https://bugzilla.redhat.com/show_bug.cgi?id=1203719
Matt Goldman magoldma@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |magoldma@redhat.com
--- Comment #6 from Matt Goldman magoldma@redhat.com --- Dapeng,
Yes, from the whiteboard RHEL 5 is affected:
rhel-5/libXfont=affected
However, RHEL 5 has entered Production Phase 3 as of January 31, 2014. As per our errata policy:
"During the Production 3 Phase, Critical impact Security Advisories (RHSAs) and selected Urgent Priority Bug Fix Advisories (RHBAs) may be released as they become available." Red Hat Enterprise Linux Life Cycle https://access.redhat.com/support/policy/updates/errata#Production_3_Phase
This means that Red Hat will not be addressing Low, Moderate, or Important impact CVE's in relation to RHEL 5.