SOURCES: glibc-LD_DEBUG.patch (NEW) - from vendor, fix LD_DEBUG ac...

[Paweł Sakowski]

On Wed, 2004-09-15 at 10:26 +0200, Jakub Bogusz wrote:
> On Tue, Sep 14, 2004 at 04:31:28PM +0000, saq wrote:
> > Author: saq                          Date: Tue Sep 14 16:31:28 2004 GMT
> > Module: SOURCES                       Tag: HEAD
> > ---- Log message:
> > - from vendor, fix LD_DEBUG access error (SECURITY)
> 
> which "vendor"?

It looks like the patch is actually written by gentoo, contrary to what
the SecurityTracker advisory said: "The vendor has released a patch
(glibc-sec-hotfix-20040804.patch)"

> http://sources.redhat.com/ml/libc-hacker/2004-08/msg00059.html

Besides that, no glibc-related source acknowledges the bug. There's no
fix in glibc CVS either. Ideas?

-- 
+----------------------------------------------------------------------+
| Paweł Sakowski <pawel at sakowski.eu.org>            Never trust a man  |
|                            who can count up to 1023 on his fingers.  |
+----------------------------------------------------------------------+