Package
sotruss-2.43
Component
sotruss-2.43
Latest update
Fixed version
2.43-r18
7.7
CVSS V3
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Fixed version
2.43-r18Impact
Fixed in glibc-2.43 2.43-r18. The upstream fix for CVE-2026-19499 (GLIBC-SA-2026-0017) is commit 713998bf001027c2507cb56f9d1c73e46a6bad0b on the glibc release/2.43/master stable branch, a cherry-pick of master commit b090cf226ff65b913e41536f1f573f500855615c. The files it changes (stdlib/strfmon_l.c) are identical at the build commit. glibc-2.43 is built from the release/2.43/master branch; every build from 2.43-r18 onward is built at commit 562cd7badd3f9edd74b68316439f910f6f7c4c1f or later, which includes that fix. Upstream does not publish tagged point releases from its stable branches, so version-based scanners continue to match 2.43 even though the fix is present.
Status
Impact
No fixed version exists within the 2.43 version. Upstream will need to patch this version.
Status