消除隐匿的Linux漏洞与风险的工具

”澳大利亚调查者Silvio Cesare 发布了一个可以自动检测嵌入式Linux库中漏洞与风险的工具。该脚本关联用于第三方库的风险咨询通用漏洞披露（CVE），判断漏洞是否已转入Linux平台或尚未被的补丁。”




Graph of Fedora packages. Credit: Silvio Cesare

Fedora包图，作者Silvio Cesare




转载请注明：Linux人社区>英文资讯翻译专版.编译

英文原文：
[img=15,15]http://www.osnews.com/images/gstaroff.gif[/img] Tool Kills Hidden Linux Bugs, Vulnerabilities
posted by fran on Wed 23rd Nov 2011 18:45 UTC
[img=32,32]http://www.osnews.com/images/icons/9.gif[/img]"Australian researcher Silvio Cesare has released a tool capable of automatically detecting bugs and vulnerabilities in embedded Linux libraries. The script correlates vulnerability advisory CVEs for third party libraries to determine if holes have carried over to Linux platforms or have not been patched."