Google Uncovers 1K Bugs in Open-Source Projects in Five Months | eWeek

Google Fuzzing Service Uncovers 1K Bugs in Open-Source Projects

Daily Tech Briefing May 12
Verfasst von
eWEEK Staff
eWEEK Staff
May 13, 2017
2 minute read
eWeek Inhalte und Produktempfehlungen sind redaktionell unabhängig. Wir können Geld verdienen, wenn Sie auf Links zu unseren Partnern klicken. Mehr erfahren

Today’s topics include Google’s fuzzing service uncovering more than 1,000 bugs in open-source projects in five months, VMware helping Google make Chromebooks  better for business; Edward Snowden advocating the need for open source and OpenStack; and Dell EMC aiming servers at data center modernization efforts.

A Google-led initiative to find security vulnerabilities in popular open-source projects has unearthed more than 1,000 bugs in various open-source software applications in the five months since the effort was launched.

About 265 of those bugs are potential security vulnerabilities, the company announced in an update on its OSS-Fuzz project May 8. Open-source projects in which Google has found security vulnerabilities include FreeType with 10 flaws, LibreOffice with 33 vulnerabilities, FFmpeg with 17 and Wireshark with seven security bugs.

A breakdown of the types of bugs that Google has found so far via OSS-Fuzz shows that most open-source errors are buffer overflows, stack overflows and timeout errors.

VMware and Google revealed May 9 that they are expanding a relatively quiet partnership with the goal of accelerating the adoption of Chromebook laptops. VMware Workspace ONE, introduced at Dell EMC World in Las Vegas at the Sands Conference Center, is designed to enable one-click secure authentication and management of applications for organizations deploying Chromebooks.

The device unifies endpoint management for IT and provides a unified access experience for end users, ostensibly helping organizations evolve away from siloed management point products.

Using public cloud and proprietary software represents a “silent vulnerability” to millions of users around the world—this according to National Security Agency whistleblower Edward Snowden. Snowden appeared remotely via a video link at the OpenStack Summit in Boston May 9 in a question-and-answer keynote with OpenStack Foundation Chief Operating Officer Mark Collier.

Snowden said the average user is unaware of how the internet works. “For most people, the internet is magic,” he said.

According to Snowden, it’s not good enough to let people mindlessly build internet and cloud services, which is where OpenStack plays an important role. “What OpenStack does is it lets you close the silent vulnerability of things that you don’t control or shape,” he added.

Advertisement

Dell EMC is arming its upcoming generation of PowerEdge servers with a broad range of new and upgraded capabilities designed to help enterprises navigate their way through a rapidly evolving data center environment—one that is being roiled by the rise of such technologies as the cloud, data analytics, virtualization, software-defined infrastructure, virtual reality, machine learning and the internet of things.

At the company’s Dell EMC World 2017 show in Las Vegas earlier  this week—the first show since Dell’s $60 billion-plus acquisition of EMC last fall—executives gave the more than 13,000 attendees a preview of the 14th generation systems due out this summer to coincide with Intel’s expected release of its latest Xeon server processors.

eWeek Logo

eWeek has the latest technology news and analysis, buying guides, and product reviews for IT professionals and technology buyers. The site's focus is on innovative solutions and covering in-depth technical content. eWeek stays on the cutting edge of technology news and IT trends through interviews and expert analysis. Gain insight from top innovators and thought leaders in the fields of IT, business, enterprise software, startups, and more.

Eigentum von TechnologyAdvice. © 2026 TechnologyAdvice. Alle Rechte vorbehalten

Werbetreibenden-Offenlegung: Einige der auf dieser Website erscheinenden Produkte stammen von Unternehmen, von denen TechnologyAdvice eine Vergütung erhält. Diese Vergütung kann beeinflussen, wie und wo Produkte auf dieser Website erscheinen, einschließlich beispielsweise der Reihenfolge, in der sie erscheinen. TechnologyAdvice schließt nicht alle Unternehmen oder alle auf dem Marktplatz verfügbaren Produkttypen ein.