Comment 7 for bug 317052

Right, EPEL-4 should be affected by both, "first occurred in" was meant as "first fixed in". I have not tried to find first affected version, it may go way back.

I do not have any ready to use test case, though based on comments in infrastructure ticket 1120, someone's been able to re-create one successfully.

As for EPEL-4 patch, it may be possible to address -5516 by using quote_command() (introduced in -5517 patch) on the open() argument.