Apache Software Foundation Releases Security Updates

Dec 5, 2017: The Apache Foundation released a security update yesterday for their Apache Struts webserver. Applications using Apache Struts versions 2.5 to 2.5.14 are potentially affected by this vulnerability. A remote attacker could exploit one of these vulnerabilities to take control of an affected system. Initial reports suggest two issues – S2-054: The REST Plugin is using an outdated JSON-lib library which is vulnerable and allow perf…

December 5, 2017 Revenera

Open Source for IT Leaders

Gartner’s Hype Cycle for Open Source Software (2017) explains how IT leaders must understand, manage and direct how and where open source will play a role in IT roadmaps in order to maximize the business value and minimize the risks associated with these technologies The cost of ownership of open-source versus third-party proprietary solutions will always be important factor. But this year’s study highlights the shift to innovation as the d…

November 27, 2017 Revenera

What’s Going On in Open Source – Follow Our Software Composition Analysis Blog

Open source software is a hot topic in the industry – shortening the time to market for software suppliers and lowering the cost for buyers. BUT, it needs to be managed. Suppliers need to  stay in compliance with license obligations. They should also be able to produce a Bill of Materials when requested by customers, partners or as part of due diligence activities. Everyone who’s using open source software needs to track vulnerabilities and react…

November 20, 2017 Nicole Segerer

Tor Project Issues Update to Patch Security Vulnerability in Open Source Project

The Tor Project released an update late Friday to fix a vulnerability that leaks the real IP addresses of MacOS and Linux users of its Tor version 7.0.8 Browser. The patch is in an upgrade to Tor Browser 7.0.9. The Tor browser is an open source project that helps you defend against traffic analysis and ensures anonymity for it’s users. Using Tor makes it more difficult for Internet activity to be traced back to the user: this includes ̶…

November 5, 2017 Revenera