Bug#600667: Fw: re: eglibc: cve-2010-3847 dynamic linker expands $ORIGIN in setuid library search path

[Michael Gilbert <michael.s.gilbert@gmail.com>]

Note that a new CVE id (CVE-2011-0536) has been assigned for a
vulnerability introduced by the patches for cve-2010-3847 [0].  It
sounds like this affects the recent DSAs. Please take a look at the
code and figure out what needs to be done to resolve these three
issues: CVE-2010-3847, CVE-2010-3856, CVE-2011-0536.

Thanks,
Mike

[0] http://www.openwall.com/lists/oss-security/2011/02/03/2