Red Hat OpenShift

POODLE – An SSL 3.0 Vulnerability (CVE-2014-3566) Red Hat Product Security has been made aware of a vulnerability in the SSL 3.0 protocol, which has been assigned CVE-2014-3566. All implementations of SSL 3.0 are affected. This vulnerability allows a man-in-the-middle attacker to decrypt ciphertext using a padding oracle side-channel attack. To mitigate this vulnerability, it is recommended that you explicitly disable SSL 3.0 in favor of TLS 1.1 or later in all affected packages. Read the whole article via Red...

"The recent few days have been hectic for everyone who works in the Linux/Unix world. Bash security flaws have rocked the globe leaving people confused, worried, or just frustrated. Now that the storm is over and patches are available for most operating systems, here are the answers to some of the common questions we’ve been asked:" Read the whole article - from the Red Hat security engineering team: Frequently Asked Questions about the Shellshock Bash flaws | Red Hat Security...

Because we’re Java Developers, too Red Hat and the JBoss Community have developed many popular, innovative technologies and projects that have shaped Java as we know it. This activity is most notably around Red Hat® JBoss® Middleware, but is also taking place in many related open source projects. In addition, we also make use of Java in a wide range of our other products. This means that, as a Java developer, you'll find plenty to keep you happy with our...

From Barry Manilow to Kiss, to Mary J. Blige and everyone in-between, people have been singing Talk to me for decades. And is it any wonder? Often we don't feel heard or feel that we don't understand what people are trying to say or do. In the fast pace of today's business, effective communication to get everyone on the same page quickly is essential. Needless to say, this isn't always easy. Given that we have to communicate effectively and the...

Newcomers to python-ideas occasionally make reference to the idea of "Python 4000" when proposing backwards incompatible changes that don't offer a clear migration path from currently legal Python 3 code. After all, we allowed that kind of change for Python 3.0, so why wouldn't we allow it for Python 4.0? I've heard that question enough times now (including the more concerned phrasing "You made a big backwards compatibility break once, how do I know you won't do it again?"), that...

If Ruby development is your thing, here at Red Hat we understand why. We make use of Ruby and Ruby on Rails in our products and provide a range of tools to get your Ruby applications up and running. Also, we offer you the opportunity to take your Ruby skills a little further, as we have projects you can get involved in. Read on to discover how we use Ruby in OpenShift by Red Hat® , our Platform-as-a-Service (PaaS) portfolio...

Hey, Boston! DevOpsDays will be in town next week and is sold out (good news, but bad if you're missing it). Red Hat is a sponsor, so we'll see you there (We've got schwag.) Here's the event home page and their program agenda .

Welcome to the Red Hat® Developer Newsletter. As we're in the season for covering our arms and faces with sunscreen, here's another ARM for your attention. Last month, Red Hat announced the launch of the Red Hat ARM Partner Early Access Program to enhance partner collaboration and facilitate partner-initiated system designs — based on the 64-bit capable ARMv8-A architecture — that include Red Hat software. The program is aimed at silicon vendors, independent hardware vendors (IHVs), original equipment manufacturers (OEMs)...

******* EDIT This entry is out of date, I have moved the instructions to the Google Kubernetes github repo. END EDIT ******* These are my notes on how to get started evaluating a Fedora / Docker / kubernetes environment. I'm going to start with two hosts. Both will run Fedora rawhide. The goal is to stand up both hosts with kubernetes / Docker and use kubernetes to orchestrate the deployment of a couple of simple applications. Derek Carr has already...

by Grant Murphy "The Victims project is a Red Hat initiative that aims to detect known vulnerable dependencies in Java projects and deployments. Our initial focus was Java projects that were built using Maven. The victims-enforcer plug-in for Maven provides developers with immediate feedback if any of their project dependencies contain known vulnerabilities. However, until recently we did not have a good solution for scanning deployments or tools that work outside of a typical build and release cycle. The alpha...

b y siddharth "The FORTIFY_SOURCE macro provides lightweight support for detecting buffer overflows in various functions that perform operations on memory and strings. Not all types of buffer overflows can be detected with this macro, but it does provide an extra level of validation for some functions that are potentially a source of buffer overflow flaws. It protects both C and C++ code. FORTIFY_SOURCE works by computing the number of bytes that are going to be copied from a source...

Flock 2014 (Editor's correction: Flock is a "new, larger and pre-scheduled conference" for North America and Europe) is just a few weeks away and will be hosted in Prague, Czech Republic. The entire list of sessions can be seen here , but below is the list of the 39 sessions delivered by Red Hatters. Have a great conference! WEDNESDAY Matthew Miller: Opening: Fedora Project Leader , Wednesday, August 6 • 08:45 - 09:00 Opening remarks from Fedora Project Leader. Amita...

Excerpts from the original article: "Red Hat announced the general availability of Red Hat Enterprise Linux OpenStack Platform 5, the third enterprise release of Red Hat's OpenStack offering, designed to serve as the foundation for building OpenStack-powered clouds for advanced cloud users, telecommunications companies, Internet service providers (ISPs), and public cloud hosting providers. "Red Hat Enterprise Linux OpenStack Platform 5 is based on the OpenStack Icehouse release and includes several new features aimed at easing enterprise adoption of OpenStack technology...

