Language Selection

English French German Italian Portuguese Spanish

Open-Source CVS Project Plugs Security Leaks

Filed under
Security

Security researchers on Tuesday issued a warning for multiple vulnerabilities in the open-source CVS, a popular program that allows developers to keep track of different development versions of source code.

The most serious of the flaws could allow a remote compromise of unpatched servers, the open-source Concurrent Versions System Project confirmed in an advisory.

The flaws range from buffer overflows and memory leaks that could lead to code execution and denial-of-service attacks.

Security alerts aggregator Secunia has slapped a "moderately critical" rating on the vulnerabilities and recommended that users upgrade to version 1.11.20 immediately.

CVS, also known as the Concurrent Versioning System, implements a version control system that keeps track of all work and changes in the implementation of a software project.

The system is commonly used as a collaboration tool among open-source developers, and the discovery of security flaws could cause serious problems if an attacker embeds malicious code in software revisions and patches.

The CVS Project described the buffer overflow as "potentially serious" but said it may not be exploitable.

Full Story.

More in Tux Machines

Ubuntu Touch OTA-14 Officially Released with Revamped Unity 8 Interface, Fixes

A few moments ago, we've been informed by Canonical's Lukasz Zemczak about the general availability of the long-anticipated Ubuntu Touch OTA-14 software update for Ubuntu Phone and Ubuntu Tablet devices. Read more Also: Ubuntu OTA-14 Released, Fixes A Number Of Bugs

Cloud convenience is killing the open source database

Open source has never been more important or, ironically, irrelevant. As developers increasingly embrace the cloud to shorten time to market, they're speeding past open source, making it even harder to build an open source business. After all, if open source were largely a way for developers to skirt legal and purchasing departments to get the software they needed when they needed it, the cloud ups that convenience to the nth degree. In Accel's annual business review, the vaunted venture capital firm writes: "'Product' is no longer just the bits of software, it's also how the software is sold, supported, and made successful." The cloud is changing the way all software is consumed, including open source. Read more

Why the operating system matters even more in 2017

Operating systems don't quite date back to the beginning of computing, but they go back far enough. Mainframe customers wrote the first ones in the late 1950s, with operating systems that we'd more clearly recognize as such today—including OS/360 from IBM and Unix from Bell Labs—following over the next couple of decades. Read more

OpenGov Partnership members mull open source policy

The Open Government Partnership (OGP) will suggest to its member governments to create a policy on open source. This week, a draft proposal is to be finalised at the OGP Global Summit in Paris. Read more