Speaking about security... maybe their website was brought down by an hacker :-)

On Jul 29, 2008, at 10:28 AM, Scott Gray (JIRA) wrote:


[ https://issues.apache.org/jira/browse/OFBIZ-1900?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12617739 #action_12617739 ]

Scott Gray commented on OFBIZ-1900:
-----------------------------------

Hi Shi

I did go to their Java Open Review website (http://opensource.fortify.com/ ) with the intention of registering but the register link was pointing to a login screen so I gave up. Right now I can't even get their website to load. I'll probably send them an email at some point to see if I can get access to the details.

Fortify Open Source Security Report mentioned OFBiz
---------------------------------------------------

               Key: OFBIZ-1900
               URL: https://issues.apache.org/jira/browse/OFBIZ-1900
           Project: OFBiz
        Issue Type: Bug
  Affects Versions: Release Branch 4.0
          Reporter: Shi Yusen
           Fix For: Release Branch 4.0


Though the evalution is positive, I think it would be better if somebody can contact them to make sure what security weeknesses exist in OFBiz.
http://www.fortify.com/news-events/releases/2008/2008-07-21.jsp
You can get the brief report after registrition:
http://www.fortify.com/l/oss/oss_report.html
Thanks,
Shi Yusen/Beijing Langhua Ltd.

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to