Package Search Help

You can use boolean logic (e.g. AND/OR/NOT) for complex search queries. For more help and examples, see the search documentation.

Search by package name:
my-package (implicit)
name:my-package (explicit)

Search by package filename:
filename:my-package.ext 

Search by package tag:
tag:latest 

Search by package version:
version:1.0.0  prerelease:true (prereleases)
prerelease:false (no prereleases)

Search by package architecture:
architecture:x86_64 

Search by package distribution:
distribution:el 

Search by package license:
license:MIT 

Search by package format:
format:deb 

Search by package status:
status:in_progress 

Search by package file checksum:
checksum:5afba 

Search by package security status:
severity:critical 

Search by package vulnerabilities:
vulnerabilities:>1 
vulnerabilities:<1000 

Search by # of package downloads:
downloads:>8 
downloads:<100 

Search by package type:
type:binary 
type:source 

Search by package size (bytes):
size:>50000 
size:<10000 

Search by dependency name/version:
dependency:log4j 
dependency:log4j=1.0.0 
dependency:log4j>1.0.0 

Search by uploaded date:
uploaded:>"1 day ago" 
uploaded:<"August 14, 2022 EST" 

Search by entitlement token (identifier):
entitlement:3lKPVJPosCsY 

Search by policy violation:
policy_violated:true
deny_policy_violated:true
license_policy_violated:true
vulnerability_policy_violated:true

Search by repository:
repository:repo-name

Search by last download date:
last_downloaded:<"30 days ago" 
last_downloaded:>"August 14, 2022 EST" 

Search queries for all Debian-specific (and related) package types

Search by component:
deb_component:unstable

Search queries for all Maven-specific (and related) package types

Search by group ID:
maven_group_id:org.apache

Search queries for all Docker-specific (and related) package types

Search by image digest:
docker_image_digest:sha256:7c5..6d4
(full hashref only)

Search by layer digest:
docker_layer_digest:sha256:4c4..ae4
(full hashref only)

Search queries for all Generic-specific package types

Search by file path:
generic_filepath:path/to/file.txt

Search by directory:
generic_directory:path/to

Field type modifiers (depending on the type, you can influence behaviour)

For all queries, you can use:
~foo for negation

For string queries, you can use:
^foo to anchor to start of term
foo$ to anchor to end of term
foo*bar for fuzzy matching

For number/date or version queries, you can use:
>foo for values greater than
>=foo for values greater / equal
<foo for values less than
<=foo for values less / equal

Need a secure and centralised artifact repository to deliver Alpine, Cargo, CocoaPods, Composer, Conan, Conda, CRAN, Dart, Debian, Docker, Generic, Go, Helm, Hex, HuggingFace, LuaRocks, Maven, MCP, npm, NuGet, P2, Python, RedHat, Ruby, Swift, Terraform, Vagrant, VSX, Raw & More packages?

Cloudsmith is the new standard in Package / Artifact Management and Software Distribution.

With support for all major package formats, you can trust us to manage your software supply chain.

Start My Free Trial
Set Me Up
 Public — tetrate tetrate (Tetrate) / getistio-containers
Tetrate Istio Distro project (formerly GetIstio) container images registry
Packages 7342 Package Groups 8 Public Keys

Docker logo envoy  3b3a0c44cec3ac6406a3b922f0b…

Download

One-liner (summary)

A certifiably-awesome package curated by Bender Rodriguez, hosted by Cloudsmith.

Description

A certifiably-awesome package curated by Bender Rodriguez, hosted by Cloudsmith.

