[CentOS] [CentOS-announce] CESA-2014:1764 Moderate CentOS 6 wget Security Update

Andrey Z. ya at penek.org
Fri Oct 31 11:16:27 UTC 2014


31.10.2014 13:24, Leon Fauster wrote:
> Am 30.10.2014 um 21:20 schrieb Akemi Yagi <amyagi at gmail.com>:
>> On Thu, Oct 30, 2014 at 12:31 PM, Peter <peter at pajamian.dhs.org> wrote:
>>> On 10/31/2014 06:53 AM, Johnny Hughes wrote:
>>>> CentOS Errata and Security Advisory 2014:1764 Moderate
>>>>
>>>> Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1764.html
>>> Note to CentOS 5 users.  RedHat does not plan to release a fixed wget
>>> for EL5.  You can mitigate this vulnerability by adding the following
>>> line to the bottom of /etc/wgetrc:
>>> retr-symlinks=on
>>>
>>> Doing so will basically accomplish exactly the same thing that this
>>> update does.
>>>
>>> Peter
>> Thanks for the heads up. Much appreciated. I'll just post a link
>> relevant to this:
>>
>> https://bugzilla.redhat.com/show_bug.cgi?id=1139181#c17
>>
>> I was a bit surprised to learn that security updates labelled
>> 'moderate' are no longer published for EL5.
>
>
> oh, that means effectively only 6-7 years "fully supported".
People would be grateful if CentOS developers have built an updated 
version of wget in centosplus repository.




More information about the CentOS mailing list