DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CGA-jrmf-hvfv-3938

Package

glibc-2.43-dev

Component

glibc-2.43-dev

Latest update

Fixed

Fixed version

2.43-r18

Aliases

Severity

Unknown
Eliminate CVEs with Chainguard hardened images

Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.

Start for free

References

  • https://nvd.nist.gov/vuln/detail/CVE-2026-18374

Updates

Status

Fixed

Fixed version

2.43-r18

Impact

Fixed in glibc-2.43 2.43-r18. The upstream fix for CVE-2026-18374 (GLIBC-SA-2026-0015) is commit 72351055c6a1328c1ce2c06b72b8a4e3ebe0ef08 on the glibc release/2.43/master stable branch, a cherry-pick of master commit 9765a538ebf8661a6e5578e01e35a3dd30db7eb4. The files it changes (libio/fileops.c) are identical at the build commit. glibc-2.43 is built from the release/2.43/master branch; every build from 2.43-r18 onward is built at commit 562cd7badd3f9edd74b68316439f910f6f7c4c1f or later, which includes that fix. Upstream does not publish tagged point releases from its stable branches, so version-based scanners continue to match 2.43 even though the fix is present.

Status

Pending upstream fix

Impact

Waiting on upstream to publish a fixed version for this vulnerability.

Status

Under investigation


The trusted source for open source

Talk to an expert
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsChainguard OS PackagesChainguard ActionsChainguard Agent SkillsIntegrationsPricing
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.