Coverity Reports Open Source Security Making Great Strides

← Back to Stories (view on slashdot.org)

Coverity Reports Open Source Security Making Great Strides

Posted by ScuttleMonkey on Friday January 11, 2008 @09:46AM from the patting-yourself-on-the-back dept.

Coverity is claiming they have found and helped to fix more than 7,500 security flaws in open source software since the inception of the governmentally backed project designed to harden open source software. The company has also identified eleven projects that have been especially responsive in correcting security problems. "Eleven projects have been awarded the newly announced status of Rung 2, including those known as Amanda, NTP, OpenPAM, OpenVPN, Overdose, Perl, PHP, Postfix, Python, Samba, and TCL."

5 of 48 comments (clear)

Min score:

Reason:

Sort:

Anyone else by Bloke+down+the+pub · 2008-01-11 09:55 · Score: 4, Funny

Anyone else read that as "Coventry"? Bloody shit-hole, I went there once and nobody spoke to me.

--
It's true I tell you, feller at work's next door neighbour read it in the paper.
Re:Overdose by PetiePooo · 2008-01-11 09:56 · Score: 4, Funny

What is Overdose? I've searched Google, but all I get is links to Heroin recovery groups...

Ah, nevermind. Its a Yahoo! chat client. I should have searched Sourceforge instead...
Re:Dupe? by ashridah · 2008-01-11 10:00 · Score: 4, Interesting

Yes. It has a positive bias in the title (pro open source) instead of a negative one. We want slashdot to be fair and impartial right....?

ash
Experience with Nmap by katterjohn · 2008-01-11 10:06 · Score: 4, Informative

I've been working with Nmap for nearly 2 years now; I went over a Coverity scan of the Nmap source code and fixed many possible bugs (mostly NULL dereferences). Coverity has a great interface and documented the bugs well.
Update on the article is posted by ivoras · 2008-01-11 11:27 · Score: 4, Informative

There's an update on the article here: http://www.informationweek.com/blog/main/archives/2008/01/oops_look_at_th.html See also http://lists.freebsd.org/pipermail/freebsd-hackers/2008-January/022854.html for discussion on FreeBSD.

--
-- Sig down