[link|http://online.securityfocus.com/bid/5100/info/|SecurityFocus] lists this one. The claims to vulnerability or otherwise are scattered. SF has RH listed v. 5.2 - current, CERT has RH as "unknown", and discussion elsewhere suggests that Olaf Kirch's glibc rewrite got RH off the hook. Red Hat's own [link|http://rhn.redhat.com/errata/rh73-errata-security.html|security page] has no mention.

Anyone got the poop?