On 24 Sep 2014 17:12, "Johnny Hughes" johnny@centos.org wrote:
For informational purposes:
As a by heads up that advisory has been updated since the updated packages were released.
The fix in the previous packages is incomplete and there is a new cve being tracked as a result: