glibc-2.9 CVE-2015-7547 fix

[Florian Weimer]

On 03/08/2016 05:46 PM, Darcy Watkins wrote:

> Someone who understands what is going on in this part of the library
> please comment to give me some insight, particularly if this change may
> be a bad idea for other reasons.

Are you actually dealing with an unpatched glibc 2.9?

That seems to be fairly unlikely because the resolver in that release
was fairly broken because it was the first one which had the parallel
lookup feature.

If it's in fact pristine 2.9, it is likely easier to go the other
direction and patch out the parallel lookup feature.

Florian