How we protect our customers:

With Wind River, you can rest easy knowing that the Wind River security team is constantly monitoring the Common Vulnerabilities and Exposures (CVE) database at cve.mitre.org for potential issues affecting Wind River Linux and Wind River Pulsar™ Linux.

Our security team is monitoring specific security notifications from US Government agencies and organizations like NIST, US CERT, and also public and private security mailing lists, and receives email alerts from each of these organizations whenever a new security threat arises. Alerts include both community-confirmed and potential vulnerabilities—we look into all of them. Participation in these forums gives Wind River the opportunity to create patches for vulnerabilities even before the community publicly announces the vulnerability.

We keep you safe in four ways:

Monitoring

All the kernel features, user packages, and Linux tools, which are supported in the standard Wind River Linux distributions, are monitored for security vulnerabilities against the incoming reports.

Assessment

When Wind River is notified of a potential vulnerability by one of the monitored advisory groups, we first determine whether any supported Wind River product is actually susceptible to the vulnerability.

Notification

Once the assessment phase is complete, we notify customers of the level of susceptibility.

Remediation

Less severe vulnerability patches are delivered via the monthly product updates.