Red Hat Product Security Risk Report: 2018

summerheat · Mar 1, 2019

Red Hat has published their newest security risk report in which they present the vulnerabilties reported in 2018 using a four-point scale. The report is available as a PDF file:

https://www.redhat.com/cms/managed-files/rh-2018-risk-report-overview-f16049wg-201902-en.pdf

In 2018, Red Hat addressed 1,272 total CVEs through 745 RHSAs across our entire portfolio. If we
review these numbers closer, we will see that we issued 111 Critical security advisories that addressed
57 Critical CVEs. Of these Critical security advisories, 38% were issued within one day of the issue
becoming public. Looking at the average delivery time for Critical advisories, you can see these were
delivered within 18 days of the issue becoming public, with a median being 2.5 days. For issues rated
as Important, 268 CVEs were addressed through 404 RHSAs during the same timeframe. For these
vulnerabilities, 21% had patches available within one business day, with the average delivery time of
63 days and the median 8 days.

The year at a glance:
• 3,774 security issues were reported to Red Hat Product Security (nearly double the amount
reported in 2015)
• 1,272 CVEs were addressed throughout 2018, an 11% increase from 2017
• 745 Red Hat Security Advisories were issued, a continued increase over previous years
• 111 Critical advisories addressing 57 Critical vulnerabilities
• 38% of Critical issues were addressed within 1 business day
• 80% of Critical issues were addressed within 1 week
Click to expand...

The trend in the reported CVEs since 2011 is shown in this graph:

Mrkvonic · Mar 2, 2019

I don't like graphs that don't start at zero in order to emphasize relatively tiny and insignificant differences. For all practical reasons, 1000 or 1200 vulnerabilities is the same thing.
Mrk

Log in or Sign up

Red Hat Product Security Risk Report: 2018

summerheat Registered Member

Mrkvonic Linux Systems Expert

Log in or Sign up

Red Hat Product Security Risk Report: 2018

summerheat Registered Member

Mrkvonic Linux Systems Expert

Useful Searches