oss-sec mailing list archives

Re: kernel: hvc_console: Fix race between hvc_close and hvc_remove


From: Eugene Teo <eugene () redhat com>
Date: Mon, 19 Apr 2010 09:55:43 +0800

Hi Michael,

[snipped]
are issues in features that are disabled by default generally treated
as unimportant? there are bound to be a (perhaps small) subset of users
turning these features on; exposing themselves to more risk if these
issues go unfixed. i suppose cve assignment depends on whether or not
there is an expectation to protect those users in addition to
defaults-using users.

They are not treated as unimportant. However, customers have been advised that our support scope of coverage does not include modified RPMs (i.e. recompiling of kernels to enable unsupported features, etc).

https://www.redhat.com/support/policy/soc/production/

Feel free to email us directly at secalert () redhat com if you have more vendor/Red Hat-specific questions.

Thanks, Eugene
--
Eugene Teo / Red Hat Security Response Team


Current thread: