EPEL 5 security issues

[Orion Poplawski]

On 09/18/2014 03:55 PM, Brandon Vincent wrote:
> On Thu, Sep 18, 2014 at 2:33 PM, Orion Poplawski <orion at cora.nwra.com> wrote:
>> I'm not a user of EL5 anymore, but I think we need to address the python26
>> and django situation in EPEL5.
>
> The Fedora Security Team has been working on closing out some older
> security issues with Fedora. The EPEL 5 repository is a big offender.
> If anyone knows the packagers for the following [1], please let them
> know.
>
> [1] https://bugzilla.redhat.com/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&classification=Fedora&f1=short_desc&keywords=Security%2C%20SecurityTracking%2C%20&keywords_type=allwords&o1=substring&query_format=advanced&v1=[epel-5]
>
> Brandon Vincent
> _______________________________________________
> epel-devel mailing list
> epel-devel at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/epel-devel
>

The old mediawiki package was dropped from EPEL6, but apparently not 
from EPEL5.  There are also:

mediawiki.x86_64                     1.14.0-45.el5                 epel
mediawiki-Cite.noarch                0-0.3.20080901svn.el5         epel
mediawiki-LdapAccount.noarch         0.1-1.el5                     epel
mediawiki-ParserFunctions.noarch     1.1.1-1.20080520svn35130.el5  epel
mediawiki-SpecialInterwiki.noarch    0-0.4.svn49252.el5            epel
mediawiki-math.x86_64                1.14.0-45.el5                 epel
mediawiki-nomath.x86_64              1.14.0-45.el5                 epel
mediawiki-rss.noarch                 1.5-2.el5                     epel
mediawiki-wikicalendar.noarch        1.16-1.el5                    epel

-- 
Orion Poplawski
Technical Manager                     303-415-9701 x222
NWRA/CoRA Division                    FAX: 303-415-9702
3380 Mitchell Lane                  orion at cora.nwra.com
Boulder, CO 80301              http://www.cora.nwra.com