Where can I get official statements about how security vulnerabilities affect Red Hat?

Red Hat releases errata to fix security vulnerabilities. With each erratum , an advisory is supplied to give details of the issues being fixed as well as how to obtain and install the required software packages.

When a new public security vulnerability is under investigation, or when an issue does not affect Red Hat, official vendor statements are provided.

These statements are available at the NIST National Vulnerability Database and can be found by searching by CVE name, or as a complete downloadable file . Where no official statement exists, the Red Hat Security Response Team can be contacted.