SUSE Security Team Archives | SUSE Communities

December 22, 2017 3:37 am

2,698 views

We will switch to CVSS v3.0 starting in 2018

After our announcement back in January this year, and a transition phase where we scored both version 2 and version 3, we will finally switch entirely to the Common Vulnerability Scoring System (CVSS) version 3.0 for vulnerability assessment with the beginning of 2018. Customers who automatically check our v2 scoring will no longer see […]

Tags: CVE, CVSS, Linux, Security, Security Vulnerabilities, SUSE Security Team

Categories: SUSE Linux Enterprise Desktop, SUSE Linux Enterprise Live Patching, SUSE Linux Enterprise Server, Technical Solutions

By: Andreas Stieger

July 28, 2017 7:58 am

8,518 views

Configuring Smart Card authentication on SUSE Linux Enterprise

This guide describes the configuration of Smart Card authentication on SUSE Linux Enterprise Server 12. Smart Cards are used for user authentication and related cryptography applications. The configuration described here includes the Common Access Card (commonly referred to CAC card) , as used by the United States Department of Defense (DoD) for civil and military application. […]

Tags: CAC, DISA STIG, Security, SLES 12 Service Pack 2, SUSE Linux Enterprise 12, SUSE Security Team

Categories: SUSE Linux Enterprise Server, Technical Solutions

By: SUSE

January 16, 2017 9:17 am

5,721 views

SUSE will move to CVSS v3.0

One aspect of IT security is risk assessment and risk management. Newly announced or discovered vulnerabilities need to be evaluated and put into context to understand the impact they have. A widely-used framework to measure such issues is the Common Vulnerability Scoring System (CVSS). In practice currently two versions - CVSS v2 released in 2007 […]

Tags: CVE, CVSS, Linux, Security, SUSE Security Team

Categories: SUSE Linux Enterprise Desktop, SUSE Linux Enterprise Server

By: Meike Chabowski

June 23, 2016 9:07 am

1,805 views

Two Highlight Sessions From openSUSE Conference – Day One

My colleague Frank already shared his impressions from the first half of day one at openSUSE Conference, and I just can second his words about the keynote from Tom, Dave, and Joe about Saltstack and SUSE Manager. (BTW – I always thought a “Reactor Architecture” is something kind of a bit more scary, but […]

Tags: documentation, openSUSE, osc2016, Security, Sessions, SUSE Security Team, talks, translation, Weblate

Categories: Technical Solutions