Each year, Red Hat Product Security reflects back and reviews the vulnerabilities that impacted our products. We’ve shared the results of this analysis in our…read full post

Starting with Red Hat Enterprise Linux 8 you may be able to defend against some attacks against deprecated security protocols and options with our newly…read full post

How Red Hat and SELinux are helping to mitigate CVE-2019-5736, a security vulnerability within the runc Linux container runtime…read full post

Like other operating systems, Red Hat Enterprise Linux provides a cryptographically-secure pseudo-random number generator (CSPRNG) as part of our kernel. It is intended to be…read full post

Several techniques exist for hardening ELF binaries in Linux. This post discusses one such technique called Relocation Read-Only (RELRO). Selected network daemons and suid-root programs…read full post

We have mixed feelings about Data Privacy Day. On one hand, we’re very much in favor of empowering people and businesses to think about data…read full post

With the release of Red Hat Enterprise Linux 8 beta, we wanted to take a look at some of the changes that are coming in…read full post

As we round out 2018, it’s time to reflect on how the year has gone and our plans for the coming year. For the fifth…read full post

Editorial Note: While not fully discussed in this post, there is a component to this vulnerability that results in unauthenticated remote code execution, in addition…read full post

A critical security vulnerability in Kubernetes (CVE-2018-1002105) affecting OpenShift Container Platform 3 was patched by Red Hat in December 2018. The OpenShift API Server is…read full post