A flaw in runc (CVE-2019-5736), announced recently, allows container processes to "escape" their containment and execute programs on the host operating system. The good news…Leer artículo completo

Each year, Red Hat Product Security reflects back and reviews the vulnerabilities that impacted our products. We’ve shared the results of this analysis in our…Leer artículo completo

Most of my work is exploring the software made available in Red Hat Enterprise Linux (RHEL) and talking to Red Hat’s solution architects, engineers, and…Leer artículo completo

Starting with Red Hat Enterprise Linux 8 you may be able to defend against some attacks against deprecated security protocols and options with our newly…Leer artículo completo

How Red Hat and SELinux are helping to mitigate CVE-2019-5736, a security vulnerability within the runc Linux container runtime…Leer artículo completo

Like other operating systems, Red Hat Enterprise Linux provides a cryptographically-secure pseudo-random number generator (CSPRNG) as part of our kernel. It is intended to be…Leer artículo completo

We have mixed feelings about Data Privacy Day. On one hand, we’re very much in favor of empowering people and businesses to think about data…Leer artículo completo

Several techniques exist for hardening ELF binaries in Linux. This post discusses one such technique called Relocation Read-Only (RELRO). Selected network daemons and suid-root programs…Leer artículo completo

With the release of Red Hat Enterprise Linux 8 beta, we wanted to take a look at some of the changes that are coming in…Leer artículo completo

As we round out 2018, it’s time to reflect on how the year has gone and our plans for the coming year. For the fifth…Leer artículo completo