[Bug dynamic-link/32976] elf: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH (CVE-2025-4802)

[fweimer at redhat dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=32976

--- Comment #16 from Florian Weimer <fweimer at redhat dot com> ---
(In reply to Sunil Dora from comment #15)
> I was reviewing the glibc 2.33 and 2.32 branches but couldn’t find any
> relevant backports. Are these branches considered outdated, or is there any
> plan to update them?

It's just that no one has done the backport. We do not have a clear support
policy for previous branches. In general, if you are parking on older release
branches without upgrading, you need some downstream capability to produce
fixes/backports as needed.

If you have backport you want to share, you can post the patches to
libc-stable, and we can apply to the per-release branches in the official Git
repository.

-- 
You are receiving this mail because:
You are on the CC list for the bug.