assigned to a GNU Emacs flaw triggered by opening an arbitrary file.

A short oss-security follow-up says CVE-2026-96269 was assigned on September 22, 2026, to a previously discussed GNU Emacs issue. The vulnerability is triggered when Emacs opens an arbitrary file. The message includes no affected versions, impact details, exploit information, or patch guidance.

oss-securitySep 23, 15:15 UTC · 3d agoVulnerability 4 sources CVE-2026-96269

CVE-2026-91752: GNU libextractor < 1.15 Stack Overflow via OLE2

GNU libextractor before 1.15 has a stack-based buffer overflow (CVE-2026-91752) in its OLE2 parser, triggerable via crafted files.

A stack-based buffer overflow was identified in GNU libextractor's OLE2 plugin in versions prior to 1.15, assigned CVE-2026-91752. The flaw resides in the process_star_office function, which sizes a variable-length stack array using attacker-controlled OLE2 stream data. Attackers can craft malicious OLE2/StarOffice files to trigger the overflow. The issue was disclosed on the oss-security mailing list by researcher Haitam Lazaar on September 16, 2026.

oss-securitySep 16, 23:13 UTC · 10d agoVulnerability CVE-2026-91752

GNU

Timeline5 articles

Related CVEsby mentions

Appears with

Re: CVE-2026-100310: GNU libextractor < 1.16 Privilege Escalation via LIBEXTRACTOR_PREFIX

CVE-2026-95510: GNU Inetutils: use of uninitialized struct sigaction

CVE-2026-100310: GNU libextractor < 1.16 Privilege Escalation via LIBEXTRACTOR_PREFIX

Re: GNU Emacs vulnerability upon opening arbitrary file

CVE-2026-91752: GNU libextractor < 1.15 Stack Overflow via OLE2