License

Unknown

Size

73.1 MB

Downloads

1

Tags

image arm64 linux

Status  Completed
Checksum (MD5) 0918f95a744e10547b6d399dcb7c4cc0
Checksum (SHA-1) e52e8bc4d31cc58a53d6165d602f044c745358d0
Checksum (SHA-256) 3b3a0c44cec3ac6406a3b922f0beb34309c4b696ab77953fec7aa362c80456d8
Checksum (SHA-512) 3dcd29abfd89078cda48e255927929ab71948dda04287a93a4e4ef488d883fcd1d…
GPG Signature
Download
GPG Fingerprint 7490c226a7c21a19bb1d09e800b3a57eef287d7b
Storage Region  Dublin, Ireland
Type  Binary (contains binaries and binary artifacts)
Uploaded At 3 months ago
Uploaded By tetrate-ci
Slug Id envoy-4hw6
Unique Id he3TzKNdGTvo
Version (Raw) 3b3a0c44cec3ac6406a3b922f0beb34309c4b696ab77953fec7aa362c80456d8
Version (Parsed)
  • Type: Unknown
  docker-specific metadata
Image Digest sha256:3b3a0c44cec3ac6406a3b922f0beb34309c4b696ab77953fec7aa362c80456d8
Config Digest sha256:b6041a9932d311ca1aae94ae494e4c16db7e228bf4d0800e29fc978ee4c31eb3
V1 OCI Index Digest sha256:22d3c889a6f920d4b8f15b725ff0442314840a4c6f9e798e2b2e5f7ca6147c72
V1 Distribution (Signed) Digest sha256:2cc8cc84fb0ccd956417c462a600d55c1ff1a8ee8caac198a8b9217db41d53c2
V2 Distribution List Digest sha256:bf3fec3fa69dd7fbf2f0862a80392b654b8e7cf5e3947addcae6442ccfcc5638
V2 Distribution Digest sha256:3a1ba47b2dc88d4e6a51af21e0544d13d286d764a09ba483c676b997fdc24c7b
V1 Distribution Digest sha256:bf8a237b35f0053e936382b6e358a1b602d45e1193a0cebba1f84fe7efe04c95
V1 OCI Digest sha256:3b3a0c44cec3ac6406a3b922f0beb34309c4b696ab77953fec7aa362c80456d8
  extended metadata
Manifest Type V1 OCI
Architecture arm64
Config
Args Escaped
Entrypoint
/usr/local/bin/envoy
Env
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin | SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt
Exposed Ports
10000/tcp
Labels
'vendor' 'Tetrate.io Inc'
Labels
'org.opencontainers.image.source' 'https://github.com/envoyproxy/envoy.git'
Labels
'org.opencontainers.image.title' 'envoy'
Labels
'org.opencontainers.image.revision' '5afe27fb338b16d5bb06b3a7198bcd581b4e3dee'
User
65532
Working Dir
/home/nonroot
Created 2026-04-23 19:42:32 UTC
Os linux

This package was uploaded with the following V1 OCI manifest: 

