Search for packages
Package details: pkg:alpm/archlinux/lib32-glibc@2.26-10
purl pkg:alpm/archlinux/lib32-glibc@2.26-10
Next non-vulnerable version 2.26-11
Latest non-vulnerable version 2.37-2
Risk 10.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-z25y-bsee-aaac
Aliases:
CVE-2018-1000001
In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution.
2.26-11
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:46:04.866222+00:00 Arch Linux Importer Affected by VCID-z25y-bsee-aaac https://security.archlinux.org/AVG-590 36.0.0
2024-09-28T20:47:41.459200+00:00 Arch Linux Importer Affected by VCID-z25y-bsee-aaac https://security.archlinux.org/AVG-590 34.0.1
2024-01-31T12:09:57.402290+00:00 Arch Linux Importer Affected by VCID-z25y-bsee-aaac https://security.archlinux.org/AVG-590 34.0.0rc2
2024-01-03T22:27:24.991092+00:00 Arch Linux Importer Affected by VCID-z25y-bsee-aaac https://security.archlinux.org/AVG-590 34.0.0rc1