News for hackers. Stuff that matters.

A comment on Operation Rosehub – patching thousands of open-source projects. Parent comment

Re:Operation Rosehub – patching thousands of open-source pro... by jart on Friday March 03, 2017 @05:46PM (#13787599)
Why did no one tell Apache?
[ Parent | on HN ]
Re:Operation Rosehub – patching thousands of open-source pro... by gebl on Friday March 03, 2017 @07:17PM (#13788205)
https://blogs.apache.org/foundation/entry/apache_commons_sta...

"So replacing your installations with a hardened version of Apache Commons Collections will not make your application resist this vulnerability."

[ Parent | on HN ]
Re:Operation Rosehub – patching thousands of open-source pro... by jart on Saturday March 04, 2017 @01:22AM (#13789609)
Ok well you can tell your cohort that this narrative isn't going to fly anymore.
[ Parent | on HN ]
Re:Operation Rosehub – patching thousands of open-source pro... by gebl on Saturday March 04, 2017 @12:33PM (#13791889)
What evs
[ Parent | on HN ]