Not entirely. It appears glibc as a whole is being security audited at present and these CVEs are visible symptoms of the process.

Have the auditors tried looking at musl libc? It seems a lot less convoluted from what I've seen so may be an easier thing to validate.

Thanks! I guess they're related at the glibc level and not at the CVE level.