On Thu, Oct 30, 2014 at 12:31 PM, Peter <peter at pajamian.dhs.org> wrote: > On 10/31/2014 06:53 AM, Johnny Hughes wrote: >> >> CentOS Errata and Security Advisory 2014:1764 Moderate >> >> Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1764.html > > Note to CentOS 5 users. RedHat does not plan to release a fixed wget > for EL5. You can mitigate this vulnerability by adding the following > line to the bottom of /etc/wgetrc: > retr-symlinks=on > > Doing so will basically accomplish exactly the same thing that this > update does. > > Peter Thanks for the heads up. Much appreciated. I'll just post a link relevant to this: https://bugzilla.redhat.com/show_bug.cgi?id=1139181#c17 I was a bit surprised to learn that security updates labelled 'moderate' are no longer published for EL5. Akemi