{
  "schemaVersion": 2,
  "mediaType": "application/vnd.oci.image.manifest.v1+json",
  "config": {
    "mediaType": "application/vnd.oci.image.config.v1+json",
    "digest": "sha256:3bada87261f4bb845438752a7224272e7cb5ea6015afd4711e2afe8e4c4cf0aa",
    "size": 5755
  },
  "layers": [
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:296b5494f17a830dcf9b0da028437305ab7ba3eaca4adf0dec9a463a18950079",
      "size": 83844
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:990a9c434e5e0f11549a8d4a41a1991e621b04e30cd63269adbc97b1dc38fd7e",
      "size": 12481
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:ef49c20a7b35aa995683f311510d35d77e203a2204f84de14a71a6d726e6af73",
      "size": 440802
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:bf7a4185f01524837d19abde915ffde84e64368b250f5b5e9f6f75aea62a11d4",
      "size": 29005
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:2780920e5dbfbe103d03a583ed75345306e572ec5a48cb10361f046767d9f29a",
      "size": 67
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:7c12895b777bcaa8ccae0605b4de635b68fc32d60fa08f421dc3818bf55ee212",
      "size": 188
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:3214acf345c0cc6bbdb56b698a41ccdefc624a09d6beb0d38b5de0b2303ecaf4",
      "size": 123
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:52630fc75a18675c530ed9eba5f55eca09b03e91bd5bc15307918bbc1a7e7296",
      "size": 162
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:dd64bf2dd177757451a98fcdc999a339c35dee5d9872d8f4dc69c8f3c4dd0112",
      "size": 80
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:b839dfae01f66e15c6a8b63520557ed315bdfe036342fa7a0c537259f10d7a9a",
      "size": 351
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:dcaa5a89b0ccda4b283e16d0b4d0891cd93d5fe05c6798f7806781a6a2d84354",
      "size": 314
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:069d1e267530c2e681fbd4d481553b4d05f98082b18fafac86e7f12996dddd0b",
      "size": 131915
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:8f9d56b2cdc6271d2081cd7d118a289f1629dafbb95094c1c425e7d3c02a8257",
      "size": 4962146
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:730477f68bfec9bc333d5eee4f1f12637a5d33448204588b92cc570d14a9101a",
      "size": 786
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:f3f4d2e2bad91d5866d70f0c441160da9086d5b7c419b01248e7c4a82800d966",
      "size": 789
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:80defd684461862c80d96948d97cac10dc76281dea304591bac741a0b9b65b9b",
      "size": 30846192
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:dd517f96a63eb1ac4544167b8bebe66bb6297a87ba463711aa5f5bdadd528adc",
      "size": 40145687
    }
  ]
}
Digest: sha256:296b5494f17a830dcf9b0da028437305ab7ba3eaca4adf0dec9a463a18950079
Command: bazel build @bookworm//base-files/arm64:data_statusd
 81.9 KB
Digest: sha256:990a9c434e5e0f11549a8d4a41a1991e621b04e30cd63269adbc97b1dc38fd7e
Command: bazel build @bookworm//netbase/arm64:data_statusd
 12.2 KB
Digest: sha256:ef49c20a7b35aa995683f311510d35d77e203a2204f84de14a71a6d726e6af73
Command: bazel build @bookworm//tzdata/arm64:data_statusd
 430.5 KB
Digest: sha256:bf7a4185f01524837d19abde915ffde84e64368b250f5b5e9f6f75aea62a11d4
Command: bazel build @bookworm//media-types/arm64:data_statusd
 28.3 KB
Digest: sha256:2780920e5dbfbe103d03a583ed75345306e572ec5a48cb10361f046767d9f29a
Command: bazel build //common:rootfs
 67 bytes
Digest: sha256:7c12895b777bcaa8ccae0605b4de635b68fc32d60fa08f421dc3818bf55ee212
Command: bazel build //common:passwd
 188 bytes
Digest: sha256:3214acf345c0cc6bbdb56b698a41ccdefc624a09d6beb0d38b5de0b2303ecaf4
Command: bazel build //common:home
 123 bytes
Digest: sha256:52630fc75a18675c530ed9eba5f55eca09b03e91bd5bc15307918bbc1a7e7296
Command: bazel build //common:group
 162 bytes
Digest: sha256:dd64bf2dd177757451a98fcdc999a339c35dee5d9872d8f4dc69c8f3c4dd0112
Command: bazel build //common:tmp
 80 bytes
Digest: sha256:b839dfae01f66e15c6a8b63520557ed315bdfe036342fa7a0c537259f10d7a9a
Command: bazel build //static:nsswitch
 351 bytes
Digest: sha256:dcaa5a89b0ccda4b283e16d0b4d0891cd93d5fe05c6798f7806781a6a2d84354
Command: bazel build //common:os_release_debian12
 314 bytes
Digest: sha256:069d1e267530c2e681fbd4d481553b4d05f98082b18fafac86e7f12996dddd0b
Command: bazel build //common:cacerts_debian12_arm64
 128.8 KB
Digest: sha256:8f9d56b2cdc6271d2081cd7d118a289f1629dafbb95094c1c425e7d3c02a8257
Command: bazel build @bookworm//libc6/arm64:data_statusd
 4.7 MB
Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4
Command: EXPOSE [10000/tcp]
 32 bytes
Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4
