oss-security - Re: kernel: hvc_console: Fix race between hvc_close and hvc

Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Mon, 19 Apr 2010 09:55:43 +0800
From: Eugene Teo <eugene@...hat.com>
To: oss-security@...ts.openwall.com
CC: Michael Gilbert <michael.s.gilbert@...il.com>
Subject: Re: kernel: hvc_console: Fix race between hvc_close
 and hvc_remove

Hi Michael,

[snipped]
> are issues in features that are disabled by default generally treated
> as unimportant? there are bound to be a (perhaps small) subset of users
> turning these features on; exposing themselves to more risk if these
> issues go unfixed. i suppose cve assignment depends on whether or not
> there is an expectation to protect those users in addition to
> defaults-using users.

They are not treated as unimportant. However, customers have been 
advised that our support scope of coverage does not include modified 
RPMs (i.e. recompiling of kernels to enable unsupported features, etc).

https://www.redhat.com/support/policy/soc/production/

Feel free to email us directly at secalert@...hat.com if you have more 
vendor/Red Hat-specific questions.

Thanks, Eugene
--
Eugene Teo / Red Hat Security Response Team

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.