update: util-linux

[github-actions]

Name: util-linux
CVEs: CVE-2026-53612, CVE-2026-53613, CVE-2026-53614, CVE-2026-27456, CVE-2026-76642, CVE-2026-78408, CVE-2026-78409, CVE-2026-78410, CVE-2024-28085
CVSSs: n/a
Action Needed: update target
Summary: Multiple util-linux security issues affect mount(8), including TOCTOU races, a SUID environment-variable bypass, and a loop-device symlink attack follow-up; libblkid also has a use-after-free in nested partition probing.

refmap.gentoo: https://bugs.gentoo.org/977563, http://bugs.gentoo.org/show_bug.cgi?id=971935, https://bugs.gentoo.org/981937, http://bugs.gentoo.org/show_bug.cgi?id=927980

[github-actions]

Gentoo Bugzilla has new or changed upstream context for this advisory.

Recommended review items:

• Review Gentoo severity: normal
• Review upstream references: http://bugs.gentoo.org/show_bug.cgi?id=971935
• Review Bugzilla description: util-linux/util-linux@35d05e1

"""
Security fixes:

CVE-2026-53613 - mount(8) TOCTOU race on target path.
The SUID mount does not pin the mount target directory, allowing a
race between path resolution and the actual mount syscall....

Source: https://bugs.gentoo.org/977563

This is a guarded automation recommendation; maintainers should review before editing the advisory body.