A flaw in runc (CVE-2019-5736), announced recently, allows container processes to "escape" their containment and execute programs on the host operating system. The good news…Ler o artigo completo

Each year, Red Hat Product Security reflects back and reviews the vulnerabilities that impacted our products. We’ve shared the results of this analysis in our…Ler o artigo completo

Most of my work is exploring the software made available in Red Hat Enterprise Linux (RHEL) and talking to Red Hat’s solution architects, engineers, and…Ler o artigo completo

Starting with Red Hat Enterprise Linux 8 you may be able to defend against some attacks against deprecated security protocols and options with our newly…Ler o artigo completo

How Red Hat and SELinux are helping to mitigate CVE-2019-5736, a security vulnerability within the runc Linux container runtime…Ler o artigo completo

Like other operating systems, Red Hat Enterprise Linux provides a cryptographically-secure pseudo-random number generator (CSPRNG) as part of our kernel. It is intended to be…Ler o artigo completo

We have mixed feelings about Data Privacy Day. On one hand, we’re very much in favor of empowering people and businesses to think about data…Ler o artigo completo

Several techniques exist for hardening ELF binaries in Linux. This post discusses one such technique called Relocation Read-Only (RELRO). Selected network daemons and suid-root programs…Ler o artigo completo

With the release of Red Hat Enterprise Linux 8 beta, we wanted to take a look at some of the changes that are coming in…Ler o artigo completo

As we round out 2018, it’s time to reflect on how the year has gone and our plans for the coming year. For the fifth…Ler o artigo completo