Cloudsmith - Repositories - circle (circle) - arc-network (arc-network) - arc-execution

Package Search Help

You can use boolean logic (e.g. AND/OR/NOT) for complex search queries. For more help and examples, see the search documentation.

Search by package name:
my-package _(implicit)
name:my-package _(explicit)

Search by package filename:
filename:my-package.ext

Search by package tag:
tag:latest

Search by package version:
version:1.0.0 prerelease:true _{(prereleases)}
prerelease:false _{(no prereleases)}

Search by package architecture:
architecture:x86_64

Search by package distribution:
distribution:el

Search by package license:
license:MIT

Search by package format:
format:deb

Search by package status:
status:in_progress

Search by package file checksum:
checksum:5afba

Search by package security status:
severity:critical

Search by package vulnerabilities:
vulnerabilities:>1
vulnerabilities:<1000

Search by # of package downloads:
downloads:>8
downloads:<100

Search by package type:
type:binary
type:source

Search by package size (bytes):
size:>50000
size:<10000

Search by dependency name/version:
dependency:log4j
dependency:log4j=1.0.0
dependency:log4j>1.0.0

Search by uploaded date:
uploaded:>"1 day ago"
uploaded:<"August 14, 2022 EST"

Search by entitlement token (identifier):
entitlement:3lKPVJPosCsY

Search by policy violation:
policy_violated:true
deny_policy_violated:true
license_policy_violated:true
vulnerability_policy_violated:true

Search by repository:
repository:repo-name

Search by last download date:
last_downloaded:<"30 days ago"
last_downloaded:>"August 14, 2022 EST"

Search queries for all Debian-specific (and related) package types

Search by component:
deb_component:unstable

Search queries for all Maven-specific (and related) package types

Search by group ID:
maven_group_id:org.apache

Search queries for all Docker-specific (and related) package types

Search by image digest:
docker_image_digest:sha256:7c5..6d4
(full hashref only)

Search by layer digest:
docker_layer_digest:sha256:4c4..ae4
(full hashref only)

Search queries for all Generic-specific package types

Search by file path:
generic_filepath:path/to/file.txt

Search by directory:
generic_directory:path/to

Field type modifiers (depending on the type, you can influence behaviour)

For all queries, you can use:
~foo for negation

For string queries, you can use:
^foo to anchor to start of term
foo$ to anchor to end of term
foo*bar for fuzzy matching

For number/date or version queries, you can use:
>foo for values greater than
>=foo for values greater / equal
<foo for values less than
<=foo for values less / equal

Need a secure and centralised artifact repository to deliver Alpine, Cargo, CocoaPods, Composer, Conan, Conda, CRAN, Dart, Debian, Docker, Generic, Go, Helm, Hex, HuggingFace, LuaRocks, Maven, MCP, Nix, npm, NuGet, P2, Python, RedHat, Ruby, Swift, Terraform, Vagrant, VSX, Raw & More packages?

Cloudsmith is the new standard in Package / Artifact Management and Software Distribution.

With support for all major package formats, you can trust us to manage your software supply chain.

Start My Free Trial

Set Me Up

Public — circle / arc-network

Public repository for ARC blockchain release images

arc-execution 2a5badbe540eaaa206cd4568dfb…

Download

One-liner (summary)

A certifiably-awesome package curated by arc-publisher-gha-service, hosted by Cloudsmith.

Description

A certifiably-awesome package curated by arc-publisher-gha-service, hosted by Cloudsmith.

