[NTLUG:Discuss] Avoiding evil --updating glibc

[Richard Geoffrion]

> My general rule of thumb is to *never* update glibc just because I want
> to.  I only update glibc when there are security or bugfix packages that
> come from my distro.  If you have the balls to update glibc by yourself,
> then you should have no problem reinstalling everything when you foobar
> your system.  ;-p  (Speaking from experience)
> 

in this case.  The glibc update is also a security fix.

> What you should do is get the SRPM for openssl and rebuild it yourself.
> The glibc dependency is there because that's what openssl was built
> with.  Get the source and you solve that problem.

I will try that, but there is still the security fix.

thanks