There doesn’t seem to be a single major distro that’s upgraded to 2.34 yet in a stable release. It’s hard to rapidly release such an integral library, so we might be waiting a while before the rebuilds are finished everywhere.
I do not understand why the article repeats twice that every program links with glibc. Surely ones that actually exercise the mq functions are much rarer. Hell, not that it’s a great indicator, but I, for one, am only hearing about these functions for the first time right now.
Repology is a way to check a bunch of Linux distributions’ version of glibc included in their respective repositories: https://repology.org/project/glibc/versions
There doesn’t seem to be a single major distro that’s upgraded to 2.34 yet in a stable release. It’s hard to rapidly release such an integral library, so we might be waiting a while before the rebuilds are finished everywhere.
This is not how distros work, at least most of them.
They usually ship the version of a library that was stable when they made their last stable release and then backport important fixes.
I do not understand why the article repeats twice that every program links with glibc. Surely ones that actually exercise the mq functions are much rarer. Hell, not that it’s a great indicator, but I, for one, am only hearing about these functions for the first time right now.
I don’t know much about glibc development, but if there is automated testing, TRWTF is that the original patch was accepted without a test.