Description of problem: Rebase yum-utils to the upstream 1.1.15 or 1.1.16 where we'll get the yum-security fix, and a few other small fixes/changes. The main motivator is that this is what's tested upstream and that there's not a lot of changes that could break things.
This request was evaluated by Red Hat Product Management for inclusion in a Red Hat Enterprise Linux maintenance release. Product Management has requested further review of this request by Red Hat Engineering, for potential inclusion in a Red Hat Enterprise Linux Update release for currently deployed products. This request is not yet committed for inclusion in an Update release.
this bug is now documented in the RHEL5.3 release notes. you can view a mock build of this document at the following link: http://documentation-stage.bne.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5.3/html-single/Release_Notes/
Release note added. If any revisions are required, please set the "requires_release_notes" flag to "?" and edit the "Release Notes" field accordingly. All revisions will be proofread by the Engineering Content Services team. New Contents: yum-utils is now re-based to upstream version 1.1.16. This applies several bug fixes, including: yum update --security can now properly locate old relevant security updates. yum-versionlock now works properly against package obsoletes. This update also includes the yum-fastestmirror plugin, which enables yum to choose the fastest repository in a mirrorlist.
An advisory has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on therefore solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHBA-2009-0227.html