| |||||||||||||
|
| |||||||||||||
Stable kernel 2.6.32.8Stable kernel 2.6.32.8Posted Feb 19, 2010 8:53 UTC (Fri) by mjcox@redhat.com (subscriber, #31775)In reply to: Stable kernel 2.6.32.8 by eteo Parent article: Stable kernel 2.6.32.8
> Deliberate obfuscation of security-relevant changelogs
> is not the right thing to do.
At Red Hat, if we know something is a security issue in any package, and we fix it, we'll get a CVE for it (if it's missing one) and label it in our updates as well as mention it in public bugs/mailing lists etc.
If something we fix later turns out to have a security relevance we didn't know about at the time, we'll retrospectively add the CVE to the relevant errata.
We definitely encourage clear and complete upstream changelogs that highlight security relevant issues.
(Log in to post comments)
|
|
||||||||||||