Security Vulnerabilities Archives

October 15, 2020 3:16 pm

1,958 views

SUSE Releases Fixes for BleedingTooth Vulnerabilities

Yesterday evening, Google and Intel published a new set of software vulnerabilities that affect machines running Linux Kernels that use Bluetooth. The set of vulnerabilities, called BleedingTooth, impact SUSE Linux Enterprise systems with enabled Bluetooth hardware. There are 3 separate issues bundled into this set: CVE-2020-24490 (BadVibes): A heap overflow when processing extended advertising report […]

Tags: CVE, Security, Security Vulnerabilities

Categories: Server, SUSE Linux Enterprise Server

By: Marcus Meissner

May 21, 2018 9:00 pm

17,214 views

SUSE Addresses Spectre Variant 4

Today, the Google Project Zero team disclosed an additional speculative execution method to obtain data that would otherwise be protected by the CPU. Google, together with CPU, hardware and operating system vendors have worked over the past months to prepare mitigations for this vulnerability, known as Spectre v4. The vulnerability is similar to others in […]

Tags: Meltdown, Security Vulnerabilities, Spectre

Categories: Announcements, Compliance, Containers as a Service, SUSE CaaS Platform, SUSE Linux Enterprise Desktop, SUSE Linux Enterprise Server, SUSE News, Technical Solutions

By: Matthias G. Eckermann

January 4, 2018 7:58 am

125,945 views

SUSE Addresses Meltdown and Spectre Vulnerabilities

Yesterday the security community and a number of IT vendors announced the existence of several hardware security vulnerabilities that allow potential exploits across a range of hardware architectures and operating systems including but not limited to Linux. https://meltdownattack.com/ SUSE engineers have been collaborating with our partners and the Linux community on upstream Linux kernel […]

Tags: Meltdown, Security, Security Vulnerabilities, Spectre

Categories: Announcements, Compliance, Containers as a Service, Server, SUSE CaaS Platform, SUSE Linux Enterprise Desktop, SUSE Linux Enterprise Server, SUSE News, Technical Solutions

By: Alexander Bergmann

December 22, 2017 3:37 am

2,617 views

We will switch to CVSS v3.0 starting in 2018

After our announcement back in January this year, and a transition phase where we scored both version 2 and version 3, we will finally switch entirely to the Common Vulnerability Scoring System (CVSS) version 3.0 for vulnerability assessment with the beginning of 2018. Customers who automatically check our v2 scoring will no longer see […]

Tags: CVE, CVSS, Linux, Security, Security Vulnerabilities, SUSE Security Team

Categories: SUSE Linux Enterprise Desktop, SUSE Linux Enterprise Live Patching, SUSE Linux Enterprise Server, Technical Solutions

By: Marcus Meissner

September 5, 2017 8:33 pm

2,657 views

Our CVE Pages – self help to security issues in SUSE Linux Enterprise

SUSE CVE Pages SUSE offers various self-service options for getting information on Security Issues. One of these self-service options that are intended for human consumption are our CVE Pages. For every CVE that might be related to our products we provide a webpage with our current status. These pages cover SUSE Enterprise products, and also […]

Tags: CVE, CVSS, Security, Security Vulnerabilities, Security Vulnerability Scanners

Categories: Server, SUSE Linux Enterprise Server, Technical Solutions

By: Rich Paredes

August 4, 2015 11:42 am

3,491 views

Stay Up On Latest Security Vulnerabilities

Staying updated on the latest security vulnerabilities can be daunting which can understandably lead you to ask whether a particular version of SLES is vulnerable. The first thing to note when you get a security notification, for example from https://cve.mitre.org, https://nvd.nist.gov, or even by word of mouth, is the CVE identifier […]

Tags: CVE, Security Vulnerabilities, SLES

Categories: SUSE Linux Enterprise Server, Technical Solutions