|
Message-ID: <4BCBB81F.6050100@redhat.com> Date: Mon, 19 Apr 2010 09:55:43 +0800 From: Eugene Teo <eugene@...hat.com> To: oss-security@...ts.openwall.com CC: Michael Gilbert <michael.s.gilbert@...il.com> Subject: Re: kernel: hvc_console: Fix race between hvc_close and hvc_remove Hi Michael, [snipped] > are issues in features that are disabled by default generally treated > as unimportant? there are bound to be a (perhaps small) subset of users > turning these features on; exposing themselves to more risk if these > issues go unfixed. i suppose cve assignment depends on whether or not > there is an expectation to protect those users in addition to > defaults-using users. They are not treated as unimportant. However, customers have been advised that our support scope of coverage does not include modified RPMs (i.e. recompiling of kernels to enable unsupported features, etc). https://www.redhat.com/support/policy/soc/production/ Feel free to email us directly at secalert@...hat.com if you have more vendor/Red Hat-specific questions. Thanks, Eugene -- Eugene Teo / Red Hat Security Response Team
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.