engtech

Are there any OSS projects for building a database of metadata about software reuse assets?

We're in a work environment with multiple revision control systems, and I'm looking for a way for the different groups to be aware of what the other groups have created.

Are you bothering to check openSSL versions for internal apps like:

- revision control - wikis - tool installs like perl, python (because of LDAP authentication)

Looking around it seems like Perforce and Subversion had heartbleed vulnerabilities for specific configurations.

Looking through various LDAP plugins for different tools, they may use a version of openSSL that is vulnerable.

Should we be patching openSSL on all of the linux boxes and not just web servers?