I accidentally dropped EXTRA_UNSECURE_ENVVARS handling from 2.34 and 2.35 with my backport (it's gone in 2.36 and forward). What should we do? I can revert the current fix and re-apply the fixed version, and then we make it official by listing that commit in advisories/GLIBC-SA-2025-0002? Thanks, Florian