Marcus Meissner, Author at SUSE Communities

July 4, 2022 11:26 am

8,295 views

Applying DISA STIG hardening to SLES installations

Introduction The DISA and SUSE have authored a STIG (Secure Technical Implementation Guide) that describes how to harden a SUSE Linux Enterprise system. The STIG is a long list of rules, each containing description, detection of problems and how to remediate problems on a per rule basis. While originally STIGs are supposed to applied manually, […]

By: Marcus Meissner

March 8, 2022 12:58 pm

8,273 views

SUSE statement on “Dirty Pipe” attack

On Monday, March 7th, security researcher Max Kellermann published a new software vulnerability that affect users of the Linux Kernel. The vulnerability, called Dirty Pipe (CVE-2022-0847) , impacts Linux Kernels 5.8 and later, and allows local attackers to overwrite files even if they had only read permissions, allowing for easy privilege escalation. The issue is […]

By: Marcus Meissner

December 12, 2021 8:49 am

22,496 views

SUSE Statement on log4j / log4shell / CVE-2021-44228 / Vulnerability

On Friday December 10 morning a new exploit in "log4j" Java logging framework was reported, that can be trivially exploited. This vulnerability is caused by a new feature introduced in log4j 2.x versions where a specific string embedded in messages logged by log4j would be interpreted by log4j to connect to remote sites […]

Tags: CVE-2021-44228, log4j, log4shell

Categories: Compliance, Server, SUSE Linux Enterprise Server, SUSE Multi-Linux Manager, Technical Solutions

By: Marcus Meissner

July 27, 2020 8:39 am

33,110 views

SUSE addresses BootHole security exposure

Security researchers from Eclypsium have published an attack called BootHole today. This attack requires root access to the bootloader used in Linux operating systems, GRUB2. It bypasses normal Secure Boot protections to persistently install malicious code which cannot be detected by the operating system. Given the need for root access to the bootloader, the described […]

By: Marcus Meissner

September 5, 2017 8:33 pm

12,433 views

Our CVE Pages – self help to security issues in SUSE Linux Enterprise

SUSE CVE Pages SUSE offers various self-service options for getting information on Security Issues. One of these self-service options that are intended for human consumption are our CVE Pages. For every CVE that might be related to our products we provide a webpage with our current status. These pages cover SUSE Enterprise products, and also […]

Categories: Server, SUSE Linux Enterprise Server, Technical Solutions

Author: Marcus Meissner

Applying DISA STIG hardening to SLES installations

SUSE statement on “Dirty Pipe” attack

SUSE Statement on log4j / log4shell / CVE-2021-44228 / Vulnerability

SUSE addresses BootHole security exposure

Our CVE Pages – self help to security issues in SUSE Linux Enterprise

Section Title

Search

Social Media

Recent Posts Title

Recent Blog Posts

Recent Posts

Popular Posts Title

Popular Blog Posts

Popular Posts

Categories

Archives

About Links