Re: CVE-2018-20796 (glibc) - verifying status?
Hi
On Tue, Jan 06, 2026 at 04:17:04PM -0500, wlfgang@westridgesystems.com wrote:
> Hello,
>
> I am new to this group, so please forgive me if I'm asking in the wrong
> place. I am trying to verify that the Status entries (currently 'vulnerable'
> for all versions) are correct for CVE-2018-20796, or if the entries should
> be updated. (https://security-tracker.debian.org/tracker/CVE-2018-20796)
>
> The NVD description seems to imply that this CVE only affected glibc <=
> 2.29. I'm not sure whether that's accurate.
>
> Please let me know if there's something I can do to contribute; I'm happy to
> do some legwork if required.
The security-tracker notes give additional background on the CVE.
p.s.: do never trust versions in CVE descriptions as they (may)
reflect only a given state in a certain point in time. It might have
been fixed in the end in some later version, but we treat this CVE as
unimportant as upstream does not consider such issues as security
issues.
Regards,
Salvatore
Reply to: