latest debians for glibc for ubuntu 16.04

[Akila]

We are looking for the latest debians for glibc in ubuntu 16.04. Can someone help? This is to address some security vulnerabilities.

[Alex Murray (alexmurray)]

As noted in the Ubuntu Security Team FAQ we do not upgrade versions for stable Ubuntu releases - however the Security Team does backport security fixes where possible https://wiki.ubuntu.com/SecurityTeam/FAQ#Versions

To determine any possible outstanding vulnerabilities for glibc please check the Ubuntu CVE tracker - https://people.canonical.com/~ubuntu-security/cve/pkg/glibc.html

[Vibhu Singh (vibsingh)]

Can you please confirm if the above fix has been backported. If not, what would be the timeline when it will be backported?

[Alex Murray (alexmurray)]

Which fix are you referring to? There is nothing specifically mentioned in this bug report - as noted in comment#1 you can see the current status of security fix backports in the CVE tracker. As for a timeline for outstanding fixes - there are currently a reasonable number of outstanding CVEs for glibc so it is not easy to estimate when this is likely to be resolved.

[Vibhu Singh (vibsingh)]

glibc 2.29 Debian package is not available in the glibc release area. The source code is available at https://launchpad.net/ubuntu/+source/glibc/2.29-0ubuntu2

Hence, how can I consume this fix/latest version (glibc 2.29) in my solution if the package is not available in release area