# GNU Mtools 4.0.50 patches CVE-2026-118384 in legacy FAT filesystem utilities

> **Key takeaway:** The sole change in GNU Mtools 4.0.50 is a security fix for CVE-2026-118384, addressing a vulnerability in the decades-old collection of command-line tools for manipulating unmounted DOS/FAT media.

**Published:** 2026-10-31T18:30:47+00:00 
**Source:** FOSS Force 
**Category:** distro-news 
**Canonical URL:** https://fosswire.org/news/gnu-mtools-4050-patches-cve-2026-118384-in-legacy-fat-filesy.html 

## Summary
GNU Mtools 4.0.50 has been released by longtime maintainer Alain Knaff, containing exactly one change from the previous 4.0.49 release: a fix for CVE-2026-118384. Mtools is a GNU utility collection that allows users to read, write, and manipulate MS-DOS disks and FAT filesystems without mounting them, including support for FAT32, Windows-style long filenames, OS/2 Xdf disks, and 2m high-density disk formats. The package also provides mpartition for simple partitioning tasks and can operate on disk image files via the -i flag.

The software traces its origins to at least 1986 based on copyright notices in the source code, though it only became an official GNU package in March 2009. It remains licensed under GPL-3.0-or-later. Source tarballs are available in gzip, bzip2, and lzip formats from ftp.gnu.org and its worldwide mirrors.

## What changed in Mtools 4.0.50
- **CVE-2026-118384:** The release contains only this single security fix, with no other improvements or feature changes since version 4.0.49.
- **FAT filesystem access without mounting:** Mtools provides command-line utilities to access MS-DOS disks from GNU/Linux and Unix-like systems without requiring kernel-level filesystem mounting.
- **Supported formats:** The tool collection handles W32-style long file names, FAT32, OS/2 Xdf disks, and 2m disks capable of storing up to 1992k on high-density 3.5-inch floppies.
- **Disk image support:** Mtools can operate on raw disk image files through the -i flag, enabling offline manipulation of FAT media without physical disk access.
- **Partitioning utility:** The included mpartition tool provides basic partitioning capabilities for FAT media.

## Why it matters
While Mtools is increasingly legacy software in modern Linux environments, it remains packaged in most distributions and serves niche but critical use cases: embedded developers working with FAT-formatted boot media, retrocomputing enthusiasts, and recovery scenarios involving damaged or ancient DOS disks. The CVE fix warrants prompt distribution updates, as any security vulnerability in filesystem-handling code could potentially be exploited when processing untrusted disk images or removable media.