Each year, Red Hat Product Security reflects back and reviews the vulnerabilities that impacted our products. We’ve shared the results of this analysis in our…read full post

A flaw in runc (CVE-2019-5736), announced recently, allows container processes to "escape" their containment and execute programs on the host operating system. The good news…read full post

Most of my work is exploring the software made available in Red Hat Enterprise Linux (RHEL) and talking to Red Hat’s solution architects, engineers, and…read full post

Starting with Red Hat Enterprise Linux 8 you may be able to defend against some attacks against deprecated security protocols and options with our newly…read full post

How Red Hat and SELinux are helping to mitigate CVE-2019-5736, a security vulnerability within the runc Linux container runtime…read full post

Like other operating systems, Red Hat Enterprise Linux provides a cryptographically-secure pseudo-random number generator (CSPRNG) as part of our kernel. It is intended to be…read full post

Several techniques exist for hardening ELF binaries in Linux. This post discusses one such technique called Relocation Read-Only (RELRO). Selected network daemons and suid-root programs…read full post

We have mixed feelings about Data Privacy Day. On one hand, we’re very much in favor of empowering people and businesses to think about data…read full post

With the release of Red Hat Enterprise Linux 8 beta, we wanted to take a look at some of the changes that are coming in…read full post

As we round out 2018, it’s time to reflect on how the year has gone and our plans for the coming year. For the fifth…read full post