Command: ENTRYPOINT ["/usr/local/bin/envoy"]
 32 bytes
Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4
Command: CMD ["-c" "/etc/envoy/envoy.yaml"]
 32 bytes
Digest: sha256:730477f68bfec9bc333d5eee4f1f12637a5d33448204588b92cc570d14a9101a
Command: COPY --chown=0:0 --chmod=755 /etc/envoy /etc/envoy # buildkit
 786 bytes
Digest: sha256:f3f4d2e2bad91d5866d70f0c441160da9086d5b7c419b01248e7c4a82800d966
Command: COPY --chown=0:0 --chmod=644 /etc/envoy/envoy.yaml /etc/envoy/envoy.yaml # buildkit
 789 bytes
Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4
Command: ARG ENVOY_BINARY=envoy
 32 bytes
Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4
Command: ARG ENVOY_BINARY_PREFIX=
 32 bytes
Digest: sha256:80defd684461862c80d96948d97cac10dc76281dea304591bac741a0b9b65b9b
Command: COPY --chown=0:0 --chmod=755 /usr/local/bin/envoy /usr/local/bin/envoy # buildkit
 29.4 MB
Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4
Command: ARG ENVOY_VARIANT=envoy
 32 bytes
Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4
Command: ARG ENVOY_REVISION=5afe27fb338b16d5bb06b3a7198bcd581b4e3dee
 32 bytes
Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4
Command: LABEL vendor=Tetrate.io Inc
 32 bytes
Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4
Command: LABEL org.opencontainers.image.title=envoy
 32 bytes
Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4
Command: LABEL org.opencontainers.image.source=https://github.com/envoyproxy/envoy.git
 32 bytes
Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4
Command: LABEL org.opencontainers.image.revision=5afe27fb338b16d5bb06b3a7198bcd581b4e3dee
 32 bytes
Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4
Command: ARG TARGETARCH=arm64
 32 bytes
Digest: sha256:dd517f96a63eb1ac4544167b8bebe66bb6297a87ba463711aa5f5bdadd528adc
Command: ADD ./work/envoy/5afe27fb338b16d5bb06b3a7198bcd581b4e3dee/envoy-arm64.tar.gz /usr/local/bin/ # buildkit
 38.3 MB
Digest: sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4
Command: ENTRYPOINT ["/usr/local/bin/envoy"]
 32 bytes
Docker logo
envoy
 427e856205203c42419fdbc66b3531b9094474a…
image arm64 linux
73.1 MB — 4 months, 1 week ago
3 tetrate-ci
Docker logo
envoy
 c1f5c00702d4e03323559333d3bf3ed8ff26e53…
image amd64 linux
69.4 MB — 4 months, 1 week ago
3 tetrate-ci
Docker logo
envoy
 647cdee48ea155b7a54495be46cfa677fcd0e50…
image amd64 linux
70.4 MB — 5 months, 3 weeks ago
4 tetrate-ci
Docker logo
envoy
 ab9412f66783680ba9b7d1a85c08d424055cb17…
image arm64 linux
70.6 MB — 5 months, 3 weeks ago
3 tetrate-ci
Docker logo
envoy
 5708b512a668fe6e389f4c77157d9882df735e1…
image amd64 linux
70.4 MB — 5 months, 3 weeks ago
4 tetrate-ci
Docker logo
envoy
 3b9a25a3a91dba888dcd6a86358dbfdd5444837…
image arm64 linux
69.6 MB — 6 months, 1 week ago
4 tetrate-ci
Docker logo
envoy
 8227eb21f3f1c8a553769762c071e3ee677f7e1…
image amd64 linux
69.4 MB — 6 months, 1 week ago
4 tetrate-ci
Docker logo
envoy
 e3ae9797c703d0723127be05f5b0e735adeda6b…
image amd64 linux
64.7 MB — 7 months, 2 weeks ago
6 tetrate-ci
Docker logo
envoy
 88f9863042a55456d4bd92a6bb7890f19468904…
image arm64 linux
62.2 MB — 7 months, 2 weeks ago
6 tetrate-ci
Docker logo
envoy
 47977aef46839fc077be51d6f6ab9e822b7556d…
image amd64 linux
55.9 MB — 8 months, 2 weeks ago
4 tetrate-ci
Docker logo
envoy
 3b3a0c44cec3ac6406a3b922f0beb34309c4b69…
image arm64 linux
73.1 MB — 3 months ago
1 tetrate-ci
Docker logo
envoy
 13697064fafd34bf2f1a1675a702ceae366c1b7…
image arm64 linux
79.0 MB — 3 weeks ago
0 tetrate-ci
Docker logo
envoy
 2c745fc99be3bcef66f0acec3e7ff64ff7ce75a…
image amd64 linux
78.4 MB — 1 month, 2 weeks ago
1 tetrate-ci
Docker logo
envoy
 11b47d290ee0c39f428cff76c2d85df99cc71ad…
image amd64 linux
72.5 MB — 3 months ago
0 tetrate-ci
Docker logo
envoy
 36e89aa0bcdf4c61b73339886f279cc722b57f6…
image amd64 linux
72.5 MB — 4 months, 1 week ago
3 tetrate-ci
Docker logo
envoy
 2bf88cf55938dccb2c6d5df9db0ed9dfda128a4…
image arm64 linux
69.9 MB — 4 months, 1 week ago
3 tetrate-ci
Docker logo
envoy
 3763067c708aae19d6b83aa53d74d2d7ef56246…
image arm64 linux
70.6 MB — 5 months, 3 weeks ago
2 tetrate-ci
Docker logo
envoy
 37b4a1769818a5f7d69bba60ce136b2e57dfd6f…
image arm64 linux
61.2 MB — 9 months ago
8 tetrate-ci
Docker logo
envoy
 03867da474dd6f49a1ac97bdc67a6c59de502f4…
image arm64 linux
61.1 MB — 10 months, 4 weeks ago
8 tetrate-ci
Docker logo
envoy
 29e11bb1b0af80771922ae62d9949d5dd3866d9…
image amd64 linux
58.5 MB — 1 year, 2 months ago
11 tetrate-ci
Only packages within the same repository are displayed. The current package you're viewing is highlighted.

