Re: [CentOS] Glibc vulnerbality CVE-2015-1781

On Wed, 25 Nov 2015 09:51:58 +0530 Venkateswara Rao Dokku wrote:

In the link it is mentioned that, the CVE will not be fixed in Red-Hat 5 version. What does that mean? I mean, whether the RedHat 5 is vulnerable & fix is not available or RedHat 5 is not vulnerable, hence the fix is not given?

Read what it says a little higher on that webpage, under the Statement heading:

Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.