SUSE Blog

Author: Marcus Meissner


By: Marcus Meissner

January 10, 2019 3:25 pm

1,744 views

Stack clashing systemd aka “System Down”

One and a half year ago the security research company Qualys reported a new attack class against common operating systems called "Stack Clash". We documented this in our TID 7020973. The core security problem is that variable sized stack allocations could be used to overwrite heap memory as stack and heap grow towards each […]

Read More

Categories: Enterprise Linux, Mission-Critical Computing, Server, SUSE Linux Enterprise, SUSE Linux Enterprise Desktop, SUSE Linux Enterprise Server


By: Marcus Meissner

November 26, 2018 2:29 pm

1,132 views

Overview of Meltdown and Spectre CPU issues

Meltdown and Spectre - current overview The out-of-order execution features of processors, together with speculated execution and lacking permission checking recently lead to new two major classes of side channel attacks that could leak privileged information. The core issue is that some side effects of out-of-order execution are not being rolled back fully when the […]

Read More

Categories: Enterprise Linux, Server, Solutions, SUSE Linux Enterprise, SUSE Linux Enterprise Server


By: Marcus Meissner

August 6, 2018 5:00 pm

4,571 views

SUSE addresses “SegmentSmack” attack

Today, on August 6th 2018, researchers from FICORA have published a remote denial of service attack against Linux Servers, called "SegmentSmack" (CVE-2018-5390). Due to inefficient programming remote attackers could use a lot of compute resources by exploiting worst-case behaviour in the TCP segment reassembly code of newer Linux Kernels, which could allow even single […]

Read More

Tags: , ,

Categories: Announcements, Server, SUSE Linux Enterprise, SUSE Linux Enterprise Server


By: Marcus Meissner

May 21, 2018 9:00 pm

14,520 views

SUSE Addresses Spectre Variant 4

Today, the Google Project Zero team disclosed an additional speculative execution method to obtain data that would otherwise be protected by the CPU. Google, together with CPU, hardware and operating system vendors have worked over the past months to prepare mitigations for this vulnerability, known as Spectre v4. The vulnerability is similar to others in […]

Read More

Tags: , ,

Categories: Announcements, Compliance, Containers as a Service, SUSE CaaS Platform, SUSE Linux Enterprise, SUSE Linux Enterprise Desktop, SUSE Linux Enterprise Server, SUSE News, Technical Solutions


By: Marcus Meissner

September 5, 2017 8:33 pm

1,669 views

Our CVE Pages – self help to security issues in SUSE Linux Enterprise

SUSE CVE Pages SUSE offers various self-service options for getting information on Security Issues. One of these self-service options that are intended for human consumption are our CVE Pages. For every CVE that might be related to our products we provide a webpage with our current status. These pages cover SUSE Enterprise products, and also […]

Read More

Tags: , , , ,

Categories: Enterprise Linux, Server, SUSE Linux Enterprise, SUSE Linux Enterprise Server, Technical Solutions

    Section Title

    Search

    Social Media

    Recent Posts Title

    Recent Blog Posts

    Recent Posts

    Popular Posts Title

    Popular Blog Posts

    Popular Posts

    Categories

    Archives

    About Links

    SUSE History
    SUSE Management Team
    SUSE Logos & Imagery