[CentOS] CVE-2014-4043 posix_spawn_file_actions_addopen

Tue May 26 15:59:30 UTC 2015
Patrick Rael <prael at lumeta.com>

Hi,
       Is there an ETA on when CVE-2014-4043 for glibc will be fixed in 
centos.
I see the upstream vendor version glibc-2.20 has this fix supposedly, but
I don't see this specific fix in the centos glibc changelogs.   I've 
compiled the
test code for this bug and as of glibc-2.17.77 the test reports the bug 
is present.
Preferably we'd like this fix on centos6.6 as we can't move to 7.0 yet.

Thanks,
-->Pat