License

Unknown

Size

41.5 MB

Downloads

Tags

image amd64 linux

Status	Completed
Checksum (MD5)	2bcd883d6b357f0dd7935d919223bf13
Checksum (SHA-1)	c685e71d2155972d23945423a33a7330e286d088
Checksum (SHA-256)	2a5badbe540eaaa206cd4568dfb4d0f28107a8943da3172ebc30b635777eddc5
Checksum (SHA-512)	be28f0fb5d5cd18cb19fc1688f15b605e67b4fba3fd377d4b767ee682e31e17956…
GPG Signature	Download
GPG Fingerprint	2006bcbaea44c3d0630ff4e132ef04c02d67714a
Storage Region	Ohio, United States
Type	Binary (contains binaries and binary artifacts)
Uploaded At	4 months, 1 week ago
Uploaded By
Slug Id	arc-execution-kkq0
Unique Id	O1gMhPGYUzP1
Version (Raw)	2a5badbe540eaaa206cd4568dfb4d0f28107a8943da3172ebc30b635777eddc5
Version (Parsed)	Type: Unknown
	docker-specific metadata
Image Digest	sha256:2a5badbe540eaaa206cd4568dfb4d0f28107a8943da3172ebc30b635777eddc5
Config Digest	sha256:ed99df79d840a89cc2ec30dfa3bfe4e98117a26de9af27f5dddd883dc5d8cfc7
V1 OCI Index Digest	sha256:66c11e8596545a7a6df4d6fb9178ed1a7b18ad9e5cf9e75c227fcea1369e9061
V1 Distribution (Signed) Digest	sha256:3a9a3fdc85f7c7bdc8f24aa4cc00789820808aeab76bebfed00375107fd37c47
V2 Distribution List Digest	sha256:867ae4607720d8aedb0e412f8d6ede224f5cb36c64d683c6b7e18263d0f4b686
V2 Distribution Digest	sha256:42f5a54661ff4e304e891072fc602b50da89dfb9881f91acf574302f77b7a5ed
V1 Distribution Digest	sha256:fe67995c315f1eaf91828f4de125b93624340a657290a9c6c54441cd325b41cd
V1 OCI Digest	sha256:2a5badbe540eaaa206cd4568dfb4d0f28107a8943da3172ebc30b635777eddc5
	extended metadata
Manifest Type	V1 OCI
Architecture	amd64
Config	Entrypoint /usr/local/bin/arc-node-execution Env PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin \| SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt Exposed Ports 6061/tcp \| 8545/tcp \| 8546/tcp \| 8551/tcp \| 9001/tcp User arc Working Dir /home/nonroot
Created	2026-04-24 14:54:01 UTC
Os	linux

This package was uploaded with the following V1 OCI manifest:

{
  "schemaVersion": 2,
  "mediaType": "application/vnd.oci.image.manifest.v1+json",
  "config": {
    "mediaType": "application/vnd.oci.image.config.v1+json",
    "digest": "sha256:f3506d4b3bbf2275cb5e7f1c0eb49b2163b7a3ddeb135e81991b3813c761661c",
    "size": 5048
  },
  "layers": [
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:526604835308e0d61f64a3d3e2d614308fef4ed655f0111a4566627296c0195c",
      "size": 83843
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:990a9c434e5e0f11549a8d4a41a1991e621b04e30cd63269adbc97b1dc38fd7e",
      "size": 12481
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:ef49c20a7b35aa995683f311510d35d77e203a2204f84de14a71a6d726e6af73",
      "size": 440802
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:bf7a4185f01524837d19abde915ffde84e64368b250f5b5e9f6f75aea62a11d4",
      "size": 29005
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:2780920e5dbfbe103d03a583ed75345306e572ec5a48cb10361f046767d9f29a",
      "size": 67
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:7c12895b777bcaa8ccae0605b4de635b68fc32d60fa08f421dc3818bf55ee212",
      "size": 188
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:3214acf345c0cc6bbdb56b698a41ccdefc624a09d6beb0d38b5de0b2303ecaf4",
      "size": 123
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:52630fc75a18675c530ed9eba5f55eca09b03e91bd5bc15307918bbc1a7e7296",
      "size": 162
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:dd64bf2dd177757451a98fcdc999a339c35dee5d9872d8f4dc69c8f3c4dd0112",
      "size": 80
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:b839dfae01f66e15c6a8b63520557ed315bdfe036342fa7a0c537259f10d7a9a",
      "size": 351
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:dcaa5a89b0ccda4b283e16d0b4d0891cd93d5fe05c6798f7806781a6a2d84354",
      "size": 314
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:069d1e267530c2e681fbd4d481553b4d05f98082b18fafac86e7f12996dddd0b",
      "size": 131915
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:c65bb0c25578bf8f2a8b87d1996dfd93a5330c03195c8f0401cf88b2e0de9210",
      "size": 4950300
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:09a293e23ad4da809ddcb1272242692a54d381c3b33a292919097ff8620b0f50",
      "size": 2503491
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:336f6c853c4e7eaa77938f48c9b7ce98841916930fb3da435f7ca69586fe5853",
      "size": 133534
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:1e8acdaa260712eac85de25745cd44440065e108314a5d02c01a6678d4b75143",
      "size": 779467
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:a812c900745ef51faf67489acb703c178411510edf7e0ab31af973e08567afb0",
      "size": 57201
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:b16bb3b2bd07785f19e8c72faf8106454371bff33191bdb4480fd8d9455b7472",
      "size": 40308
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:ddfbdd44b9c8b336f959247e68b41fb8b4f2a9d7c4f78f5d585ffb9e8fd28a18",
      "size": 124295
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:3996a97a9501afc9f8b3b507826c79786995d2e743b42119f1c6a47c0a2eeb5a",
      "size": 164
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:b4723c3a0ace6263bd7701d82f02683d065609c8c26e53eb800565c1f4065aa1",
      "size": 148
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:b794a760cc465bbd2f3ae17930440316655ef32cd4efd24f908e488a584184dc",
      "size": 29736890
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:7a1c573b93b4273b08b065d4ace81648b0744b8bd6f10d7f6252f487e778b4cd",
      "size": 4498939
    }
  ]
}

