Here's how to find packages on your system with statically linked applications (that probably use glibc): [root@server ~]# find /bin/ /sbin/ /usr/bin/ /usr/s

Here's how to find packages on your system with statically linked applications (that probably use glibc): [root@server ~]# find /bin/ /sbin/ /usr/bin/ /usr/sbin/ /usr/lib* /usr/local/bin/ /usr/local/sbin/ /usr/local/lib* -type f -perm /u+x -exec file {} \; | grep statically | cut -d : -f 1 | xargs rpm -qf | sort -u busybox-1.2.0-7.el5.x86_64 cryptsetup-luks-1.0.3-5.el5.i386 cryptsetup-luks-1.0.3-5.el5.x86_64 device-mapper-1.02.39-1.el5.i386 device-mapper-1.02.39-1.el5.x86_64 device-mapper-multipath-0.4.7-34.el5_5.1.x86_64 dmraid-1.0.0.rc13-63.el5.x86_64 dump-0.4b41-4.el5.x86_64 e2fsprogs-1.39-23.el5.x86_64 glibc-2.5-123.el5_11.1.i686 glibc-2.5-123.el5_11.1.x86_64 glibc-common-2.5-123.el5_11.1.x86_64 grub-0.97-13.5.x86_64 ... etc. And yes, it can be a lot of work. It's easier to only use your distro's official packages and update the patched ones they release. Luckily most software devs are smart and compile dynamically.