On Wed, Feb 17, 2016 at 11:14:19AM -0500, Leo Famulari wrote: > I tried this. The resulting process downloaded the bootstrap binaries > and appeared to rebuild *everything*. I haven't had time to figure out > what actually got rebuilt and if anything is still using the vulnerable > glibc.
This doesn't graft does it? It'd just bump glibc's version.