Could you please backport this change from glibc upstream? http://sourceware.org/git/?p=glibc.git;a=commit;h=7e66ee5142deda977163d0a858c3d2883cae3f07 Code is unchanged, the main risk is build failures with -Werror. It is unclear if the Fedora kernel actually prevents failure of setuid when getuid() == 0 (although the most easy-to-exploit case is covered), so I think it still makes sense to have this patch in Fedora.
In glibc-2.16-7, build spinning now.