	Digest: sha256:526604835308e0d61f64a3d3e2d614308fef4ed655f0111a4566627296c0195c Command: bazel build @bookworm//base-files/amd64:data_statusd	81.9 KB
	Digest: sha256:990a9c434e5e0f11549a8d4a41a1991e621b04e30cd63269adbc97b1dc38fd7e Command: bazel build @bookworm//netbase/amd64:data_statusd	12.2 KB
	Digest: sha256:ef49c20a7b35aa995683f311510d35d77e203a2204f84de14a71a6d726e6af73 Command: bazel build @bookworm//tzdata/amd64:data_statusd	430.5 KB
	Digest: sha256:bf7a4185f01524837d19abde915ffde84e64368b250f5b5e9f6f75aea62a11d4 Command: bazel build @bookworm//media-types/amd64:data_statusd	28.3 KB
	Digest: sha256:2780920e5dbfbe103d03a583ed75345306e572ec5a48cb10361f046767d9f29a Command: bazel build //common:rootfs	67 bytes
	Digest: sha256:7c12895b777bcaa8ccae0605b4de635b68fc32d60fa08f421dc3818bf55ee212 Command: bazel build //common:passwd	188 bytes
	Digest: sha256:3214acf345c0cc6bbdb56b698a41ccdefc624a09d6beb0d38b5de0b2303ecaf4 Command: bazel build //common:home	123 bytes
	Digest: sha256:52630fc75a18675c530ed9eba5f55eca09b03e91bd5bc15307918bbc1a7e7296 Command: bazel build //common:group	162 bytes
	Digest: sha256:dd64bf2dd177757451a98fcdc999a339c35dee5d9872d8f4dc69c8f3c4dd0112 Command: bazel build //common:tmp	80 bytes
	Digest: sha256:b839dfae01f66e15c6a8b63520557ed315bdfe036342fa7a0c537259f10d7a9a Command: bazel build //static:nsswitch	351 bytes
	Digest: sha256:dcaa5a89b0ccda4b283e16d0b4d0891cd93d5fe05c6798f7806781a6a2d84354 Command: bazel build //common:os_release_debian12	314 bytes
	Digest: sha256:069d1e267530c2e681fbd4d481553b4d05f98082b18fafac86e7f12996dddd0b Command: bazel build //common:cacerts_debian12_amd64	128.8 KB
	Digest: sha256:c65bb0c25578bf8f2a8b87d1996dfd93a5330c03195c8f0401cf88b2e0de9210 Command: bazel build @bookworm//libc6/amd64:data_statusd	4.7 MB
	Digest: sha256:09a293e23ad4da809ddcb1272242692a54d381c3b33a292919097ff8620b0f50 Command: bazel build @bookworm//libssl3/amd64:data_statusd	2.4 MB
	Digest: sha256:336f6c853c4e7eaa77938f48c9b7ce98841916930fb3da435f7ca69586fe5853 Command: bazel build @bookworm//libgomp1/amd64:data_statusd	130.4 KB
	Digest: sha256:1e8acdaa260712eac85de25745cd44440065e108314a5d02c01a6678d4b75143 Command: bazel build @bookworm//libstdc++6/amd64:data_statusd	761.2 KB
	Digest: sha256:a812c900745ef51faf67489acb703c178411510edf7e0ab31af973e08567afb0 Command: bazel build @bookworm//libgcc-s1/amd64:data_statusd	55.9 KB
	Digest: sha256:b16bb3b2bd07785f19e8c72faf8106454371bff33191bdb4480fd8d9455b7472 Command: bazel build @bookworm//gcc-12-base/amd64:data_statusd	39.4 KB
	Digest: sha256:ddfbdd44b9c8b336f959247e68b41fb8b4f2a9d7c4f78f5d585ffb9e8fd28a18 Command: COPY /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt # buildkit	121.4 KB
	Digest: sha256:3996a97a9501afc9f8b3b507826c79786995d2e743b42119f1c6a47c0a2eeb5a Command: COPY /tmp/passwd /etc/passwd # buildkit	164 bytes
	Digest: sha256:b4723c3a0ace6263bd7701d82f02683d065609c8c26e53eb800565c1f4065aa1 Command: COPY /tmp/group /etc/group # buildkit	148 bytes
	Digest: sha256:b794a760cc465bbd2f3ae17930440316655ef32cd4efd24f908e488a584184dc Command: COPY /tmp/arc-node-execution /usr/local/bin/arc-node-execution # buildkit	28.4 MB
	Digest: sha256:7a1c573b93b4273b08b065d4ace81648b0744b8bd6f10d7f6252f487e778b4cd Command: COPY /tmp/arc-snapshots /usr/local/bin/arc-snapshots # buildkit	4.3 MB
	Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4 Command: EXPOSE [6061/tcp 8545/tcp 8546/tcp 8551/tcp 9001/tcp]	32 bytes
	Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4 Command: USER arc	32 bytes
	Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4 Command: ENTRYPOINT ["/usr/local/bin/arc-node-execution"]	32 bytes