Last scanned

3 months ago

Scan result

Vulnerable

Vulnerability count

15

Max. severity

High
Target: he3TzKNdGTvo.sbom-cyclonedx.json (debian 12.13)
HIGH

CVE-2026-0861: glibc: Integer overflow in memalign leads to heap corruption

Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in a heap corruption. Note that the attacker must have control over both, the size as well as the alignment arguments of the memalign function to be able to exploit this. The size parameter must be close enough to PTRDIFF_MAX so as to overflow size_t along with the large alignment argument. This limits the malicious inputs for the alignment for memalign to the range [1<<62+ 1, 1<<63] and exactly 1<<63 for posix_memalign and aligned_alloc. Typically the alignment argument passed to such functions is a known constrained quantity (e.g. page size, block size, struct sizes) and is not attacker controlled, because of which this may not be easily exploitable in practice. An application bug could potentially result in the input alignment being too large, e.g. due to a different buffer overflow or integer overflow in the application or its dependent libraries, but that is again an uncommon usage pattern given typical sources of alignments.

Package Name: libc6
Installed Version: 2.36-9+deb12u13
Fixed Version:

References: www.openwall.com access.redhat.com access.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com cve.mitre.org cve.mitre.org errata.almalinux.org errata.rockylinux.org linux.oracle.com linux.oracle.com nvd.nist.gov sourceware.org sourceware.org ubuntu.com www.cve.org
MEDIUM

CVE-2025-15281: glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.

Package Name: libc6
Installed Version: 2.36-9+deb12u13
Fixed Version:

References: www.openwall.com access.redhat.com access.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com cve.mitre.org cve.mitre.org errata.almalinux.org errata.rockylinux.org linux.oracle.com linux.oracle.com nvd.nist.gov sourceware.org ubuntu.com www.cve.org www.openwall.com
MEDIUM

CVE-2026-0915: glibc: glibc: Information disclosure via zero-valued network query

Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver.

Package Name: libc6
Installed Version: 2.36-9+deb12u13
Fixed Version:

References: www.openwall.com access.redhat.com access.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com bugzilla.redhat.com cve.mitre.org cve.mitre.org errata.almalinux.org errata.rockylinux.org linux.oracle.com linux.oracle.com nvd.nist.gov sourceware.org ubuntu.com www.cve.org www.openwall.com
MEDIUM

CVE-2026-4046: glibc: glibc: Denial of Service via iconv() function with specific character sets

The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application. This vulnerability can be trivially mitigated by removing the IBM1390 and IBM1399 character sets from systems that do not need them.

Package Name: libc6
Installed Version: 2.36-9+deb12u13
Fixed Version:

References: access.redhat.com inbox.sourceware.org nvd.nist.gov packages.fedoraproject.org sourceware.org sourceware.org sourceware.org www.cve.org
MEDIUM

CVE-2026-4437: glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C Library version 2.34 to version 2.43 could, with a crafted response from the configured DNS server, result in a violation of the DNS specification that causes the application to treat a non-answer section of the DNS response as a valid answer.

Package Name: libc6
Installed Version: 2.36-9+deb12u13
Fixed Version:

References: access.redhat.com nvd.nist.gov sourceware.org www.cve.org www.openwall.com
MEDIUM

CVE-2026-4438: glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in an invalid DNS hostname being returned to the caller in violation of the DNS specification.

Package Name: libc6
Installed Version: 2.36-9+deb12u13
Fixed Version:

References: access.redhat.com nvd.nist.gov sourceware.org www.cve.org www.openwall.com
MEDIUM

CVE-2026-5450: glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow.

Package Name: libc6
Installed Version: 2.36-9+deb12u13
Fixed Version:

References: access.redhat.com inbox.sourceware.org nvd.nist.gov sourceware.org www.cve.org
MEDIUM

CVE-2026-5928: glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially resulting in unintentional disclosure of neighboring data in the heap, or a program crash. A bug in the wide character pushback implementation (_IO_wdefault_pbackfail in libio/wgenops.c) causes ungetwc() to operate on the regular character buffer (fp->_IO_read_ptr) instead of the actual wide-stream read pointer (fp->_wide_data->_IO_read_ptr). The program crash may happen in cases where fp->_IO_read_ptr is not initialized and hence points to NULL. The buffer under-read requires a special situation where the input character encoding is such that there are overlaps between single byte representations and multibyte representations in that encoding, resulting in spurious matches. The spurious match case is not possible in the standard Unicode character sets.

