A critical security vulnerability in Kubernetes (CVE-2018-1002105) affecting OpenShift Container Platform 3 was patched by Red Hat in December 2018. The OpenShift API Server is…read full post

Editorial Note: While not fully discussed in this post, there is a component to this vulnerability that results in unauthenticated remote code execution, in addition…read full post

The software security industry uses the term Embargo to describe the period of time that a security flaw is known privately, prior to a deadline…read full post

In the recent months I have been getting more and more questions about identity management (IdM) in Red Hat Enterprise Linux and best practices around…read full post

DNSSEC is a system of digital signatures that prevent DNS spoofing. Using DNSSEC, it does not matter where your DNS answers came from, since the…read full post

FORTIFY_SOURCE provides lightweight compile and runtime protection to some memory and string functions (original patch to gcc was submitted by Red Hat). It is supposed…read full post

Many modern developers have learned that ‘sticking with HEAD’ (the most recent stable release) can be the best way to keep their application more secure…read full post

In many ways, age brings refinement. Wine, cheese, and, in some cases, people, all improve as they grow older. But in the world of enterprise…read full post

This post is a follow-on to Identity Management for Systems in a DMZ. Here we will drill down into the deployment of the IdM server…read full post

In this post we will be talking about managing Linux systems that are located in a demilitarized zone (DMZ) also referred to as a perimeter…read full post