arc-execution 45a0f17442ae29488a8516a8a47f5ae368da75a…	image amd64 linux 47.0 MB — 1 week, 2 days ago	84
arc-execution 2d26717da2fd7d18bd34fe0419f8f50e299602b…	image arm64 linux 46.2 MB — 1 week, 2 days ago	16
arc-execution 8e4fe10829d1c1ccb5c4651d3799d21b1f605f6…	image amd64 linux 41.6 MB — 1 month, 2 weeks ago	100
arc-execution 7d397210f997ade6e9315ac2d0db2e95c8ae5d8…	image arm64 linux 41.2 MB — 1 month, 2 weeks ago	11
arc-execution 553b6985c54cfe4979d5cc96fc1d9291e08280d…	image amd64 linux 41.6 MB — 1 month, 2 weeks ago	18
arc-execution 7c8c0e0b7b919ee6f772b0d97bf84c94b1e69b0…	image amd64 linux 41.6 MB — 3 months ago	1889
arc-execution 592f2bf7be88d45150fcbf0162d43c4ef76defa…	image arm64 linux 41.2 MB — 3 months ago	35
arc-execution eacdd82c5a0f6af49f318127c4311ceb29be2de…	image arm64 linux 41.2 MB — 3 months, 2 weeks ago	10
arc-execution fb3607229b397903c0182836f6fc1f88da88507…	image arm64 linux 41.1 MB — 4 months, 1 week ago	0
arc-execution fd71f49dd93027225cc41a25e43136db93c4271…	image amd64 linux 41.5 MB — 4 months, 4 weeks ago	93
arc-execution 3a1c99fb842ce61b3ab7ba17fb4bc7c9bab767d…	image arm64 linux 41.1 MB — 4 months, 4 weeks ago	22
arc-execution 3b3f7d01dee29372a264badb10a5b4a3bf38d88…	image amd64 linux 41.5 MB — 4 months, 4 weeks ago	2
arc-execution f6319755b5ad16596567134f34b4c675c2f4be3…	image arm64 linux 41.1 MB — 4 months, 4 weeks ago	1
arc-execution 2a5badbe540eaaa206cd4568dfb4d0f28107a89…	image amd64 linux 41.5 MB — 4 months, 1 week ago	21
arc-execution 082e3fd2e953f2a9d20215249c8d57701b9f1cb…	image arm64 linux 41.2 MB — 1 month, 2 weeks ago	1
arc-execution 0c6de350d195e8cea5ab2208bb006304c484120…	image amd64 linux 41.6 MB — 3 months, 2 weeks ago	85
arc-execution 27a351517156d5f2835029786d5d55fc777df2a…	image amd64 linux 37.2 MB — 4 months, 4 weeks ago	2
arc-execution 0791b5acc3e9c26b3fc4bf8ca2cf66df3708cd3…	image arm64 linux 36.5 MB — 4 months, 4 weeks ago	1

Only packages within the same repository are displayed. The current package you're viewing is highlighted.

