Security Holes in CVS and Subversion Found
joe_bruin writes "News.com.com is reporting a two separate vulnerabilities that affect current versions of CVS and Subversion source control systems. Apparently, major users of these products (Linux and BSD distros, Samba, etc.) have been notified and have patched their systems." Update: 05/20 02:01 GMT by S : Clarification that there are separate issues for both CVS and Subversion.
"I also understand the "millions of eyeballs" argument, but doesn't that really apply again to the "big guys.""
Well said - and a point many conveniently overlook. Most OSS programs pull in thousands and tens of thousands of lines of code that has been written by amateurs of questionable skill and reviewed not at all.
The fiction that OSS code is poured over by hundreds of talented eyes looking for each and every bug is a lie.
--> Fight tyranny and repression.... read