Part four of a four-part series on DevOps with Gene Kim and Red Hat IT. Part 1: Getting DevOps Off the Ground Part 2: The Importance of Partnership in DevOps Part 3: A DevOps Implementation Strategy Part 4: DevOps Successes and Failures Panelists: Bill Montgomery : Manager, Red Hat IT Steve Milner : Engineer, Red Hat IT Jen Krieger : Product Owner, Red Hat IT Tim Bielawa : Engineer, Red Hat IT Chris Murphy : Engineer, Red Hat IT Introduction...

You’ve probably already heard of OpenStack, the cloud operating system, where Red Hat is the top company contributor to the project. What you may not know is that Red Hat engineers develop an open source translation management platform called Zanata . When Carlos Munoz from the Red Hat Zanata team heard that OpenStack localization (l10n) team were looking for a new alternative to their current translation platform, he went to the OpenStack Summit in Atlanta to introduce Zanata. Read on...

Part three of a four-part series on DevOps with Gene Kim and Red Hat IT. Part 1: Getting DevOps Off the Ground Part 2: The Importance of Partnership in DevOps Part 3: A DevOps Implementation Strategy Part 4: DevOps Successes and Failures Panelists: Bill Montgomery : Manager, Red Hat IT Steve Milner : Engineer, Red Hat IT Jen Krieger : Product Owner, Red Hat IT Tim Bielawa : Engineer, Red Hat IT Chris Murphy : Engineer, Red Hat IT Introduction...

This is part two of a four-part series on DevOps with Gene Kim and Red Hat IT's Inception Team. Part 1: Getting DevOps Off the Ground Part 2: The Importance of Partnership in DevOps Part 3: A DevOps Implementation Strategy Part 4: DevOps Successes and Failures Panelists: Bill Montgomery : Manager, Red Hat IT Steve Milner : Engineer, Red Hat IT Jen Krieger : Product Owner, Red Hat IT Tim Bielawa : Engineer, Red Hat IT Chris Murphy : Engineer...

On our road to Delivery Efficiency, we’ve covered knowing and understanding your thing and we’ve also talked about making our thing better over time and where that fits in the delivery continuum. As we continue our journey, the next key element is in relationships . What relationships? Sometimes our thing relies on other things and other things sometimes rely on our thing . Some people call these inter-dependencies. Simply put, they are relationships. Relationships come in many shapes and sizes...

If you are a Linux System Administrator, then passing the Red Hat Certified Engineer exam is probably on your to-do list for career development or better yet, it has been checked off your to-do list with great pride when you passed the exam. If the latter applies to your situation, let me congratulate you! You've earned it! But what if you are a Developer? Should you even care about this certification? Well, here at Red Hat IT, we began piloting...

I had a chance to catch-up with Mark Little , VP of Engineering at Red Hat, to discuss his DevNation involvement and I could feel his enthusiasm through the phone line. Here's what Mark shared about DevNation (and even a bit about Red Hat Summit). What sessions are you giving at DevNation? The first session is the Developer Keynote on Monday (4:00-5:00 in Hall A) with Craig Muzilla, SVP of Red Hat. Previously called the Middleware Keynote, this typically kicks...

Today, we’ll share a small victory in our DevOps journey at Red Hat IT. This cross-team collaboration has saved our IT organization some headaches and wasted time. We open-sourced the code, hoping it can help you, too. The Dev problem, from Sam Van Oort : Old, pruned git branches are sometimes re-created by accident, making a mess for our developers. Code repositories are the final resting place for code, acting as equal parts bank vault, museum, and graveyard. Unlike a...

Come say hi to the RHEL Developer Program and OpenShift teams at Fluent next week. I think the schedule looks super interesting, but to curate a few that I hope to get to: So many js libraries, so little time, which makes the JavaScript Smackdown! Choosing Your MVC between Angular, Ember, and Backbone look really interesting. Getting a deeper understanding of Angular with: Leveling Up in Angular Red Hat's own Steve Citron-Pousty will be talking about GIS in his talk...

Back in December, I shared with you how Red Hat IT was beginning its DevOps transformation . That early post discussed our strategy, team composition, the importance of Open Source, and incremental change. It's been about three months and I'd like to share an update with some early lessons learned. Overall impression so far? This is harder than we thought. To recap, our approach to jump-starting a DevOps transformation in Red Hat IT was to form a small, temporary team...

Red Hat has just announced general availability of these long awaited products! It takes a large effort to turn the community code into enterprise quality software that customers and end-users can rely on in production with Red Hat support. It is now a great time for current and potential customers to learn about the product, for partners to start engaging with it and learning the nuts and bolts, and for the open source community and Red Hat to receive all...

In Part 1 , we talked a bit about this DevOps thing and why people won't stop talking about it. In Part 2, we'll talk about the areas where you can change your IT focus today to help benefit from DevOps. A classic mistake is to focus primarily on the tools associated with successful DevOps shops. It's not as if you can bring up your own Deployinator and suddenly become as high-functioning an IT shop as Etsy . The tooling...