Last scanned

4 months, 1 week ago

Scan result

Vulnerable

Vulnerability count

Max. severity

High

Target:	O1gMhPGYUzP1.sbom-cyclonedx.json (debian 12.13)
HIGH	CVE-2026-0861: glibc: Integer overflow in memalign leads to heap corruption Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in a heap corruption. Note that the attacker must have control over both, the size as well as the alignment arguments of the memalign function to be able to exploit this. The size parameter must be close enough to PTRDIFF_MAX so as to overflow size_t along with the large alignment argument. This limits the malicious inputs for the alignment for memalign to the range [1<<62+ 1, 1<<63] and exactly 1<<63 for posix_memalign and aligned_alloc. Typically the alignment argument passed to such functions is a known constrained quantity (e.g. page size, block size, struct sizes) and is not attacker controlled, because of which this may not be easily exploitable in practice. An application bug could potentially result in the input alignment being too large, e.g. due to a different buffer overflow or integer overflow in the application or its dependent libraries, but that is again an uncommon usage pattern given typical sources of alignments. Package Name: libc6 Installed Version: 2.36-9+deb12u13 Fixed Version: References: www.openwall.com access.redhat.com access.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com cve.mitre.org cve.mitre.org cve.mitre.org errata.almalinux.org errata.rockylinux.org linux.oracle.com linux.oracle.com nvd.nist.gov sourceware.org sourceware.org ubuntu.com www.cve.org
MEDIUM	CVE-2025-15281: glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on subsequent calls to wordfree may abort the process. Package Name: libc6 Installed Version: 2.36-9+deb12u13 Fixed Version: References: www.openwall.com access.redhat.com access.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com cve.mitre.org cve.mitre.org cve.mitre.org errata.almalinux.org errata.rockylinux.org linux.oracle.com linux.oracle.com nvd.nist.gov sourceware.org ubuntu.com www.cve.org www.openwall.com
MEDIUM	CVE-2026-0915: glibc: glibc: Information disclosure via zero-valued network query Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver. Package Name: libc6 Installed Version: 2.36-9+deb12u13 Fixed Version: References: www.openwall.com access.redhat.com access.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com cve.mitre.org cve.mitre.org cve.mitre.org errata.almalinux.org errata.rockylinux.org linux.oracle.com linux.oracle.com nvd.nist.gov sourceware.org ubuntu.com www.cve.org www.openwall.com
MEDIUM	CVE-2026-4046: glibc: glibc: Denial of Service via iconv() function with specific character sets The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application. This vulnerability can be trivially mitigated by removing the IBM1390 and IBM1399 character sets from systems that do not need them. Package Name: libc6 Installed Version: 2.36-9+deb12u13 Fixed Version: References: access.redhat.com inbox.sourceware.org nvd.nist.gov packages.fedoraproject.org sourceware.org sourceware.org sourceware.org www.cve.org
MEDIUM	CVE-2026-4437: glibc: glibc: Incorrect DNS response parsing via crafted DNS server response Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C Library version 2.34 to version 2.43 could, with a crafted response from the configured DNS server, result in a violation of the DNS specification that causes the application to treat a non-answer section of the DNS response as a valid answer. Package Name: libc6 Installed Version: 2.36-9+deb12u13 Fixed Version: References: access.redhat.com nvd.nist.gov sourceware.org www.cve.org www.openwall.com
MEDIUM	CVE-2026-4438: glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in an invalid DNS hostname being returned to the caller in violation of the DNS specification. Package Name: libc6 Installed Version: 2.36-9+deb12u13 Fixed Version: References: access.redhat.com nvd.nist.gov sourceware.org www.cve.org www.openwall.com
MEDIUM	CVE-2026-5450: glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow. Package Name: libc6 Installed Version: 2.36-9+deb12u13 Fixed Version: References: access.redhat.com inbox.sourceware.org nvd.nist.gov sourceware.org www.cve.org
MEDIUM	CVE-2026-5928: glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially resulting in unintentional disclosure of neighboring data in the heap, or a program crash. A bug in the wide character pushback implementation (_IO_wdefault_pbackfail in libio/wgenops.c) causes ungetwc() to operate on the regular character buffer (fp->_IO_read_ptr) instead of the actual wide-stream read pointer (fp->_wide_data->_IO_read_ptr). The program crash may happen in cases where fp->_IO_read_ptr is not initialized and hence points to NULL. The buffer under-read requires a special situation where the input character encoding is such that there are overlaps between single byte representations and multibyte representations in that encoding, resulting in spurious matches. The spurious match case is not possible in the standard Unicode character sets. Package Name: libc6 Installed Version: 2.36-9+deb12u13 Fixed Version: References: access.redhat.com nvd.nist.gov sourceware.org www.cve.org
