DaemonForums  

Go Back   DaemonForums > DaemonForums.org > News

News News regarding BSD and related.

Reply
 
Thread Tools Display Modes
  #1   (View Single Post)  
Old 1st April 2012
J65nko J65nko is offline
Administrator
 
Join Date: May 2008
Location: Budel - the Netherlands
Posts: 3,147
Thanked 182 Times in 149 Posts
Default Repositories offer up vulnerable libraries says report

From http://h-online.com/-1498138

Quote:
A report by Aspect Security and Sonatype analysed 113 million downloads of 31 popular open source Java frameworks and security libraries and found that, of those downloads, 26% of them had a known vulnerability. The report says that this highlights the fact that organisations don't have good procedures or tools for ensuring that the libraries they use when building applications are up to date. The study looked at 31 libraries which had 1,261 different versions of themselves held in the "Central Repository", a service for Apache Maven users run by Sonatype.
__________________
You don't need to be a genius to debug a pf.conf firewall ruleset, you just need the guts to run tcpdump
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Can't install package because of libraries yggdrasil OpenBSD Packages and Ports 6 29th November 2010 03:50 PM
Adobe still distributing old vulnerable Reader J65nko News 0 18th February 2010 03:40 PM
uninstall xorg libraries for a server adrian_m FreeBSD Ports and Packages 1 26th January 2009 11:01 PM
shared libraries and linux emulation Business_woman FreeBSD General 4 16th November 2008 10:03 AM
Changing package repositories from RHEL to CentOS stukov Other BSD and UNIX/UNIX-like 10 17th June 2008 01:34 PM


All times are GMT. The time now is 03:59 AM.


Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content copyright © 2007-2010, the authors
Daemon image copyright ©1988, Marshall Kirk McKusick