Source: glibc
Severity: important
Please see this blog posting from Chris Evans:
https://scarybeastsecurity.blogspot.com/2017/05/further-hardening-glibc-malloc-against.html
Upstream fix is here:
https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=17f487b7afa7cd6c316040f3e6c86dc96b2eec30
Could we backport this to stretch? (And to a jessie point update after it has settled a bit in
testing/sid?)
Cheers,
Moritz