LOW	CVE-2022-27943: binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new. Package Name: gcc-12-base Installed Version: 12.2.0-14+deb12u1 Fixed Version: References: access.redhat.com gcc.gnu.org gcc.gnu.org gcc.gnu.org gcc.gnu.org gcc.gnu.org lists.fedoraproject.org nvd.nist.gov sourceware.org www.cve.org
LOW	CVE-2010-4756: glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a different vulnerability than CVE-2010-2632. Package Name: libc6 Installed Version: 2.36-9+deb12u13 Fixed Version: References: cxib.net securityreason.com securityreason.com access.redhat.com bugzilla.redhat.com bugzilla.redhat.com nvd.nist.gov security.netapp.com www.cve.org
LOW	CVE-2018-20796: glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\227\|)(\\1\\1\|t1\|\\\2537)+' in grep. Package Name: libc6 Installed Version: 2.36-9+deb12u13 Fixed Version: References: www.securityfocus.com access.redhat.com debbugs.gnu.org lists.gnu.org nvd.nist.gov security.netapp.com support.f5.com www.cve.org
LOW	CVE-2019-1010022: glibc: stack guard protection bypass GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vector is: Exploit stack buffer overflow vulnerability and use this bypass vulnerability to bypass stack guard. NOTE: Upstream comments indicate "this is being treated as a non-security bug and no real threat. Package Name: libc6 Installed Version: 2.36-9+deb12u13 Fixed Version: References: access.redhat.com nvd.nist.gov security-tracker.debian.org sourceware.org sourceware.org ubuntu.com www.cve.org
LOW	CVE-2019-1010023: glibc: running ldd on malicious ELF leads to code execution because of wrong size computation GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate "this is being treated as a non-security bug and no real threat. Package Name: libc6 Installed Version: 2.36-9+deb12u13 Fixed Version: References: www.securityfocus.com access.redhat.com nvd.nist.gov security-tracker.debian.org sourceware.org support.f5.com ubuntu.com www.cve.org
LOW	CVE-2019-1010024: glibc: ASLR bypass using cache of thread stack and heap GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc. NOTE: Upstream comments indicate "this is being treated as a non-security bug and no real threat. Package Name: libc6 Installed Version: 2.36-9+deb12u13 Fixed Version: References: www.securityfocus.com access.redhat.com nvd.nist.gov security-tracker.debian.org sourceware.org support.f5.com support.f5.com ubuntu.com www.cve.org
LOW	CVE-2019-1010025: glibc: information disclosure of heap addresses of pthread_created thread GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: glibc. NOTE: the vendor's position is "ASLR bypass itself is not a vulnerability. Package Name: libc6 Installed Version: 2.36-9+deb12u13 Fixed Version: References: access.redhat.com nvd.nist.gov security-tracker.debian.org sourceware.org support.f5.com support.f5.com ubuntu.com www.cve.org
LOW	CVE-2019-9192: glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\|)(\\1\\1)' in grep, a different issue than CVE-2018-20796. NOTE: the software maintainer disputes that this is a vulnerability because the behavior occurs only with a crafted pattern Package Name:* libc6 Installed Version: 2.36-9+deb12u13 Fixed Version: References: access.redhat.com nvd.nist.gov sourceware.org support.f5.com www.cve.org
LOW	CVE-2022-27943: binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new. Package Name: libgcc-s1 Installed Version: 12.2.0-14+deb12u1 Fixed Version: References: access.redhat.com gcc.gnu.org gcc.gnu.org gcc.gnu.org gcc.gnu.org gcc.gnu.org lists.fedoraproject.org nvd.nist.gov sourceware.org www.cve.org
LOW	CVE-2022-27943: binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new. Package Name: libgomp1 Installed Version: 12.2.0-14+deb12u1 Fixed Version: References: access.redhat.com gcc.gnu.org gcc.gnu.org gcc.gnu.org gcc.gnu.org gcc.gnu.org lists.fedoraproject.org nvd.nist.gov sourceware.org www.cve.org
LOW	CVE-2025-27587: OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable ... OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable to a Minerva attack, exploitable by measuring the time of signing of random messages using the EVP_DigestSign API, and then using the private key to extract the K value (nonce) from the signatures. Next, based on the bit size of the extracted nonce, one can compare the signing time of full-sized nonces to signatures that used smaller nonces, via statistical tests. There is a side-channel in the P-364 curve that allows private key extraction (also, there is a dependency between the bit size of K and the size of the side channel). NOTE: This CVE is disputed because the OpenSSL security policy explicitly notes that any side channels which require same physical system to be detected are outside of the threat model for the software. The timing signal is so small that it is infeasible to be detected without having the attacking process running on the same physical system. Package Name: libssl3 Installed Version: 3.0.19-1~deb12u2 Fixed Version: References: github.com minerva.crocs.fi.muni.cz
LOW	CVE-2022-27943: binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new. Package Name: libstdc++6 Installed Version: 12.2.0-14+deb12u1 Fixed Version: References: access.redhat.com gcc.gnu.org gcc.gnu.org gcc.gnu.org gcc.gnu.org gcc.gnu.org lists.fedoraproject.org nvd.nist.gov sourceware.org www.cve.org

