{"uuid": "78ee0d13-7969-4870-8b23-a096918b6dc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "name": "The GNU C Library version 2.43 is now available", "description": "Security related changes:\n\nThe following CVEs were fixed in this release, details of which can be\nfound in the advisories directory of the release tarball:\n\n  GLIBC-SA-2026-0001:\n    Integer overflow in memalign leads to heap corruption\n    (CVE-2026-0861)\n\n  GLIBC-SA-2026-0002:\n    getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler\n    (CVE-2026-0915)\n\n  GLIBC-SA-2026-0003:\n    wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized\n    memory (CVE-2025-15281)\n\nFor more details: [https://lists.gnu.org/archive/html/info-gnu/2026-01/msg00005.html](https://lists.gnu.org/archive/html/info-gnu/2026-01/msg00005.html)", "creation_timestamp": "2026-01-25T19:26:08.233753+00:00", "timestamp": "2026-01-25T19:26:08.233753+00:00", "related_vulnerabilities": ["CVE-2025-15281", "CVE-2026-0861", "CVE-2026-0915"], "author": {"login": "adulau", "name": "Alexandre Dulaunoy", "uuid": "c933734a-9be8-4142-889e-26e95c752803"}}