A flaw in runc (CVE-2019-5736), announced recently, allows container processes to "escape" their containment and execute programs on the host operating system. The good news…read full post

Starting with Red Hat Enterprise Linux 8 you may be able to defend against some attacks against deprecated security protocols and options with our newly…read full post

How Red Hat and SELinux are helping to mitigate CVE-2019-5736, a security vulnerability within the runc Linux container runtime…read full post

Like other operating systems, Red Hat Enterprise Linux provides a cryptographically-secure pseudo-random number generator (CSPRNG) as part of our kernel. It is intended to be…read full post

Several techniques exist for hardening ELF binaries in Linux. This post discusses one such technique called Relocation Read-Only (RELRO). Selected network daemons and suid-root programs…read full post

We have mixed feelings about Data Privacy Day. On one hand, we’re very much in favor of empowering people and businesses to think about data…read full post

With the release of Red Hat Enterprise Linux 8 beta, we wanted to take a look at some of the changes that are coming in…read full post

Red Hat Global Customer Tech Outlook 2019: Automation, cloud, & security lead funding priorities…read full post

A critical security vulnerability in Kubernetes (CVE-2018-1002105) affecting OpenShift Container Platform 3 was patched by Red Hat in December 2018. The OpenShift API Server is…read full post

Editorial Note: While not fully discussed in this post, there is a component to this vulnerability that results in unauthenticated remote code execution, in addition…read full post