Package statistics are no longer available on cloudsmith.io. Please visit our new web app to access this feature.

These instructions assume you have setup the repository first (or read it).

To pull arc-execution @ reference/tag sha256:2a5badbe540eaaa206cd4568dfb4d0f28107a8943da3172ebc30b635777eddc5:

docker pull docker.cloudsmith.io/circle/arc-network/arc-execution@sha256:2a5badbe540eaaa206cd4568dfb4d0f28107a8943da3172ebc30b635777eddc5

You can also pull the latest version of this image (if it exists):

docker pull docker.cloudsmith.io/circle/arc-network/arc-execution:latest

To refer to this image after pulling in a Dockerfile, specify the following:

FROM docker.cloudsmith.io/circle/arc-network/arc-execution@sha256:2a5badbe540eaaa206cd4568dfb4d0f28107a8943da3172ebc30b635777eddc5

Still stuck? Need help? Don't panic. Just contact us for help (even if you're not a customer).

Previous Version: 082e3fd2e953f2a9d20…

Next Version: f6319755b5ad1659656…

arc-execution 2a5badbe540eaaa206cd4568dfb…

One-liner (summary)

Description

License

Size

Downloads

Tags

Last scanned

Scan result

Vulnerability count

Max. severity

CVE-2026-0861: glibc: Integer overflow in memalign leads to heap corruption

CVE-2025-15281: glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

CVE-2026-0915: glibc: glibc: Information disclosure via zero-valued network query

CVE-2026-4046: glibc: glibc: Denial of Service via iconv() function with specific character sets

CVE-2026-4437: glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

CVE-2026-4438: glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

CVE-2026-5450: glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

CVE-2026-5928: glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

CVE-2022-27943: binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

CVE-2010-4756: glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions

CVE-2018-20796: glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c

CVE-2019-1010022: glibc: stack guard protection bypass

CVE-2019-1010023: glibc: running ldd on malicious ELF leads to code execution because of wrong size computation

CVE-2019-1010024: glibc: ASLR bypass using cache of thread stack and heap

CVE-2019-1010025: glibc: information disclosure of heap addresses of pthread_created thread

CVE-2019-9192: glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c

CVE-2022-27943: binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

CVE-2022-27943: binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

CVE-2025-27587: OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable ...

CVE-2022-27943: binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const