Language Selection

English French German Italian Portuguese Spanish

Security of open-source software again being scrutinized

Filed under
OSS

A recent round of flaws discovered in open-source software has reignited concerns that security is getting bypassed in the rush to continue expanding the large and extremely popular code base used by millions.

For instance, although the Java-based Spring Framework was criticized by security researchers in January as having a major flaw that allowed remote-code execution by attackers against applications built with it, the updates to Spring this week don't address this security problem.

"Unfortunately, this is the way a lot of open source vulnerabilities go," said Jeff Williams, CEO at Aspect Security, which pointed out two months ago that the "expression-language" feature in Spring should be disabled until the issue related to potential remote code execution is remediated. But the updates to Spring out this week don't address this problem, though they do expand Spring functionality. Spring Framework is managed under SpringSource, a division of VMware.

rest here




More in Tux Machines

LibreOffice 4.4.1 Released With Over 100 Fixes, Install/Update To LibreOffice 4.4.1 In Ubuntu/Linux Mint


download libreoffice 4.4.1 and upgrade in ubuntu/linux mint

LibreOffice Recently released its first release LibreOffice 4.4.1 of the LibreOffice 4.4 that was released in the last of January 2015. LibreOffice is an open source and the most popular office suit available for all major platforms.
 
 

Read at LinuxAndUbuntu