{"id":9921,"date":"2020-04-02T07:00:00","date_gmt":"2020-04-02T15:00:00","guid":{"rendered":"http:\/\/formtek.com\/blog\/?p=9921"},"modified":"2020-02-16T16:44:21","modified_gmt":"2020-02-17T00:44:21","slug":"security-open-source-and-vulnerabilities","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/security-open-source-and-vulnerabilities\/","title":{"rendered":"Security: Open Source and Vulnerabilities"},"content":{"rendered":"\n

Open Source software and security. Are Open Source projects security focused and how nimble are they in addressing reported vulnerabilities?<\/p>\n\n\n\n

With more than 300 projects, one of the biggest Open Source groups is the Apache Software Foundation (ASF). Apache software includes<\/a> Hadoop, Tomcat, Kafka, Lucene, POI, and Zookeeper. The foundation publishes an annual report<\/a> of security issues that have been reported and addressed for their software products.<\/p>\n\n\n\n

The ASF report summarizes key metrics and reported vulnerabilities. Last year, 320 reports were made to ASF concerning software vulnerabilities.<\/p>\n\n\n\n

ASF reported that<\/a> “Apache Software Foundation projects are highly diverse and independent. They have different languages, communities, management, and security models. However one of the things every project has in common is a consistent process for how reported security issues are handled. This report gave metrics for calendar year 2019 showing from the 18,000 emails received we triaged over 300 vulnerability reports leading to fixing just over 100 (CVE) issues.”<\/p>\n

\"Digg<\/a><\/div>
\"Reddit<\/a><\/div>
\"Stumble<\/a><\/div>
\"Buzz<\/a><\/div>
\"Vote<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Kick<\/a><\/div>
\"Shout<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Post<\/a><\/div>
\"Google<\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"

Open Source software and security. Are Open Source projects security focused and how nimble are they in addressing reported vulnerabilities? With more than 300 projects, one of the biggest Open Source groups is the Apache Software Foundation (ASF). Apache software…<\/span><\/p>\n

Read more ›<\/a><\/div>\n

<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31],"tags":[],"class_list":["post-9921","post","type-post","status-publish","format-standard","hentry","category-security"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/9921","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=9921"}],"version-history":[{"count":2,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/9921\/revisions"}],"predecessor-version":[{"id":9938,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/9921\/revisions\/9938"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=9921"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=9921"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=9921"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}