Package Name: libc6
Installed Version: 2.36-9+deb12u13
Fixed Version:

References: access.redhat.com nvd.nist.gov sourceware.org www.cve.org
LOW

CVE-2010-4756: glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions

The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a different vulnerability than CVE-2010-2632.

Package Name: libc6
Installed Version: 2.36-9+deb12u13
Fixed Version:

References: cxib.net securityreason.com securityreason.com access.redhat.com bugzilla.redhat.com bugzilla.redhat.com nvd.nist.gov security.netapp.com www.cve.org
LOW

CVE-2018-20796: glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c

In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\227|)(\\1\\1|t1|\\\2537)+' in grep.

Package Name: libc6
Installed Version: 2.36-9+deb12u13
Fixed Version:

References: www.securityfocus.com access.redhat.com debbugs.gnu.org lists.gnu.org nvd.nist.gov security.netapp.com support.f5.com www.cve.org
LOW

CVE-2019-1010022: glibc: stack guard protection bypass

GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vector is: Exploit stack buffer overflow vulnerability and use this bypass vulnerability to bypass stack guard. NOTE: Upstream comments indicate "this is being treated as a non-security bug and no real threat.

Package Name: libc6
Installed Version: 2.36-9+deb12u13
Fixed Version:

References: access.redhat.com nvd.nist.gov security-tracker.debian.org sourceware.org sourceware.org ubuntu.com www.cve.org
LOW

CVE-2019-1010023: glibc: running ldd on malicious ELF leads to code execution because of wrong size computation

GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate "this is being treated as a non-security bug and no real threat.

Package Name: libc6
Installed Version: 2.36-9+deb12u13
Fixed Version:

References: www.securityfocus.com access.redhat.com nvd.nist.gov security-tracker.debian.org sourceware.org support.f5.com ubuntu.com www.cve.org
LOW

CVE-2019-1010024: glibc: ASLR bypass using cache of thread stack and heap

GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc. NOTE: Upstream comments indicate "this is being treated as a non-security bug and no real threat.

Package Name: libc6
Installed Version: 2.36-9+deb12u13
Fixed Version:

References: www.securityfocus.com access.redhat.com nvd.nist.gov security-tracker.debian.org sourceware.org support.f5.com support.f5.com ubuntu.com www.cve.org
LOW

CVE-2019-1010025: glibc: information disclosure of heap addresses of pthread_created thread

GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: glibc. NOTE: the vendor's position is "ASLR bypass itself is not a vulnerability.

Package Name: libc6
Installed Version: 2.36-9+deb12u13
Fixed Version:

References: access.redhat.com nvd.nist.gov security-tracker.debian.org sourceware.org support.f5.com support.f5.com ubuntu.com www.cve.org
LOW

CVE-2019-9192: glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c

In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(|)(\\1\\1)*' in grep, a different issue than CVE-2018-20796. NOTE: the software maintainer disputes that this is a vulnerability because the behavior occurs only with a crafted pattern

Package Name: libc6
Installed Version: 2.36-9+deb12u13
Fixed Version:

References: access.redhat.com nvd.nist.gov sourceware.org support.f5.com www.cve.org

These instructions assume you have setup the repository first (or read it).

To pull envoy @ reference/tag sha256:3b3a0c44cec3ac6406a3b922f0beb34309c4b696ab77953fec7aa362c80456d8: 

docker pull containers.istio.tetratelabs.com/envoy@sha256:3b3a0c44cec3ac6406a3b922f0beb34309c4b696ab77953fec7aa362c80456d8

You can also pull the latest version of this image (if it exists): 

docker pull containers.istio.tetratelabs.com/envoy:latest

To refer to this image after pulling in a Dockerfile, specify the following: 

FROM containers.istio.tetratelabs.com/envoy@sha256:3b3a0c44cec3ac6406a3b922f0beb34309c4b696ab77953fec7aa362c80456d8
Still stuck? Need help? Don't panic. Just contact us for help (even if you're not a customer).
Previous Version: 13697064fafd34bf2f1…
Next Version: 47977aef46839fc077b…
Top