Hi All - sorry for the top post but I just want to make a general comment on this thread.

For the original issue, there is an easy way to find out the RHEL status of any CVE. Just send an email to [email protected] with the CVE and they will reply with the details.

See details here: http://www.redhat.com/security/team/contact/

The security team also writes kbase articles for higher profile CVEs. For example, http://kbase.redhat.com/faq/docs/DOC-16788

You can bookmark the security tag or add it to your reader:
http://kbase.redhat.com/faq/tags/security

In terms of general confusion about the purpose of Bugzilla - it's definitely true that Bugzilla is not a support forum. That said, it is a great place to get information for people who are comfortable reading through bug reports. Bugzilla *is* the official bug tracking tool for RHEL that is used by RHEL developers. That said, not all of Bugzilla is open to the public. We also put a lot of information about bugs affecting more than a few users into the kbase. The kbase is much more user friendly that bugzilla, and I generally encourage folks to search the kbase first.

We're open to suggestions if there is any way we can clarify any of this. Please don't hesitate to reply or email me directly.

Thanks,
Sam

Knowledge Program Manager
Red Hat, Inc

Chris Adams wrote:
Once upon a time, Sharpe, Sam J <[email protected]> said:
The correct channel for RHEL support is www.redhat.com/support - I
appreciate that English is my first language, but I think that is
totally clear...

The key thing to understand is that BZ is a great place to track and see
bugs that _have been submitted to BZ_; that's all.  It is _not_ the
place to see the status of all known bugs in RHEL; AFAIK there is no
public resource for that.

Also, if you are just looking for info about CVEs and their status in
RHEL, look at the CVE site http://cve.mitre.org/.  If you look up a CVE,
you get links to the Red Hat Security Advisories for RHEL (and other
products).


_______________________________________________
rhelv5-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/rhelv5-list

Reply via email to